• AlmightySnoo 🐢🇮🇱🇺🇦
    link
    fedilink
    English
    12610 months ago

    It seems this isn’t about customer data:

    The exposed data included full backups of two employees’ computers. These backups contained sensitive personal data, including passwords to Microsoft services, secret keys, and more than 30,000 internal Microsoft Teams messages from more than 350 Microsoft employees.

    • ChapolinColoradoNZ
      link
      fedilink
      English
      3810 months ago

      Some of that data could be from (or for) customer use, like the service passwords.

      • @xthexder@l.sw0.com
        link
        fedilink
        English
        5810 months ago

        They probably mean like private ssh keys and developer credentials, not production keys. Microsoft does not give signing keys to developers, code releases have to get signed through the build servers.

      • @henfredemars@infosec.pub
        link
        fedilink
        English
        1010 months ago

        The cloud is just somebody else’s computer. You give up some control and get some convenience. I’m paranoid about their cloud services and cloud services in general.

      • GigglyBobble
        link
        fedilink
        210 months ago

        On a local pc no less. They don’t use password repos at Microsoft?