Florian Roth ⚡️
I don’t know what happened between Microsoft and #NightmareEclipse behind closed doors Maybe Nightmare Eclipse was unreasonable. Maybe Microsoft was. Maybe both. But I think Microsoft badly misjudged this situation. When you’re the largest software vendor on the planet, you don’t get to behave like an angry individual in an internet argument. You have to be the adult in the room. Deleting repositories, talking about criminal investigations and turning the whole thing into a public fight was a mistake. The damage from that goes far beyond this one researcher. What surprised me most is how quickly people started sharing their own MSRC stories afterwards. - Months without responses - “Working as intended” - Bounty disputes - Reports that went nowhere People don’t suddenly start telling those stories for no reason. I think Microsoft broke a lot of porcelain here. And for what exactly? I don’t see much upside.