[HN Gopher] Microsoft Azure vulnerability affecting thousands of...
       ___________________________________________________________________
        
       Microsoft Azure vulnerability affecting thousands of new subdomains
       each month
        
       Author : brettbog
       Score  : 19 points
       Date   : 2023-06-19 20:55 UTC (2 hours ago)
        
 (HTM) web link (www.keytos.io)
 (TXT) w3m dump (www.keytos.io)
        
       | robertlagrant wrote:
       | I don't understand why these domains are not always subdomains of
       | the main account domain. Or at least have that as the default.
        
       | what-the-grump wrote:
       | I'm sorry if I'm just dumb or don't understand.
       | 
       | This is dns record pointing at an azure resource that's been
       | removed, and the attacker resolves your entire zone then goes and
       | tries to provision an azure resource with the same public name or
       | IP.
       | 
       | How is this different for any other provider, like Shopify,
       | wordpress, etc?
        
       | jiggawatts wrote:
       | This is the second "panic, panic, Azure is insecure!" article
       | posted by a green (new) user in a week. [1]
       | 
       | Feels like YCombinator is becoming the new target for
       | Astroturfing now that Reddit is a wasteland of API protests.
       | 
       | [1] the other one: https://news.ycombinator.com/item?id=36347915
        
       ___________________________________________________________________
       (page generated 2023-06-19 23:00 UTC)