4 ms·

> We rarely see security teams move so fast! They disabled the vulnerable notebook feature within 48 hours after we reported it. It’s still turned off for all c

• onionisafruit 5y ago
  That’s what I was thinking. I was once responsible for a RCE vulnerability that was reported to hackerone on Christmas afternoon. Even then I took less than 1/48th the time to disable the feature and had a patch ready in half the time it took them to just disable jupyter notebooks. I’m not claiming to be better at my job than their response team. I’m almost certainly not. The difference is I didn’t have to have meetings with 20 different internal stakeholders before acting.
• grawprog 5y ago
  When I worked for a shop running windows powered CNC machines, an update broke a bunch of more updated machines one of our partner shops used, dozens of shops were affected by this. It took a few hours for Microsoft to fix the problem, they responded within a half hour or so of the first complaint. Two days seems like a long time for Microsoft to respond when commercial customer's businesses are at stake. Say what you want about Microsoft, i don't really like them, but their enterprise/commercial support is honestly pretty top notch, I'm really surprised it took them that long to get on top of that considering the calibre of customers involved.
• kerng 5y ago
  Yeah, 48 hours doesn't seem too fast - but better then multiple months as with Exchange