[justinclift]

It's crazy MS are doing this after the US Gov people publicly lambasted them (ie https://www.inc.com/kit-eaton/why-a-former-white-house-cyber...), with MS then promising to make security a core thing at MS to fix the problem.

This isn't "fixing the problem" at all. It's the opposite of fixing the problem.

[bigfatkitten]

Microsoft did make security a core thing, back in 2002, and they made enormous progress in improving their product security.

https://www.wired.com/2002/01/bill-gates-trustworthy-computi...

Nadella subsequently pushed security to the back seat.

[justinclift]

The promise I'm talking about was 2024/2025, and we can see how that's gone. ;)