nostr:npub1wf44gvmu4g6x0gwwjgrnlw0f8dxmvx7h929k057wwv8hwa8clq6snr94wn
So should Microsoft be informing everyone of every patch they come up with, implement in a controlled environment and found problems with/broke programs all the time? Or are we just thinking they're not even doing anything at all/making it low priority during the time it takes to fix the problem?
nostr:npub1hqzuy2jmgft6f4emjv64ma5w4kz749p2zmkpl75pdj7s5swj8maq0xyaga
> are we just thinking they're not even doing anything at all during the time it takes to fix the problem?
Yes. Relying on security by obscurity is baked into BorgSoft's DNA. Which is why they still won't publish Windows source code under Free Code licenses. Even the ancient, unsupported versions.
This applies to reputation security too. They think that being opaque about their vulnerabilities makes them seem more trustworthy. It doesn't.
nostr:npub1wf44gvmu4g6x0gwwjgrnlw0f8dxmvx7h929k057wwv8hwa8clq6snr94wn
