Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I disagree. It falls in a sweet spot where consumers won't be impacted (because they're utilising Microsoft Accounts/don't enable RDC), and enterprises won't be impacted (because they don't set up accounts with no password).

And then on top of that you need RDC on a Windows 10 box to be exposed to the internet or a LAN with malicious users on it.

It is a legitimate bug that should be patched. But a miniscule subset of users will be impacted, because the pre-conditions are so niche.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: