mol4711

4 ms·

1. 1.▲
   by mol4711 5y ago

   This JNDI "feature" is 8 years old. It was merged in 2013 from what I have seen, and has been defended by some as an "useful" feature. It has been known since at least BlackHat 2016 presentation that this is an incredibl
2. 2.▲
   by mol4711 5y ago

   The Schrems II judgement might be applicable. I know that in the EU-based company I work for we have strict requirement for all cloud providers to comply with Schrems II, and not send/store any personal data to outside EU. https:&#x2F
3. 3.▲
   by mol4711 6y ago

   How about their bug tracking software, MS equivalent to Jira issue tracker (I assume they aren't using an outside product). Do we know if they had access to their issue tracker? That would make it far easier to make zero-day exploits f