Steve Randy Waldmanhow on earth did Microsoft do this, and not face any meaningful consequence?
i mean all software has bugs, sure. but if you are selling high-consequence software, when you are notified of security issues, you address them. is there no criminal liability in selling a product for money when you know it to be extraordinarily dangerous to your customers, making no good faith attempt to mitigate the risk?
by #ReneeDudley #DorisBurke https://www.propublica.org/article/microsoft-solarwinds-golden-saml-data-breach-russian-hackers
ht @pluralistic
Whistleblower Says Microsoft Dismissed Warnings About a Security Flaw That Russians Later Used to Hack U.S. Government
Former employee says software giant dismissed his warnings about a critical flaw because it feared losing government business. Russian hackers later used the weakness to breach the National Nuclear Security Administration, among others.
Deadline
Cory Doctorow