Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation

57 points · 8 comments · view on lemmy.world

8 Comments

Lodespawn@aussie.zone · 20 pts · 78d

Jokes on you security guy, Microsoft is gonna slop up a bunch more exploits in the next week and force them out via windows update and your stupid exploits will be redundant

Bluegrass_Addict@lemmy.ca · 9 pts · 79d (6 replies)

stop... helping...microsoft...

why anyone would trust these companies to pay out, and why anyone would help them fix their problems at this point is beyond me. let them sink and burn.

Telorand@reddthat.com · 15 pts · 78d (3 replies)

why anyone would trust these companies to pay out

AFAIK, they historically have

why anyone would help them fix their problems at this point

They're not "helping," they're trying to get paid by finding exploits legally, rather than using them illegally. And if someone is particularly good, it can be lucrative work. It's historically been a mutually beneficial arrangement, so it's ironic if M$lop thinks they can cut out human researchers (ostensibly swapping them for AI agents) and still maintain a secure codebase.

To me, this is M$lop trying to cut costs from the wrong thing; may they get what they deserve.

ETA: and if they make it impossible to make a living at reporting exploits legally, there's really only one option left to make a living...

grey_maniac@lemmy.ca · 7 pts · 78d (1 reply)

ETA? In my life experience that means estimated time to arrival. What do you mean in this context?

avguser@lemmy.world · 7 pts · 78d

Edited to add

redsand@infosec.pub · 3 pts · 78d

Selling exploits is more of a legal gray area depending on jurisdiction and licensing.

4am@lemmy.zip · 1 pts · 78d (1 reply)

Isn’t this guy trying to make Microsoft look bad?

lurch@sh.itjust.works · 4 pts · 78d

idk from my perspective he's trying to show them how they really are. beauty is in the eye of the beholder