another windows zeroday, the repo text is hilarious
6 months ago by not_IO to c/programmer_humor
Because all software is insecure.
You hear a lot about them because they are used in government and large enterprise environments when threat actors love to attack.
Having a responsible disclosure process where they announce problems so their customers know it's patching time. It's better then it use to be where a vendor threw out a patch and if you didn't patch because the vendor didn't say why the patch was released.
There's a reason why Isolated Networks are big money these days. Everyone expects their shit connected to the internet will be hit eventually and anyone that thinks they are safe are probably already being hit.
anyone that thinks they are safe are probably already being hit.
Is that the IT Sec version of "If you think you're never wrong, you already are"?
I probably should have used the analogy my VD doctor gave me, "If you keep dippin your tip even with the best of protection on you'll eventually find a walking biohazard that even I can't bring you back from."
Some of it is incompetence, but some is... more complicated incompetence. A lot of the weirdness you see is where some executive somewhere had a problem that affected him and had enough money/clout to throw around that they could make whatever just happen. Microsoft is the worst at this.
85% or more of the cybersecurity market is about, and because of, Windows.
Srs, if Windows wasn't used at all, cybersecurity would be as big an industry as Etsy.
Windows tries to mimic Unix for all its "important" features, but it isn't. It's a surveillance slop sundae on top of decades of organic growth on top of bad decisions based on DOS. And it's made them one of the richest companies in the history of the world.
Story time: There was another operating system very much like Windows called OS/2. This operating system was made by IBM and Microsoft. It even had DOS and NT kernel compatibility and is where the NT kernel came from. While MS and IBM were working on OS/2 MS secretly developed Windows and made deals with third-party PC manufacturers like HP and Compaq for them to run Windows and not OS/2. Despite the fact that Microsoft was where it was then because IBM had chosen DOS for its PC operating system until that time.
OS/2 still got an interesting life though. It was widely used as an embedded operating system well into the 2000s. If you ever used an ATM or cash register in the early 2000s you almost certainly used OS/2.
Windows did not get where it is today through organic growth. It did so by standing on the shoulders of giants and dealing under the table.
All of this is 100% correct, but to shed some light on the perspective you're replying to: this deep into dystopia, slimy business bullshit as opposed to literal dictates from the surveillance state counts as "organic growth" for a lot of people
Despite the fact that Microsoft was where it was then because IBM had chosen DOS for its PC operating system until that time.
Is this actually morally bad? Unless MS had promised otherwise, isn't it just competition?
Admittedly, the morality of this particular point probably relies on further context. On its face, I suppose you’re correct. However, it’s worth pointing out that for instance the only reason DOS was chosen is because Bill Gates’ Mom was on the IBM board (also because the owners of Digital Research blew it, but that’s a story for another time). Further, IBM had funded Microsoft pretty heavily to help development of the NT kernel with super cushy terms because of the aforementioned relationship with the board. So while, yes, on the one hand you could classify this as competition and it’s a little hard to feel bad for giant corporations, on the other hand this was Bill Gates being a twat and taking advantage of what was essentially a favor. There’s a reason the movie about him and Steve Jobs back in the day was called “Pirates of Silicon Valley“.
Yes, but maybe?
I mean, how much ofnthe server market is Linux vs Windows? And Phones.
Limix is literally the most used OS. Maybe not for desktop daily driver use. But it still isn't breeched as much as Windows.
That's true to a point.
Linux is the biggest but the big customers have dedicated teams, have strong enough teams that getting in isn't worth as much effort, and can push fixes upstream.
Kind of reminds me of this https://devblogs.microsoft.com/...
Good old.Raymond Chen. He's had some great blog entries
A facade, even.
Like an old Western set. All front wall, nothing in the back.
In case anyone else interprets this wrong: he means Proof of Concept code.
Your comment reminded me of this moment I had at an office lunch table:
Someone from sales: I've been having a terrible day, the P-O-C at {client company} is being annoying yadda yadda.....
Someone from HR: glaring, and taking mental notes.
Me, a dev: wondering how things could've gone wrong considering that we hadn't even shipped anything for them.
It took us all a moment to realize that "PoC " meant different things to each of us - Point of Contact, Person of Colour, and Proof of Concept. Somehow the salesperson could've been talking about any of those and it'd make, so none of us questioned ourselves first.
It's even funnier with "point of sale" machines (ie. cash registers and/or payment terminals). We just sent the customer our newest and best POS! 😂👌
I thought the North Korean OS was hacked, but they named the vuln after it. Not sure why.
Windows and Mac are not safe.
@programming.dev
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.
go to feed...
@programming.dev
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.
go to feed...
Oh cool. Cool cool cool.
Crowdstrike processes their signature files in kernel mode. Defender helpfully pastes malware over system files. Ivanti has a new critical vulnerability every week or so. Why are security vendors incompetent?
save