7 ms·
> We reported the issues to Microsoft in March 2021, who has only remediated one so far I feel that I read something like this almost every single time Microso
by dgellow 5y ago
> We reported the issues to Microsoft in March 2021, who has only remediated one so far
I feel that I read something like this almost every single time Microsoft is mentioned in a vulnerability disclosure. What makes the company so bad at dealing with security reports? I don't expect it to be a lack of talents or resources, or is it?
- charcircuit 5y agoMicrosoft seemed to have responded to all of them though.
- llarsson 5y agoA response of "WONTFIX" is still a response, sure, but not the one most would want for a security-related issue.
- cloudengineer94 5y agoTheir SOC Team for consumer/prosumer oriented apps is terrible. I knew someone working there that left to join the Azure team within the company so go figure...
- clavicat 5y ago
- thrower123 5y agoNine months to fix a simple issue is cracking on for the Teams division. Their tempo is almost as ponderous as their product.
- AnimalMuppet 5y agoThere may be an element of survivorship bias. You hear about the ones where someone whines that they didn't fix it. When they fix it quickly, all you hear are the grumbles about yet another software update.