The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename…

[0xabad1dea@infosec.exchange]

RE: https://cyberplace.social/@GossiTheDog/116565662607962457

The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename…

The charitable interpretation is that Microsoft accidentally shipped an internal test build to global production. The less charitable one isn’t very pleasant

[dysfun@social.treehouse.systems]

@0xabad1dea obviously we'll all be charitable, given how much reason they've given us to trust them recently.

[ratsnakegames@mastodon.social]

@0xabad1dea holy fuck

[miawinter@tech.lgbt]

@0xabad1dea jesus fucking christ

[kallisti@infosec.exchange]

@0xabad1dea

How else would feds get the data of these pesky criminals?

[lediva@lediva.masto.host]

@0xabad1dea I'm sure Copilot will be very apologetic once it's called out.

[baa@mk.absturztau.be]

@0xabad1dea@infosec.exchange once upon a time they would've employed people to catch this stuff before it goes out, and ensure the CIA pay for such privileges

[rst@mastodon.social]

@0xabad1dea The charitable interpretation also assumes that in choosing the trigger for this debug behavior, they'd select a filename including a very large number of apparently random digits.

[zenrenji@kafeneio.social]

@0xabad1dea it already stored the passkeys to the cloud and they give to authorities when asked i guess one bypass wasnt enough

[0xabad1dea@infosec.exchange]

@rst well, yes actually, having seen tons of firmware code, that’s quite normal and non-suspicious functionality does this all the time. it’s presumably just a guid

[coosis@mstdn.plus]

@0xabad1dea i am sorry WHAT

[stonebear2@hachyderm.io]

@0xabad1dea It's microsoft. They get no charity at all; they should be paying alms to the lot of us, everyone who ever booted 95 or higher...

[jbiserkov@mas.to]

@0xabad1dea
> windows 10 is not [affected]

[somevegancheeseisok@mastodon.social]

@0xabad1dea shiiiiiiiiiit that's cool

[jackemled@furry.engineer]

@0xabad1dea Maybe their new LLM forgot to remove the code before shipping a new production version.

[oilheap@infosec.exchange]

@0xabad1dea this is what you get when you do disk encryption without user input

[landelare@mastodon.gamedev.place]

@0xabad1dea This would be pretty serious if BitLocker was a security feature, not a user annoyance one.