61–68 of 68 posts
You have physical access to the machine. Dump its bios and inject this https://download.microsoft.com/download/8/a/2/8a2fb72d-9b96-... Shrug.emoji
> So far, for the vulnerabilities I have reported to Google, ASUS, AMD, TP-Link, Netgear, MSI (and more), they have paid out a total of $0 in bug bounties. Why bother reporting to them ? You could just as well sell it to third parties if it doesn't interest them.
You understand the concept of doing something that doesn't bring direct monetary benefit?
When all MSI computers get exploited in the wild, I bet that these execs will find money.
Earlier quoted context omitted.
What about using the Visual Studio packaging tools? I live on .NET/C++ universe in regards to Windows development, so it might be it isn't as nice for not blessed stacks.
Didn't they discontinue those around VS 2015 or so? Its been a while since I tried. Iirc that's what got replaced with WiX and ClickOnce, both of which are 100X more complicated to use.
By VS packaging tools I mean tbe application project type that generates a MSIX as build outcome.
Earlier quoted context omitted.
You understand the concept of doing something that doesn't bring direct monetary benefit?
Yes I do, but we are speaking of companies with billions. If they can't take this seriously enough that they pay for the vulnerabilities, they deserve to get the bad press. When all MSI computers get exploited in the wild, I bet that these execs will find money.
Earlier quoted context omitted.
Yes I do, but we are speaking of companies with billions. If they can't take this seriously enough that they pay for the vulnerabilities, they deserve to get the bad press. When all MSI computers get exploited in the wild, I bet that these execs will find money.
But it's not "MSI computers" it's actual people getting pwned.
Getting your users computers infected and having to deal with bad buzz, prosecutions, loss of sales, would most likely wake them up.
Sending them a mail ? They don't care.
Earlier quoted context omitted.
But it's not "MSI computers" it's actual people getting pwned.
I know but I don't think there is any other solution. These companies speak money, if you don't speak money they ignore you. Getting your users computers infected and having to deal with bad buzz, prosecutions, loss of sales, would most likely wake them up. Sending them a mail ? They don't care.