4 ms·
In the past Microsoft has had issues with subdomain takeovers[0], resulting in spam being distributed by their own domains. Without strict guarantees and contr
by kemotep 5y ago
In the past Microsoft has had issues with subdomain takeovers[0], resulting in spam being distributed by their own domains.
Without strict guarantees and control over the way this content is delivered to end user systems, how can we know that a similar type of attack could not happen? This time in a potentially administrative level file explorer?
[0]: https://www.zdnet.com/article/microsoft-has-a-subdomain-hijacking-problem/ https://www.zdnet.com/article/microsoft-has-a-subdomain-hija...
- gruez 5y ago>Without strict guarantees and control over the way this content is delivered to end user systems, how can we know that a similar type of attack could not happen? This time in a potentially administrative level file explorer? Sounds like you're not really against ads, but any sort of stuff that can change runtime behavior (eg. feature flagging) or retrieves content dynamically.
- kemotep 5y agoI would say that I am not pro-advertisements but I understand things need to be paid for. Software worth using is worth paying for. But I would prefer to pay in currency and not time and attention. Additionally, a paid Operating System pushing additional premium features on increasingly more and more pixels is a little egregious. My file browser should be boring and not contain surprises.
- chaorace 5y agoI don't believe it has yet been established if these ads are downloaded on-demand. If the messaging is instead shipped via Windows Update, I don't think that would create any additional attack surfaces.