Post

don't make me tap the sign devblogs.microsoft.com/oldnewthing/...

devblogs.microsoft.comIt rather involved being on the other side of this airtight hatchway - The Old New ThingNot every code injection bug is a security hole.

16/9/26, 5:48 pm0 reposts3 likes

Brian Slesinsky

@skybrian.bsky.social

16 Sept

Sometimes it's not a privilege-escalation because the actual bug is running untrusted code without putting it in a sandbox. (But to build a sandbox, all the ways out of the sandbox need to be fixed.)