4 ms·
If you think MS doesn't have bug bounties and more red teaming and appsec auditing than most orgs you'd be mistaken. The fact is, this is victim blaming plain a
by _8j50 3y ago
If you think MS doesn't have bug bounties and more red teaming and appsec auditing than most orgs you'd be mistaken. The fact is, this is victim blaming plain and simple with a logic error (likely) in code that was exploited by a nation state. It was the government who does not retaliate against China. I have seen no evidence of negligence or anything MS could have done better. Or any evidence that similar vulns in gcp iam, okta,etc... isn't possible.
Americans are scared shitless of a conflict with China and here you have politicians following suit, blaming MS and Biden for getting attacked instead of finding ways to retaliate -- not in kind but in an escalating, public and humiliating manner. Even if it means seeding an armed conflict.
Ask yourself wtf the NSA and CIA are doing other than spying on us and doing their best to help make minorities' lives unpleasant. If the US IC is capable and potent then they are absolutley incompetent by the fact that they keep their exploits secret because they very damn well know how pulic knowledge of a hack affects mass paychology, diplomatic relations and people's confidence in their government. CCP party members should be blaming Xi and tencent for a retaliation instead of our own politicians against our victims.