Comment on Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

Bluegrass_Addict@lemmy.ca ⁨4⁩ ⁨days⁩ ago

• Telorand@reddthat.com ⁨4⁩ ⁨days⁩ ago

  why anyone would trust these companies to pay out

  AFAIK, they historically have

  why anyone would help them fix their problems at this point

  They’re not “helping,” they’re trying to get paid by finding exploits legally, rather than using them illegally. And if someone is particularly good, it can be lucrative work. It’s historically been a mutually beneficial arrangement, so it’s ironic if M$lop thinks they can cut out human researchers (ostensibly swapping them for AI agents) and still maintain a secure codebase.

  To me, this is M$lop trying to cut costs from the wrong thing; may they get what they deserve.

  source

  • grey_maniac@lemmy.ca ⁨4⁩ ⁨days⁩ ago

    ETA? In my life experience that means estimated time to arrival. What do you mean in this context?

    source

    • avguser@lemmy.world ⁨4⁩ ⁨days⁩ ago

      Edited to add

      source
    • Zoop@beehaw.org ⁨3⁩ ⁨days⁩ ago

      In this context, it means ‘edited to add’

      source
  • redsand@infosec.pub ⁨3⁩ ⁨days⁩ ago

    Selling exploits is more of a legal gray area depending on jurisdiction and licensing.

    source
• 4am@lemmy.zip ⁨4⁩ ⁨days⁩ ago

  Isn’t this guy trying to make Microsoft look bad?

  source

  • lurch@sh.itjust.works ⁨4⁩ ⁨days⁩ ago

    idk from my perspective he’s trying to show them how they really are. beauty is in the eye of the beholder

    source