If you are curious how secure this is find out for yourself. Azure Sphere has a great bounty program https://www.microsoft.com/en-us/msrc/bounty-microsoft-azure …https://twitter.com/galen_hunt/status/1329174873747320832 …
Show this thread
-
I mean the attack surface is totally different so I’m not sure your point
By slashing the bug bounty program there is no incentive to help you constantly improove it- we would basicly be working for free. And the new amounts are pretty much the same as slashing- especially when all major classes of vulnerabilities are for some reason not eligible
-
-
And I still on average stumble upon 1 way to trigger blue screen off death each month.... Or a way to corrupt any NTFS partition as unpriveleged user by just opening a file. or cause all kernelAPCs to deadlock so hard it cant even turn blue. all triggerable as unpriv by fileopen
-
this months find was though a bit special as its apperently remotely triggerable- you do need to have permission to create a file though , the \users\public or \users\guest folder are fine though.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.