It takes a special kind of person to name a company after their own body part. Fortunately the Microsoft Security Response Center doesn’t seem to have inherited that kind of mentality, because when I have reported not a bug but a feature as a vulnerability - they accepted it.

cross-posted from: https://infosec.pub/post/5707149

I talk about a report I’ve made to MSRC in the beginning of the year regarding vscode.

It’s a bit different. There’s no in depth technical stuff, because I basically just reported the feature, not a bug.