11–20 of 264 posts
I feel that I read something like this almost every single time Microsoft is mentioned in a vulnerability disclosure. What makes the company so bad at dealing with security reports? I don't expect it to be a lack of talents or resources, or is it?
Earlier quoted context omitted.
Make all software which isn't released as open source liable for the cost of security breaches?
great way to not have any software released ever
It would increase the barrier to releasing software massively (possibly killing the startup scene altogether), but it doesn't mean software development would end.
Microsoft should (but won't) reconsider the idea that one chatbox to rule many underlying types of software is a good idea.
Also sad to see how Microsoft is treating security researchers, instead of thanking them with a small bug bounty. Especially for the one (or maybe two) DoS vulns
Earlier quoted context omitted.
Make all software which isn't released as open source liable for the cost of security breaches?
great way to not have any software released ever
This was, I am almost certain, inspired by Microsoft corporate sales getting their hooks into management.
This was largely because of news stories like "end to end encryption doesnt really work as advertised" and "if you leave a room password unprotected bad people will enter". The level of press coverage was off the scale compared to what Teams got for far worse issues.
The vulnerabilities werent nothing but they werent even in the same ballpark as the MS teams vulnerabilities foisted on us for "security reasons" like this howler they tried to cover up https://www.techradar.com/news/microsoft-may-have-downplayed...
Still waiting for these guys to update their MacOS app, we use it in our company and it's so bad that our own team uses Slack.
Not to mention it's an Intel only binary, what's the point of using these dreadful electron cross-platform apps if they can't even be built as universal binaries.
The way Microsoft handles Teams annoys the crap out of me the MacOS and Linux versions are left to die basically.
> We reported the issues to Microsoft in March 2021, who has only remediated one so far I feel that I read something like this almost every single time Microsoft is mentioned in a vulnerability disclosure. What makes the company so bad at dealing with security reports? I don't expect it to be a lack of talents or resources, or is it?
Earlier quoted context omitted.
Not to mention it's an Intel only binary, what's the point of using these dreadful electron cross-platform apps if they can't even be built as universal binaries.
I know right? Plus MS Teams is the among the most used apps in the enterprise world how come the only good version of it is only available in Windows 11 where most workplaces aren't even pushing it to their users. The way Microsoft handles Teams annoys the crap out of me the MacOS and Linux versions are left to die basically.