Feeds

Windows Live suffers user details identity crisis

Microsoft fesses to yet another online data blunder

Security for virtualized datacentres

Microsoft’s online Windows Live estate was hit by a major server shutdown for about an hour yesterday, after some users of the service complained that they could see other people’s accounts.

“As some of you may have noticed (we heard from you on Twitter!) we had an issue with the Windows Live ID service between 9 and 10AM PST this morning,” admitted Microsoft’s Arthur De Haan yesterday.

“Due to the failure of one server, Windows Live ID logins were failing for some customers, and this increased the load on our remaining servers. We took the problematic server offline and brought a new server into rotation. We identified the root cause and fixed it in less than an hour, but it took a while to resolve the logjam that had built up in the meantime, and to redistribute the load to normal levels.”

We heard from several users affected by the Windows Live security flaw.

"A friend of mine logged into Hotmail through her phone and opened someone else's Hotmail account. She tried twice more and it happened both times, each time opening yet another person's Hotmail," Reg reader Denise Marshall told us.

"This happened when Hotmail's servers were down earlier today but somehow she was able to get on with her phone... I thought this is something really important people should be aware about, especially with online banking and important personal info online."

Microsoft said it would “fully investigate the cause” and apologised for its latest cloud-based failure. In the past few months alone Microsoft has coughed to a series of online user data cockups.

It’s not clear at this stage if Microsoft decided to shutter one of its servers while the company’s wonks attempted to fix the problem, or if the system simply died on its arse.

Microsoft's Windows Live ID system went offline at around 12.30pm New York time, according to user reports. It prevented some people from accessing their Hotmail accounts and other Windows Live services. Redmond said it manages around 460 million online IDs worldwide.

We’ve asked Microsoft to tell us more about what went wrong and whether yesterday morning’s three-hour outage of the firm’s newly launched Windows Phone 7 Series website was related to the Windows Live server blunder.

"The 'Service Unavailable' message [shown on the Windows Phone 7 Series site yesterday] is a well known error message for IIS servers that don't have the correct version of .NET installed or for rights permissions. I don't think that error would be created from too much traffic as it is a message from the web server," noted Reg reader Dave Simmons.

The Register will update this story if we hear back from Microsoft. ®

Beginner's guide to SSL certificates

More from The Register

next story
Microsoft on the Threshold of a new name for Windows next week
Rebranded OS reportedly set to be flung open by Redmond
Business is back, baby! Hasta la VISTA, Win 8... Oh, yeah, Windows 9
Forget touchscreen millennials, Microsoft goes for mouse crowd
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple: SO sorry for the iOS 8.0.1 UPDATE BUNGLE HORROR
Apple kills 'upgrade'. Hey, Microsoft. You sure you want to be like these guys?
ARM gives Internet of Things a piece of its mind – the Cortex-M7
32-bit core packs some DSP for VIP IoT CPU LOL
Lotus Notes inventor Ozzie invents app to talk to people on your phone
Imagine that. Startup floats with voice collab app for Win iPhone
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.