GitHub bans security researcher who posted zero-day Windows exploits • Hacker News Board

Re: GitHub bans security researcher who posted zero-day Windows exploits

#271

Post by petervuto » Tue, Jun 02, 2026, 2:42 PM UTC

LelouBil wrote: post #81

Very important info: https://www.theregister.com/security/2026/05/28/microsoft-0-... In the linked Microsoft blog post, they say : > The details of these vulnerabilities were not shared with Microsoft prior to release, and the disclosures put our customers at unnecessary risk. So are they lying ? Why would Nightmare-Eclipse not report them if they are not ? It's a very weird situation

Contrary to popular belief, it is NOT anyone's obligation to do free work for megacorps. If anyone is testing MS products for free, or reporting bugs for free, that's a gracious favor, nothing more.

Re: GitHub bans security researcher who posted zero-day Windows exploits

#272

Post by petervuto » Tue, Jun 02, 2026, 2:45 PM UTC

embedding-shape wrote: post #16

Is there any public word from Microsoft about what is going on here? Why would both Microsoft and Gitlab ban the user? I thought both platforms allowed hosting exploits and security research as long as everything is clearly marked up-front, I'm guessing some rules were broken?

Some of the exploits are suspected to be intentional govt backdoors. It is easy to see why Gitlab would ban the user, given that they can be secretly subpoenad as any other US or allied entity.

Re: GitHub bans security researcher who posted zero-day Windows exploits

#273

Post by bigfatkitten » Wed, Jun 03, 2026, 2:40 AM UTC

0cf8612b2e1e wrote: post #6

Surely, the public string of exploits means he can find gainful employment from any of the various spooks?

Not if they can’t gain or maintain a security clearance.

Re: GitHub bans security researcher who posted zero-day Windows exploits

#274

Post by packspro » Wed, Jun 03, 2026, 12:07 PM UTC

[flagged]