Collaborative Translation Framework
Heh, wanna hack a CTF?
This is not all they have to say, either. Their blog: https://deadeclipse666.blogspot.com/
As LBJ once noted of a detractor, “It’s probably better to have him inside the tent pissing out, than outside the tent pissing in.”
The slop company should have just paid them.
“Angry bug hunter with Microsoft beef”? You mean Nightmare Eclipse? She’s dropped so many 0-days that she’s practically famous at this point.
Fuck you pay me! The slop company did not pay up and now they are paying for it.
Now can we get this with the PS5 already???
Yes. I do hope Sony finds a way to piss off this penetration tester. Maybe their computers get fucked up, and they’ll finally apologize for fucking mine up. Lol.
This is not surprising.
The industry knowledge had by the thousands of engineers laid off has to go somewhere.
This is not about that. This is about a security researcher that wasn’t paid by Microsoft’s bug bounty program when they found a security bug.
Bug bounty programs exist to prevent this exact scenario. To give people a reward for privately disclosing the vulnerability with the devs instead of publicly/to a bad actor.
AMD fucked up recently about that as well. It seems big tech is getting so arrogant and so far up its own ass that they can’t even admit to bugs anymore, which is problematic considering their sloppy AI slop never had so many bugs as it does now.
which is problematic considering their sloppy AI slop never had so many bugs as it does now.
Honestly, it’s the opposite: AI is exposing so many bad security bugs that they are having a hard time keeping up.
That’s overblown. Yes, people are finding security bugs with AI, you will always get that when adding new tests with a different perspective. But the “having a hard time keeping up” come from the AI constantly spamming devs with duplicate issues.
NIST has already updated their CVE policies because of “record CVE growth”.
This change is driven by a surge in CVE submissions, which increased 263% between 2020 and 2025.
Hmmmm, I wonder wtf happened during those years?
Well when you report a bug to ms and they respond with disabing your account and you then release the 0day the ms responds with a public blog post saying people who release 0 days are breaking the law and liable for legal action of cause you then drop a second 0day and ms responds by retracing the legal threat so you you now drop a third one while your account to report these bugs is still disabled. What else would you do?
lol is this cheaper than just paying the fucking bounty? I’m beginning to wonder.
How could it be? Any news is good news.
Companies who use Microsoft don’t care about security
Drop a 4th one?
They did this is the 7th with more to come.
2nd bitlocker backdoor
I look forward to it.
