Your periodic reminder that #microsoft is not a competent or serious company:

blog.orange.tw/posts/2025-01-w…

(@bagder is remarkably restrained in the quoted responses. I would have gone off the rails, but do not need to, because we decided on day one that #varnishcache would not run on Windows).

If you think that is not bad enough, read the Cyber Safety Review Board's report about the Microsoft Exchange clowncar:

cisa.gov/sites/default/files/2…

WorstFit: Unveiling Hidden Transformers in Windows ANSI!

📌 This is a cross-post from DEVCORE. The research was first published at Black Hat Europe 2024. Personally, I would like to thank splitline, the co-author of this research & article, whose help

^{Orange Tsai}