[HN Gopher] Microsoft takes pains to obscure role in 0-days that...
       ___________________________________________________________________
        
       Microsoft takes pains to obscure role in 0-days that caused email
       breach
        
       Author : fauigerzigerk
       Score  : 75 points
       Date   : 2023-07-15 19:27 UTC (3 hours ago)
        
 (HTM) web link (arstechnica.com)
 (TXT) w3m dump (arstechnica.com)
        
       | mcpackieh wrote:
       | Shouldn't the use of zero days slightly vindicate Microsoft? It's
       | certainly not a good look, but at least they weren't willfully
       | neglecting to patch issues known to them.
        
       | Veserv wrote:
       | 0-day is such a poor word. We should really be calling it by the
       | generic cross-domain term, a defect, in this case a security
       | defect. Microsoft is selling a defective product where new
       | defects are regularly identified and regularly cause failures and
       | harm.
       | 
       | It is generally frowned upon or illegal to sell defective
       | products. In many other industrys the discovery of multiple,
       | repeated defects in a product allows the customer to get a full
       | refund with protection from retaliation. Only in software do we
       | call defects a oopsie and throw our hands up in the air as if
       | nothing could be done and let companys off the hook.
       | 
       | Normalizing this process by handling trillion dollar companys
       | with kids gloves is ridiculous. They are selling defective
       | products and should be treated like it.
        
       | 2OEH8eoCRo0 wrote:
       | Victim blaming. Microsoft can do better but practically no
       | organization can withstand the cyber onslaught coming out of
       | China.
        
       ___________________________________________________________________
       (page generated 2023-07-15 23:01 UTC)