Post #2064504

@adamshostack @kaidenshi Tell me you don't know or don't care about security without telling me you don't know or don't care about security. This reminds me of the ".NET" v1 release: we invested in Code Access Security (making least privilege very easy to implement) and the Dev Division apps explicitly asserted full privilege on start up and never reduced it. The just make it work, security be damned culture lives on. And they must have known what they were doing since they announced: "To increase security awareness, 95% of employees have completed the latest training on guarding against AI-powered cyberattacks, ... to improve security awareness. " [https://www.microsoft.com/en-us/security/blog/2025/11/10/securing-our-future-november-2025-progress-report-on-microsofts-secure-future-initiative/] Saddest of all: hardly any customers will jump ship, if they even notice.