Re: Azure and security trust

2015-02-25 Thread Tom Rutter
+1 for Greg. This reminds me of a time we pranked the *head security guy* at a company I worked for and easily convinced him to give us some private details like his home address, car rego and so on. On Wed, Feb 25, 2015 at 8:32 PM, Greg Low (博士低格雷格) g...@greglow.com wrote: I do find it

Re: Azure and security trust

2015-02-25 Thread Craig van Nieuwkerk
Yes, it is like the easiest way to get someones password is to just ask them for it. Surprising how many people will give it to you once you have their trust. On Thu, Feb 26, 2015 at 8:57 AM, Tom Rutter therut...@gmail.com wrote: +1 for Greg. This reminds me of a time we pranked the *head

RE: Azure and security trust

2015-02-25 Thread 博士低格雷格
A site I was working at last week required us all to take a security class to help keep their systems secure. The class was the usual mind-numbing stuff. In the class, it told us how important it was to use special characters in passwords. The beautiful part of that was that to register for the

Re: Azure and security trust

2015-02-25 Thread David Richards
Wow, so much irony it alters the earth's magnetic field. Getting carried away with password requirements is quite annoying though. One site I've used had such ridiculous requirements it took me half an hour to come up with an acceptable password. For this reason I get the browser to remember it

Re: Azure and security trust

2015-02-25 Thread Greg Keogh
*(resend due to forgetting to remove the quoted content and thereby blowing the post size limit)* Chaps, thanks for the great comments on this. I've forwarded a paste-up of the important parts to the person I'm working with on the hospital data. Next time I talk to someone who manages web

Re: Azure and security trust

2015-02-25 Thread Grant Maw
It may not be the state of play right now, but I suspect that in the not too distant future, it will be *compulsory* to store data in Azure, AWS or their like, because of the reasons that Greg L mentions above. They'll simply be able to do a better job at securing the data than overworked in-house

Re: Azure and security trust

2015-02-25 Thread Grant Maw
Sorry, to clarify - when I say compulsory I mean that clients will most likely demand it, not compulsory from a legal standpoint :) On 25 February 2015 at 20:18, Grant Maw grant@gmail.com wrote: It may not be the state of play right now, but I suspect that in the not too distant future, it

RE: Azure and security trust

2015-02-25 Thread 博士低格雷格
I do find it amusing when I hear these stories though, where companies think the data is safer or more secure or more private on premises than somewhere like Azure. On their worst day the Azure guys will do a better job of this stuff than any company I’ve walked in to, and I’ve been to a lot.