4 ms·

https://twitter.com/rsyncnet/status/1394304666175885321 https://twitter.com/rsyncnet/status/1394304666175885321

by rsync 5y ago

pwdisswordfish0 5y ago
> Russian hackers are a diversion from the real problem: Microsoft Windows and a 25-year legacy of terrible security holes.
1vuio0pswjnm7 5y ago
IMHO, for what it is (or was), Twitter overuses Javascript. twit rsyncnet |grep -o ".{71}5321.{563}" |sed -n 2p For twit, see https://news.ycombinator.com/item?id=27056734 https://news.ycombinator.com/item?id=27056734 Output: "Mon May 17 14:51:52 +0000 2021","conversation_id_str":"1394304666175885321","display_text_range":[0,205],"entities":{"user_mentions":[{"id_str":"74286565","name":"Microsoft","screen_name":"Microsoft","indices":[56,66]}],"urls":[],"hashtags":[{"indices":[67,75],"text":"Windows"}],"symbols":[]},"favorite_count":2,"favorited":false,"full_text":"Russian hackers are a diversion from the real problem: @Microsoft #Windows and a 25 year legacy of terrible security holes. DECADES of getting owned by autorun.inf and LANMAN, etc. Whose fault is that ?","is_quote_status":false,"lang":"en","quote_count":0,"reply_count":0,"retweet_count":1, It is amazing how Microsoft can escape all liability for the problems of "cybersecurity". Perhaps this is what happens when competition has been eliminated (not by superior product quality) and there are no alternatives. Quality control problems with the product must be lived with along with endless diversions/scapegoats.
shadowgovt 5y ago
I think these problems are somewhat intertwined. One person's feature is another person's increase in the exploit surface. An OS with enough features to be the most popular one on the planet may always end up with the most security holes. I can, anecdotally, name at least one example where cross-platform had a feature that was trivial on Windows, and nearly impossible to implement on MacOSX (until Apple widened the graphics API to make it much easier because they needed the feature for QuickTime)... because it required one process to be able to render into the windows owned by another process. This enabled all kinds of cool features... Including the ability to spoof a dialog box in another app that made it look like it was asking for your credentials, while sending the data to an attacking app.

https://twitter.com/rsyncnet/status/1394304666175885321 https://twitter.com/rsyncnet/status/1394304666175885321

by rsync 5y ago

https://twitter.com/rsyncnet/status/1394304666175885321 https://twitter.com/rsyncnet/status/1394304666175885321

> Russian hackers are a diversion from the real problem: Microsoft Windows and a 25-year legacy of terrible security holes.

1vuio0pswjnm7 5y ago

IMHO, for what it is (or was), Twitter overuses Javascript. twit rsyncnet |grep -o ".{71}5321.{563}" |sed -n 2p For twit, see https://news.ycombinator.com/item?id=27056734 https://news.ycombinator.com/item?id=27056734 Output: "Mon May 17 14:51:52 +0000 2021","conversation_id_str":"1394304666175885321","display_text_range":[0,205],"entities":{"user_mentions":[{"id_str":"74286565","name":"Microsoft","screen_name":"Microsoft","indices":[56,66]}],"urls":[],"hashtags":[{"indices":[67,75],"text":"Windows"}],"symbols":[]},"favorite_count":2,"favorited":false,"full_text":"Russian hackers are a diversion from the real problem: @Microsoft #Windows and a 25 year legacy of terrible security holes. DECADES of getting owned by autorun.inf and LANMAN, etc. Whose fault is that ?","is_quote_status":false,"lang":"en","quote_count":0,"reply_count":0,"retweet_count":1, It is amazing how Microsoft can escape all liability for the problems of "cybersecurity". Perhaps this is what happens when competition has been eliminated (not by superior product quality) and there are no alternatives. Quality control problems with the product must be lived with along with endless diversions/scapegoats.

shadowgovt 5y ago

I think these problems are somewhat intertwined. One person's feature is another person's increase in the exploit surface. An OS with enough features to be the most popular one on the planet may always end up with the most security holes. I can, anecdotally, name at least one example where cross-platform had a feature that was trivial on Windows, and nearly impossible to implement on MacOSX (until Apple widened the graphics API to make it much easier because they needed the feature for QuickTime)... because it required one process to be able to render into the windows owned by another process. This enabled all kinds of cool features... Including the ability to spoof a dialog box in another app that made it look like it was asking for your credentials, while sending the data to an attacking app.