News: 1700508313

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft pushes Azure Government Cloud as homefront defender

(2023/11/20)


Microsoft is pushing the AUKUS trio – Australia, the UK, and the US – to update cross-border info collaboration, and - of course - it has just the thing: the classified Azure Government Cloud.

The [1]call was made by Scott Gills, program manager in defense and intelligence for Microsoft, and noted the need for the three English-speaking nations to collaborate securely in light of the specter of Software Defined Warfare. And pay Redmond of course.

Gills rattled off a list of capabilities needed by AUKUS partners, from collaborating through familiar tools, analytics, and decision-making to research and innovation. And where could one find those capabilities? Why, the Azure Government Cloud, of course.

[2]

There are a couple of problems that leap out here. First, as Gills himself noted, the classified Azure Government Cloud was "built exclusively in support of US agencies." Yes, partners working with classified data can use it, but one must not lose track of its primary reason for existing. Secondly, AGC provides the same principles and architecture as Microsoft’s commercial cloud solutions.

[3]UK and Japan ink agreement for semiconductor and security cooperation

[4]As defense tech goes commercial, does national security miss out?

[5]UK, Australia, to build 'network of liberty that will deter cyber attacks before they happen'

[6]USA signs internet freedom and no-hack pact it's ignored since 2018

As a reminder: a large chunk of Microsoft's cloud in Australia [7]fell over in August , an incident attributed - in part - to a lack of staff on site.

Gills said: "To help accelerate progress, AUKUS needs access to classified Azure Government Cloud."

[8]

In some ways, he is correct. AUKUS members will need to up their collaboration game as time goes by, and something like the Azure Government Cloud is a possibility. However, considering Azure Government Cloud datacenters are [9]located exclusively in the US , the partners might also prefer something that is a little more sovereign for themselves.

AUKUS is all about defense capability and cooperation between the three countries and the most notable result so far has been around nuclear submarines with contracts [10]recently signed off for the design and purchase of long-lead items for a new generation of underwater predators. The first UK examples are expected to enter service during the late 2030s, with Australian submarines following in the early 2040s.

[11]

While lead times measured in years - or decades - might be all well and good for something like a nuclear submarine, it's less than ideal in the fast-moving cybersecurity landscape. Microsoft gives the example of its work with Ukraine in identifying and remediating various cyber threats since February 2022.

Indeed, those submarines are only one - admittedly large - part of the AUKUS plans. As a first stage it's about the provision of a conventionally armed nuclear submarine capability. Second is "Advanced Capabilities" - think electronic warfare, information sharing, cyber security, and, of course, quantum and AI. ®

Get our [12]Tech Resources



[1] https://devblogs.microsoft.com/azuregov/accelerating-aukus/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZVvlE0lRoh8OdTAFZLtJMgAAANI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.theregister.com/2023/05/19/uk_japan_hiroshima_accord_semiconductors/

[4] https://www.theregister.com/2023/04/05/national_security_innovation/

[5] https://www.theregister.com/2022/01/21/uk_australia_cyber_and_critical_technology_partnership/

[6] https://www.theregister.com/2021/11/11/usa_supports_paris_call/

[7] https://www.theregister.com/2023/09/04/microsoft_australia_outage_incident_report/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZVvlE0lRoh8OdTAFZLtJMgAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-welcome

[10] https://www.theregister.com/2023/10/03/aukus_submarine_contracts/

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/publicsector&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZVvlE0lRoh8OdTAFZLtJMgAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] https://whitepapers.theregister.com/



"There are a couple of problems that leap out here"

Pascal Monett

Yeah, the first one being Borkzilla's tendancy to fat-fingered configuration. The next being its long-standing tendancy to screw up.

I'd be interested in knowing when was the last time Interpol's servers were down. I'm willing to bet it was not this year, nor last year. Borkzilla can't last 90 days without an outage somewhere (and I'm being generous). That'll be really efficient for inter-governmental collaboration when their "secure" platform is so secure they can't log into it.

Re: "There are a couple of problems that leap out here"

Anonymous Coward

That's not the main problem. You don't want Microsoft's data hoovering anywhere near anything that could start investigating their executives at some point.

I work at a company which is a major MS client (of a level that I should have written 'major' in caps, but I refuse), and I've had a chat with sysadmins and security people who showed me just how much surveillance hides in everything they do (they next day, the chat was over beer, of course). I'm surprised they don't also record mouse movements, but I think that's mainly because either they haven't gotten to it yet, or they're too busy convincing people to use the facial logons so that they now also have an excuse to leave any camera permanently on.

The closest I am going to get to that at home is running a web client in an isolated VM. Oh, and those nice programs that prevent all that surveillance? By a truly remarkable coincidence, MS Defender dubbed them malware..

Google may see everything you do online, but Microsoft sees what you do on your machine. I'm not quite sure yet which is worse.

You may easily play a joke on a man who likes to argue -- agree with him.
-- Ed Howe