2 ms·
This is one of those bugs that really should never happen, and one wonders how Microsoft could have missed it and failed to take it seriously. This isn't a par
by jasonhansel 5y ago
This is one of those bugs that really should never happen, and one wonders how Microsoft could have missed it and failed to take it seriously.
This isn't a particularly sophisticated or novel attack vector, difficult as it was to find; it's the sort of injection attack caused by string interpolation that should have been caught long before anything was shipped.
- ricardobayes 5y agoOne architect said so and there is a ticket about it, no one questions things when it comes to implementation.
- howdydoo 5y agoI've used Windows since 3.1, but I think this new direction is the beginning of the end for Windows. Combining an OS that relies heavily on remote services, with engineers that don't understand security, is a recipe for disaster. At the drop of a hat your OS can break because some remote service breaks[1], or worse, your system gets compromised because the attack surface has grown to size of a small country. I don't want to be one of the inevitable victims. I'm switching to Linux for my next build. [1]: https://www.xda-developers.com/microsoft-breaks-windows-11-by-injecting-ads/ https://www.xda-developers.com/microsoft-breaks-windows-11-b...
- lopis 5y agoIt's really wild that Windows is essentially becoming a big web app. I guess they just realized that ChromeOS, not MacOS or Linux, is their main competitor. Whoever wants macos/linux will get it, but schools and offices are systematically turning to ChromeOS for simplicity and that just won't do.