3 ms·

Am I the only one who thinks it's incredibly suspicious that the folks that "discovered" the Azure security issues were the same guys who were responsible for C

Am I the only one who thinks it's incredibly suspicious that the folks that "discovered" the Azure security issues were the same guys who were responsible for Cloud Security at Azure? https://www.wiz.io/press-releases/wiz-emerges-from-stealth-with-100-million-series-a-financing-and-a-mission-to-reinvent-cloud-security https://www.wiz.io/press-releases/wiz-emerges-from-stealth-w...

munchbunny 5y ago
Suspicious as in they might have left Microsoft knowing about these issues, or that they're a plant by Microsoft? It's quite likely they had insider knowledge and therefore had a better idea of where to look. But I'm not sure that makes it "suspicious", as opposed to... well, what else would you expect in those circumstances? Or are you saying that the unfair advantage of insider knowledge is what makes it suspicious?
Mountain_Skies 5y ago
At a previous job I was tasked with writing our bug bounty policy. I was also in charge of running and reviewing all of the SAST and DAST scans. It was tempting to monetize that potential conflict of interest, especially after I left the company.