Microsoft ridiculed a researcher reporting very serious bugs to them, deleted his account, and no bug bounties were paid. These should be high payouts. Now $MSFT is threatening legal action and speaking as if a researcher’s proof of concept code is illegal.
This is because the unappreciated researcher released more zero-day vulnerabilities on his own and had those GitHub/Lab accounts banned.
They were serious enough that Microsoft is scrambling to fix them but wasn’t serious enough to be paid or recognized, instead was ridiculed.
News of the Nightmare Eclipse exploits are everywhere but read the personal blog of the researcher, Nightmare Eclipse:
https://t.co/SuSxBr5oT4
@petterij Galileo OSNMA is very new, other service levels are not available to civilians (nor Ukraine). Multi-constellation spoofing is still achievable. R-Mode Baltic is not yet ready.
@radian When will Apple switch Mail over to the new CMS implementation (that will thus also finally allow ML-KEM and ML-DSA)?
The contrast is kinda funny, allowing export-grade crypto in some parts while shipping state of the art stuff in others.
@curebores@JackHammerLane@ManaByte It explicitly includes the part of Riot's software you install on your own PC. Not to mention that those sections wouldn't make much sense if it only applied to their servers.
@JackHammerLane@ManaByte@curebores Lmfao. Of course they're allowed to modify your Windows installation, from the moment you first install it and agree that it can take measures to protect its integrity. Try reading the EULAs you agree to, cheater.
@curebores@JackHammerLane@ManaByte Nope, account suspension and removal of features (such as chat) are listed separate.
IOMMU restrictions fall explicitly under "restrictions to protect the integrity and spirit of the Riot Services"
@JackHammerLane@ManaByte Account termination is one of the actions they may take. If you could just read, you could see the entire list.
It literally says that they may use technological means for applying any of these restrictions. IOMMU configuration against cheaters falls under that.
@JackHammerLane@ManaByte Try reading that section in its entirety again.
It says that they monitor to prevent cheating (amongst other things) and they can take disciplinary actions. Section 7 lists those actions, such as restrictions to protect the integrity of the services.
@JackHammerLane@ManaByte It actually is in their terms and you explicitly agree to it twice, on installation and on configuration change.
So they definitely can make these changes and the cheaters can cope and seethe.
Side note, cheating is a multi-million dollar industry and if you think providers aren't paying to spread misinformation online to create more public leniency I've got some magic beans I want to sell you.