Any high roller pharmaceutical company would quickly found a small startup with enough separation to provide plausible denial, then fund it with the cash required to get that data. Whatever trade secrets are in these 1+TB, knowing them is worth way more that these 25M.

And I am sure you never asked yourself: how did Nightmare Eclipse find all these bugs so quickly? And why now? Right?

When people blame Microsoft, they typically mean their Microsoft loving corporate IT. The same folks, who bought Crowdstrike products, also think that Windows is the only viable operating system in a corporate outfit. Since I am sure, that Microsoft's sales reps do anything in their power to support this view, they do share some of the blame.

Anyone remember the Witty worm? This was over 20 years ago, and so called "security" vendors still haven't learned a thing. Given the underlying security of Microsoft products, any software trying to defend this quagmire is bound to be so complex, that it will be more risk than benefit at some point.

Take a look at Nightmare-Eclipse (6 Windows zero days, 3 of them still unpatched), the Oracle Peoplesoft zero day, the Cisco zero day, and on top of that a remote DoS against OpenBSD, hundreds of CVEs against linux and Firefox. This is a lot of crap raining down on corporate America, possibly more than they can handle. They can especially not handle this, if zero days keep hailing in as they did. They are not geared for this.

One can all blame this on poor coding practices, maybe the bugs were found by some other means, but we do know, how the OpenBSD remote DoS was found. I would have shut down the new Anthropic stuff just as well, bribes or not. We can't allow most of corporate America to implode, just to show, that software wants to be free.

These are incredibly complex pieces of software, which simply shouldn't be made accessible to the big bad internet. We saw the same situation last year with Sharepoint, and are bound to see more of the same. I believe, that "attack surface" is the right term. There are many ways to provide these services to people working from home, which do not expose such high value targets to random hackers.

According to the article (I know, I know), of these 100+ affected entities more than two thirds were "institutions of high learning" aka universities. These are the entities brimming with experts, many with big well funded CS departments, they sure have experts of IT security and risk management, and seemingly nobody sounds an alarm, when such services are accessible from everywhere. Just wondering ...

If you don't like paying through nose and ears, then why use Oracle anyway? SMH.

Not, if you insist on placing that data center in the middle of a really hot state.

Quite a few kids "need" two phones these days: a crappy one, which gets proudly and visibly locked away before the exam, and the second one for the actual cheating during the exam. There are similar situations for adults, where a second phone can come in handy.

A second phone number may also be helpful for content producers for social media, or any other public facing and potentially controversial person. And yes, in this case you don't want both phone numbers to be associated with the same name.

I would say, that the "exact countours" start with a big capital M, followed by a lower case i, a lower case c ...

Will anyone run to the rescue of these C*Os, when they fail? Many of them will, and nobody will shed a tear for them. Contrary to this the students probably expect someone to solve their now upcoming difficulties for them.

So you admit, that you are one these folks, who came to a western country, took full opportunity of all the riches and freedom they offer, only to spew endless streams of pathetic Russian propaganda?

Shaking my head. See a new low every day ....

The lying is particularly funny, if the actual results of the drone strikes have not only been visible to anyone watching tv or any type of social media, but also to the international clown car descending on St. Petersburg for the SPIEF.

It also speaks for itself, if you expect no change, when dozens of refineries and oil pumping stations go up in flames, and this in a country termed "armed gas station". You are my personal symbol for the break down of Russian propaganda.

You must have an interesting view on lyrics, if battleship Moscow is not only not going to watch the defeat of Ukraine, but not even able to witness the defeat of Russia, unless they manage to attach a very long periscope :-)

PS: whichever Russia aligned country you post this from: it's "rhyme", not "rhime"

You are aware of this situation for Apple users, right?

They got Leopard 2A4 mostly, and on top of those a handful of 2A6. They did not receive a 2A7, which has been in service since 2014. Likewise they received Abrams M1A1, but not M1A2 (in service since early 90ies). The Bradleys were discarded by the US Army, basically surplus, although used surprisingly well by Ukrainians. None of this was considered the latest&greatest of western arms industries. In the end it didn't matter, no western tank would have survived Russian Lancets.

The F-35 would have had - at least for a while - free reign over Donbass, Zaporizhzha and Kherson, and many western Russian regions. It would have devastated Russian logistics, but it was not meant to happen. It would have also stopped the Russian A-50 collecting intel, and it would have stopped the devastating guided bombs being dropped over Ukrainian front lines. Russians would have probably found effective counter measures within 3 months, so I guess that Americans weren't ready to give that advantage away. They did put it to use against Iran, though.