Hacker GitHub

← All repos

microsoft/MSRC-Security-Research

View on GitHub ↗ ★ 1,398 Python

Security Research from the Microsoft Security Response Center (MSRC)

26 mentions on Hacker News by 18 people: 10 stories, 16 comments · first 2018-02-01 · latest 2026-05-01

Mentions per year 26 mentions · busiest year 2019 (11)
20082026
AllStoriesComments NewestTopOldest
  1. …find a public copy of that. The best starting point I found for reporting vulnerabilities was: https://github.com/microsoft/MSRC-Security-Research/security... You can email without agreeing to anything. But for a serious issue Microsoft…
    comment by robocat · 2026-05-01 · in For Linux kernel vulnerabilities, there is no heads-up to distributions
  2. …a primary source here because the slides from the talk that the article is based on are available: https://github.com/microsoft/MSRC-Security-Research/blob/mas... To quote from those slides: „~70% of the vulnerabilities addressed through a…
    comment by znkr · 2024-03-03 · in A reactionary take on memory safety
  3. …for someone to tell your younger self that you have "never written C and probably never will"? [1] https://github.com/microsoft/MSRC-Security-Research
    comment by wyldfire · 2023-03-27 · in Zig and Rust
  4. …https://security.googleblog.com/2021/09/an-update-on-memory-... https://github.com/microsoft/MSRC-Security-Research/blob/mas... https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI... https://media.defcon.org/DEF%2
    comment by jameswryan · 2023-02-27 · in Will Carbon Replace C++?
  5. Windows is likely a big task for the same reasons as SMAP ( https://github.com/microsoft/MSRC-Security-Research/blob/mas... ). XNU should be comparable to FreeBSD, which CheriBSD is a fork of, as both use Mach's VM for memory management…
    comment by jrtc27 · 2022-01-20 · in Arm releases experimental CHERI-enabled Morello board
  6. …language. [...]" [0]: https://security.googleblog.com/2021/02/mitigating-memory-sa... [1]: https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
    comment by hezag · 2021-04-07 · in BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
  7. …going on at Microsoft. - Managed languages if you can afford a GC - Rust - C++ with Core Guidelines https://github.com/microsoft/MSRC-Security-Research/tree/mas... Note that there are still some teams like Azure Sphere and Azure RTOS,…
    comment by pjmlp · 2021-01-22 · in Rust for Windows
  8. …year from Microsoft (and growing), not "one CVE in 2021". 70% there is not a negligible number. [1] https://github.com/microsoft/MSRC-Security-Research/blob/mas...
    comment by dtolnay · 2020-06-13 · in Microsoft: Rust Is the Industry’s ‘Best Chance’ at Safe Systems Programming
  9. Microsoft security unit also thinks that way. https://www.youtube.com/watch?v=PjbGojjnBZQ https://github.com/microsoft/MSRC-Security-Research/tree/mas... "Future development should be a mix of C#, Rust and constrained C++." Which is also a…
    comment by pjmlp · 2019-07-11 · in Catching use-after-move C++ bugs with Clang's consumed annotations
  10. …C#, Rust and constrained C++ (Core Guidelines) as the future of systems programming on Windows. https://github.com/Microsoft/MSRC-Security-Research/blob/mas... They are also very clear that C is done on Windows, and compatibility is only…
    comment by pjmlp · 2019-04-25 · in Some Were Meant for C (2017) [pdf]
  11. Sure. Check the presentation slides. https://github.com/Microsoft/MSRC-Security-Research/tree/mas...
    comment by pjmlp · 2019-03-15 · in Why I rewrote the mesh generator of Dust3D from Rust to C++
  12. …is why their security team is now pushing for C#, Rust and constrained C++ for new developments. https://github.com/Microsoft/MSRC-Security-Research/tree/mas...
    comment by pjmlp · 2019-03-08 · in Serious Chrome zero-day
  13. …presented at Blue Hat IL, namely C# (replace by favourite managed language), Rust and modern C++. https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
    comment by pjmlp · 2019-02-24 · in C++20 Design Is Complete: Modules, Coroutines in C++20
  14. Link to the presentation this article is based one but doesn't site for some reason: https://github.com/Microsoft/MSRC-Security-Research/raw/mast...
    comment by dtrailin · 2019-02-12 · in Microsoft: 70 percent of all security bugs are memory safety issues
  15. https://twitter.com/epakskape/status/1093488162318491648 https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
    comment by est31 · 2019-02-11 · in Microsoft: 70 percent of all security bugs are memory safety issues
  16. …per-app VM with copy-on-write memory, GPU isolation via IOMMU, secure enclaves. Slides: https://github.com/Microsoft/MSRC-Security-Research/blob/mas... Video: https://youtube.com/watch?&v=8V0wcqS22vc
    comment by transpute · 2018-03-03 · in A researcher’s tale of defeating traps, tricks, and complex virtual machines