Skip to main content

Microsoft Criticized for Threatening Legal Action Against Security Researcher

1 month 1 week ago
"A security researcher published a series of unpatched bugs in Microsoft products," reports TechCrunch, "along with code to exploit them." Microsoft's response to the researcher? "Threatening to take legal action and call the cops on them." On Wednesday, Microsoft published a blog post criticizing the researcher, who goes by the handle "Nightmare Eclipse," for publicly disclosing a series of bugs, including BlueHammer, RedSun, UnDefend, and YellowKey. The flaws affected products such as the Windows built-in antivirus engine Defender and the disk-encryption tool BitLocker. The core of Microsoft's complaints is that the researcher did not attempt to report the bugs so that the company could fix them. That would have been "responsible," as Microsoft's blog put it. The other side of the company's argument is that by publishing the details of the bugs and how to exploit them before they were patched, Nightmare Eclipse may have aided malicious hackers. Some of the vulnerabilities Nightmare Eclipse disclosed have since been used by hackers in real-world attacks, according to Microsoft, as well as the U.S. cybersecurity agency CISA. "Our Digital Crimes Unit will continue bringing cases against these actors and those that enable their criminal activity — coordinating as needed with law enforcement around the world," Microsoft wrote... In a series of blog posts published in the last couple of weeks — without providing many specific details — Nightmare Eclipse claimed to have been in contact with Microsoft, but the company allegedly mistreated them, including revoking access to their Microsoft Security Response Center account, the portal where researchers can report vulnerabilities to the tech giant. Nightmare Eclipse's implication was that they had no choice but to release the vulnerabilities publicly... The researchers published the bugs on open source repositories GitHub (owned by Microsoft) and GitLab. The researchers' accounts on those platforms have been banned... In response to this latest controversy with Nightmare Eclipse, countless researchers have shared their bad experiences reporting bugs to Microsoft. Thanks to long-time Slashdot reader Elektroschock for sharing the news.

Read more of this story at Slashdot.

EditorDavid

Mars Minerals Reveals an Ancient Ocean's Potential For Life - and a Possible Way to Make Oxygen

1 month 1 week ago
Researchers have identified a ring of minerals around the largest basin in the northern hemisphere of Mars (which past research suggests held a large body of water). Phys.org says the research provides new clues on when life may have been possible on Mars — and how future astronauts could make oxygen: Manganese oxides and hydroxides (collectively written as manganese (hydr)oxides) can act as geological proxies for past oceans... The team involved in the new study analyzed short-wave infrared (SWIR) data from China's Zhurong rover, ESA's OMEGA orbiter and NASA's CRISM orbiter to identify and quantify manganese (hydr)oxides... The team says the placement of the ring indicates that the ring formed during the Hesperian epoch — a geologic period on Mars that occurred roughly 3.7 to 3.0 billion years ago. The Hesperian epoch marked the transition from the warmer, wetter, and volcanically active Martian world to a cold, dry, and dusty planet... [when "the potential for further prebiotic evolution on the surface was significantly reduced."] "This yields a final estimated duration of 0.8-1.5 million years for the presence of stable aqueous conditions in Utopia Planitia. This timescale significantly exceeds what is typically expected for transient surface water activity on Mars, suggesting that Utopia Planitia hosted a long-lived and evolving aquatic system during the Hesperian epoch, rather than a short-lived or rapidly evaporating water body," write the study authors. The researchers say that although this does not provide direct evidence of early life, it does suggest that Mars may have provided an environment conducive to initiating early forms of life. The timeline of the ocean matches the minimal timescale required for prebiotic chemistry, and also temporally overlaps with the period on Earth in which scientists believe the earliest forms of life first arose, approximately 3.4 billion years ago. The study authors also note that the conditions for life may have also extended into the next Amazonian period on Mars. They write, "If MnOx formation or redistribution occurred during the Amazonian, this would suggest that Mars may have maintained episodic or localized liquid water environments significantly later than traditionally assumed." Interestingly, the authors also bring up the potential for future human habitation on Mars. They suggest that oxygen can be produced by using the manganese (hydr)oxides for water-splitting reactions that generate oxygen through photocatalysis, potentially supporting human activities or even terraforming. Of course, this would be a long way off.

Read more of this story at Slashdot.

EditorDavid