<![CDATA[Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub]]>Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub

]]>https://board.circlewithadot.net/topic/a6cda1a2-6858-40af-a357-1f49e31973bd/wrote-a-thing-on-microsoft-s-stance-that-not-following-their-responsible-disclosure-process-is-criminal-activity-https-doublepulsar.com-microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4-postpublishedtype-repubRSS for NodeFri, 05 Jun 2026 22:38:53 GMTThu, 28 May 2026 15:07:37 GMT60<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Sat, 30 May 2026 10:55:54 GMT]]>@GossiTheDog excellent. cited https://infosec.exchange/@flyingpenguin/116662732272278173

BTW you have a "?=repub" in your URL.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/flyingpenguin/statuses/116663160292256566https://board.circlewithadot.net/post/https://infosec.exchange/users/flyingpenguin/statuses/116663160292256566Sat, 30 May 2026 10:55:54 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Fri, 29 May 2026 23:39:00 GMT]]>@GossiTheDog “doxxed on Twitter” <— really? The few personal things I read were coming from nightmare-eclipse.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/115726127813943193/statuses/116660498602787518https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/115726127813943193/statuses/116660498602787518Fri, 29 May 2026 23:39:00 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 22:31:58 GMT]]>@GossiTheDog Yeah Microsoft's boondoggle with just stealing people's IP (git-flow) isn't criminal but civil at least here in the UK where it's actionable at CDPA 1988. It becomes criminal if they are found in contempt afterwards... IANAL but I'm keeping abreast, there might be some goodies in the Digital Economy Act 2010 to defend against them but ugh Mandelson helped put that on the books.

]]>https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116175731239673526/statuses/116654572701178697https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116175731239673526/statuses/116654572701178697Thu, 28 May 2026 22:31:58 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 22:21:10 GMT]]>@musevg @GossiTheDog

Almost like they are attempting to deflect... Maybe we should be a little bit more tin foil hat about this

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/natesubra/statuses/116654530236040336https://board.circlewithadot.net/post/https://infosec.exchange/users/natesubra/statuses/116654530236040336Thu, 28 May 2026 22:21:10 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 21:45:53 GMT]]>@GossiTheDog If researchers are going to be investigated by Microsoft anyway, may as well just sell it to the baddies for 10x the bounty and not even tell Microsoft.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/chrisp/statuses/116654391492730845https://board.circlewithadot.net/post/https://cyberplace.social/users/chrisp/statuses/116654391492730845Thu, 28 May 2026 21:45:53 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 21:39:27 GMT]]>@natesubra
I just skimmed over that thing. But the way I understand it... well: I don't know whether a responsible way to disclose such a blatantly backdoor-looking vulnerability even exists.
@GossiTheDog

]]>https://board.circlewithadot.net/post/https://23.social/users/musevg/statuses/116654366196774597https://board.circlewithadot.net/post/https://23.social/users/musevg/statuses/116654366196774597Thu, 28 May 2026 21:39:27 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 21:36:16 GMT]]>@GossiTheDog @lisihocke
Well… that was then but this is now.
Welcome to post… idk how to call it, maybe… post-Trump business, politics and law practices.

]]>https://board.circlewithadot.net/post/https://23.social/users/musevg/statuses/116654353690657300https://board.circlewithadot.net/post/https://23.social/users/musevg/statuses/116654353690657300Thu, 28 May 2026 21:36:16 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 21:30:32 GMT]]>@GossiTheDog Weird. Any idea on what motivated the strategy change? The threat makes it seem like it's more than just behind-the-scenes conflict

]]>https://board.circlewithadot.net/post/https://mastodon.catgirl.cloud/users/multisn8/statuses/116654331192360126https://board.circlewithadot.net/post/https://mastodon.catgirl.cloud/users/multisn8/statuses/116654331192360126Thu, 28 May 2026 21:30:32 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 16:11:56 GMT]]>@GossiTheDog
Multi-Hundred billion dollar company can't handle vuln disclosure properly. Not saying it doesn't take two sides here, but one of them has a ridiculous budget to actually do something about it.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/natesubra/statuses/116653078394187130https://board.circlewithadot.net/post/https://infosec.exchange/users/natesubra/statuses/116653078394187130Thu, 28 May 2026 16:11:56 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 15:41:21 GMT]]>@GossiTheDog however, I think it this is also just poorly worded and "these actors" possibly means the "bad actors" into whose hands the PoCs have been placed by virtue of them being published on the Internet when, most typically, Microsoft has chosen not to engage / not to see things for the problem they are / not to bother patching in any kind of hurry

]]>https://board.circlewithadot.net/post/https://thx.gg/users/interpipes/statuses/116652958091969988https://board.circlewithadot.net/post/https://thx.gg/users/interpipes/statuses/116652958091969988Thu, 28 May 2026 15:41:21 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 15:34:58 GMT]]>@GossiTheDog What happened to no more free bugs. I would prefer everyone work together to secure infrastructure but in the current environment helping vendors doesn't seem like a winning proposition.

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/mirth/statuses/116652933032331892https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/mirth/statuses/116652933032331892Thu, 28 May 2026 15:34:58 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 15:31:08 GMT]]>@sophieschmieg yep. I get it’s a dumpster fire for them and will be causing loads of work as their workflows aren’t good for disclosure like this.. but that’s their dumpster fire to fix, not everybody else’s.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/GossiTheDog/statuses/116652917934094788https://board.circlewithadot.net/post/https://cyberplace.social/users/GossiTheDog/statuses/116652917934094788Thu, 28 May 2026 15:31:08 GMT<![CDATA[Reply to Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub on Thu, 28 May 2026 15:17:04 GMT]]>@GossiTheDog ugh and they left themselves some wiggle room: the way it's written, you could claim that the criminals prosecuted are the groups exploiting the vulnerabilities. That is an obvious statement and it's clearly implied that the person doing the zero day release is actively cooperating with threat actors and therefore also criminally liable, but Microsoft can always "well technically" themselves out of this claim.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/sophieschmieg/statuses/116652862619614938https://board.circlewithadot.net/post/https://infosec.exchange/users/sophieschmieg/statuses/116652862619614938Thu, 28 May 2026 15:17:04 GMT