-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Here is the code, enjoy
https://github.com/Nightmare-Eclipse/RedSun
Now to address what some media articles wrote, first of all, I want to talk about MSRC official response regarding BlueHammer
"Microsoft has a customer commitment to investigate reported security issues and update impacted devices to protect customers as soon as possible. We also support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community."
This is a very generic response, almost as if they don't care and they don't. Why ? Because MSRC was fully aware of this public disclosure, a case was filled but was dismissed by them and they are also aware that this one will be disclosed but again, they are ignorant.
Normally, I would go through the process of begging them to fix a bug but to summarize, I was told personally by them that they will ruin my life and they did and I'm not sure if I was the only who had this horride experience or few people did but I think most would just eat it and cut their losses but for me, they took away everything. They mopped the floor with me and pulled every childish game they could. It was soo bad at some point I was wondering if I was dealing with a massive corporation or someone who is just having fun seeing me suffer but it seems to be a collective decision.
And one other thing, they do everything but support the research community, I won't disclose details but they sabotage people a lot. I mean just look at the past, Microsoft is the only major company who had a track of multiple vulnerabilities being publicly disclosed just because the researchers were soo upset by how MSRC treated them.
Unfortunately, the folks who have the capacity to stop those disclosures, not only don't care but also seems to push harder for worst exploits to be released, I didn't want to be evil but they are actively poking me to start releasing RCEs which I will be doing at some point...
I will personally make sure that it gets funnier every single time Microsoft releases a patch.
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQRJTvAf/AWVhAKEeb7FFoRCS0/SbAUCaeAVxQAKCRDFFoRCS0/S
bKhnAP0XAkiRbMSdNupqgko9pahmFysxzkc2H4MspCVhpHc/BAD/bZPbGNwCvzzn
jFuRMhitmdMCHoauBOH0jRiaDwA8mwE=
=9Ffz
-----END PGP SIGNATURE-----
No comments:
Post a Comment