Yeah, they just pissed off the only area that can literally sink them tomorrow…no shit they actually care now.
“dedicating the equivalent of 34,000 full-time engineers to what has become the single largest cybersecurity engineering project in the history of digital technology,”
What does this mean? Are they having it done by 50,000 part timers? Or are they just asking bing chat to churn out security solutions for them?
The non-cynical answer is that they’re counting contractor/vendor time in this full time equivalent answer. Which would probably be a good thing, because I imagine that the best people in cybersecurity aren’t actually employees of Microsoft.
Security. Yeah that’s what users complained about… :P
They don’t trust Microsoft but I guess that’s harder to put on their web page.
m$ just got away with another slap on the wrist. Being lax and purely driven by money is rewarded in the land of pseudo a capitalism.
Nothing pseudo about it. This is the natural progression of capitalism.
Soo… what does this mean for the Windows Recall feature?
Means nothing to Recall.
His testimony comes after Microsoft admitted that it could have taken steps to prevent two aggressive nation-state cyberattacks from China and Russia.
According to Microsoft whistleblower Andrew Harris, Microsoft spent years ignoring a vulnerability while he proposed fixes to the “security nightmare.” Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.
Microsoft CEO Satya Nadella is now personally responsible for security flaws.
I say BS.
🤖 I’m a bot that provides automatic summaries for articles:
Click here to see the summary
Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.
This apparent negligence led to one of the largest cyberattacks in US history, and officials’ sensitive data was compromised due to Microsoft’s security failures.
Even Microsoft itself was breached, with a Russian group accessing senior staff emails this year, including their “correspondence with government officials,” Reuters reported.
Smith described the SFI as “a multiyear endeavor” focusing all of Microsoft’s efforts developing products and services “on achieving the highest possible standards for security.”
He warned that online threats are always evolving but said that Microsoft was committed to grounding projects in core cybersecurity tenets that would prioritize security in product designs and ensure that protections are never optional and always enabled by default.
In 2021, Smith told Congress that “there was no vulnerability in any Microsoft product or service that was exploited” in that cyberattack, while arguing that “customers could have done more to protect themselves,” ProPublica reported.
Saved 79% of original text.
