I haven’t followed your link yet, but this did remind me that the gossip about this is that Microsoft intentionally made these vulnerabilities for spying on people for governments, and he’s dropping all of the exploits on them, forcing them to have to patch them out.
Never attribute to malice what incompetence can explain, or however that goes. Except for YellowKey. That was obviously a backdoor to get into bitlocker encrypted drives for either higher-upper law enforcement or their intelligence agencies. No one has presented another explanation that makes sense.
It’s more that it adds to the statement that Microsoft are a marketing company that happens to market software. They’re more focused on profit and they benefit from there being less zero days in the media, so they do everything they can to not have cves flying around while also doing the least amount of work possible.
Whatever is dropped in July is going to be interesting though, it’s been very hyped up.
Never attribute to malice what incompetence can explain
It’s so sad that the Nazis wanted to give Jews a Zionist homeland but had made so many political enemies they couldn’t help them emigrate them anymore… And then those disease outbreaks in the holding camps, whew, that was some bad civil engineering. And when they installed the delousing showers they should really have fired the guy that made the delousing gas release valve dump too much into a closed space, but that’s the for of war for ya.
Malice exists, and people like making excuses for themselves. That quote, even in its original form, has never been good advice.
MSFT has a documented way of dealing with the NSA and others; NSA can request bugs go unpatched for a time window (possibly indefinitely) and Microslop just leaves it until it’s a problem or the window expires.
plateee@piefed.social 2 months ago
I think it’s regarding a Microsoft security researcher who is on a hot streak for exploits.
https://www.darkreading.com/vulnerabilities-threats/nightmare-eclipse-microsoft-exploit-rogueplanet
bizarroland@lemmy.world 2 months ago
I haven’t followed your link yet, but this did remind me that the gossip about this is that Microsoft intentionally made these vulnerabilities for spying on people for governments, and he’s dropping all of the exploits on them, forcing them to have to patch them out.
joshcodes@programming.dev 2 months ago
Never attribute to malice what incompetence can explain, or however that goes. Except for YellowKey. That was obviously a backdoor to get into bitlocker encrypted drives for either higher-upper law enforcement or their intelligence agencies. No one has presented another explanation that makes sense.
It’s more that it adds to the statement that Microsoft are a marketing company that happens to market software. They’re more focused on profit and they benefit from there being less zero days in the media, so they do everything they can to not have cves flying around while also doing the least amount of work possible.
Whatever is dropped in July is going to be interesting though, it’s been very hyped up.
Tiresia@slrpnk.net 2 months ago
It’s so sad that the Nazis wanted to give Jews a Zionist homeland but had made so many political enemies they couldn’t help them emigrate them anymore… And then those disease outbreaks in the holding camps, whew, that was some bad civil engineering. And when they installed the delousing showers they should really have fired the guy that made the delousing gas release valve dump too much into a closed space, but that’s the for of war for ya.
Malice exists, and people like making excuses for themselves. That quote, even in its original form, has never been good advice.
redsand@infosec.pub 2 months ago
MSFT has a documented way of dealing with the NSA and others; NSA can request bugs go unpatched for a time window (possibly indefinitely) and Microslop just leaves it until it’s a problem or the window expires.
Yellow key and XML surprisingly blatant
redsand@infosec.pub 2 months ago
XML also looks like a backdoor and from the did not patch description of some of the others likely more