Comment on Nightmare Scenario

• bizarroland@lemmy.world ⁨3⁩ ⁨days⁩ ago

  I haven’t followed your link yet, but this did remind me that the gossip about this is that Microsoft intentionally made these vulnerabilities for spying on people for governments, and he’s dropping all of the exploits on them, forcing them to have to patch them out.

  source

  • joshcodes@programming.dev ⁨3⁩ ⁨days⁩ ago

    Never attribute to malice what incompetence can explain, or however that goes. Except for YellowKey. That was obviously a backdoor to get into bitlocker encrypted drives for either higher-upper law enforcement or their intelligence agencies. No one has presented another explanation that makes sense.

    It’s more that it adds to the statement that Microsoft are a marketing company that happens to market software. They’re more focused on profit and they benefit from there being less zero days in the media, so they do everything they can to not have cves flying around while also doing the least amount of work possible.

    Whatever is dropped in July is going to be interesting though, it’s been very hyped up.

    source

    • Tiresia@slrpnk.net ⁨3⁩ ⁨days⁩ ago

      Never attribute to malice what incompetence can explain

      It’s so sad that the Nazis wanted to give Jews a Zionist homeland but had made so many political enemies they couldn’t help them emigrate them anymore… And then those disease outbreaks in the holding camps, whew, that was some bad civil engineering. And when they installed the delousing showers they should really have fired the guy that made the delousing gas release valve dump too much into a closed space, but that’s the for of war for ya.

      Malice exists, and people like making excuses for themselves. That quote, even in its original form, has never been good advice.

      source

      • bizarroland@lemmy.world ⁨3⁩ ⁨days⁩ ago

        It’s advice worthy of consideration for interpersonal relationships.

        At any level above that, though, you are completely correct.

        source
      • far_university1990@reddthat.com ⁨3⁩ ⁨days⁩ ago

        Well no not homeland, just want to force move outside of Reich… which also supposed be entire world… lol first moonbase for jew?

        source

        • -> View More Comments
    • redsand@infosec.pub ⁨3⁩ ⁨days⁩ ago

      MSFT has a documented way of dealing with the NSA and others; NSA can request bugs go unpatched for a time window (possibly indefinitely) and Microslop just leaves it until it’s a problem or the window expires.

      Yellow key and XML surprisingly blatant

      source
    • redsand@infosec.pub ⁨3⁩ ⁨days⁩ ago

      XML also looks like a backdoor and from the did not patch description of some of the others likely more

      source