For all those saying : just put behind firewall, VPN, install HDs on a server and configure it yourself, .... just remember that this kind of hardware is made for non-IT consumers. They doesn't have our knowledge. They probably don't want to spend too many time configuring it also.

What is needed is a law/regulation (yes I know, I hate to say it) where the penalty is so high that it will cost less to put in place a bunch of quality gates and to hire really competent IT staff than paying the penalty.

IT industry is on a down slope for to many years now (useless complexity, everything must be on the Internet, programming language/framework of the day, "Moving fast and break things" mantra, ...). After 26 years as an IT professional, I'm really sad seeing our industry is a such a bad state. I love IT (I started programming in Assembly/Basic on a Commodore 64 at the age of 12) but I think we need to take a slow down a bit and check the mess we are in.

What's your opinion about this?

Good idea to put your corporate secrets on competitor servers.

Unoptimized apps, sub-optimal programming languages, resources waste, ... Stop the "resources (RAM, CPU, ...) are infinite as human stupidity" mantra.

Time to create applications/services with "resource restriction" in mind.. You know like we did before this whole "everything MUST be a Web app". JSON/XML/... as serialization protocol for almost everything...

And don't start me on resources wasted on MY computer : Electron's apps, Windows (if you can't use something else at work by company standards), ...

Or just don't trust ANY Cloud product. If your data is not really important and you have money to burn, go with the Cloud.

If you are brain dead enough to use TikTok, you deserve this. We really are on the road of Idiocracy society...

I hope before we got the Epoch time 64 bits limit in year 292 277 026 596.

If you _really_ need more than 5GB to run an app, then a tablet is not the right tool for the job.

Issue details from Microsoft site (ref: https://www.microsoft.com/secu... )

Extract:
In the next evolution of the campaign, MSTIC observed NOBELIUM attempting to compromise systems through an HTML file attached to a spear-phishing email. When opened by the targeted user, a JavaScript within the HTML wrote an ISO file to disc and encouraged the target to open it, resulting in the ISO file being mounted much like an external or network drive. From here, a shortcut file (LNK) would execute an accompanying DLL, which would result in Cobalt Strike Beacon executing on the system.

+1000 Someday (I hope soon) companies will put back security and clients privacy a top priority by reverting back their mission criticals systems in-house. Until then, each time I see a news like this I laught a lot, open a beer, grab a popcorn bag and watch the show...

This is not a "personal annoyance". This is a sign about how AlgoSec is not a serious security company to do business with.

I can have up to 4 SSD drives in it (I have 3 now), I upgraded the RAM to 64GB, there is a LOT of externals connectors, ...For almost the same price as the Framework DIY with specs maxed-out (and it's a 15.4", not a 13.5")

Yes

Why producing more and more and more food when we're wasting so much? Over-production (not just food) IS what slowly killing the planet and fill our landfills.

ref: https://www.bbc.com/news/scien...

In-game skins == pay for "something new"

Security patch == pay for your error (same as cars recalls... free of charge because it's a manufacturing error)

... like Solarwind ;)