There is a Python agent inside the Azure VMs that communicates over TCP/80 and has fun methods like DeleteRootPassword & Deprovision

— Matt Franz (@seclectech) August 4, 2012

Another fun fact Azure VM “endpoints” (very primitive security groups) only allow you to specify TCP and UDP ports.

— Matt Franz (@seclectech) August 4, 2012

OK, so, you could say something like “each and every EC2 VM running Linux has the capability to be SSHed into and be driven remotely, shutdown or reinstalled. And you could do the same from the Dashboard, too…” – and you’d be right.

But still: wanna take bets which one is harder to abuse? Especially given the noddy filtration?