It took them 6 months to fix this properly?

Considering that they had to rework things to not use the master key, I can understand the time and effort. From TFA, the DB Gateway handled all Cosmos requests, and used the master key to get an account’s private key and then forward the DB requests. If they had to rearchitect that gateway system, I’m sure it was no small task. Bear in mind, they probably approached this somewhat seriously since Cosmos powers lots of internal M$ tools like Teams and Copilot, not just customer applications.

They patched the vulnerability within 2 days. They spent 6 months rearchitecting their backend. It's a major service for themselves and tens of thousands of customers, you don't vibe code yourself a new database query execution engine overnight.

Rejecting the premise: who says they fixed it properly?

It's Microsoft, of course. Their org chart basically dictates it.

Anthropic pushed for the US government to introduce regulations. The US government said no, citing potential stifling of innovation.

What do you define as professional AI? If you're talking about enterprise AI I'd say they are well ahead of Microsoft and AWS.

AI assisted is a stretch. And that analogy isn't even close to being relevant

I don't understand how these AI written articles get so many votes.

There is a very high volume of them being posted every day, and they are a significant % of the total. Also, writing is hard, LLM articles can be slop whilst also being better written than average.

Defenders have context that attackers don't though.

Did you need to do anything special to get access to Codex Security?

Not sure what the threshold is but I sent them all of my bug bounty profiles and papers I’ve authored.

I don’t think you need all of that though. I know a whole mess of people that have gotten it for much less. Should just give it a try.

Keep the pitchforks at bay for now. No one knows what actually happened yet and we are only seeing one side of this outage.

I don't think this is intended for production

Then why would SuSE spend money on it?

Thanks ChatGPT