News for hackers. Stuff that matters.

A comment on Zero-click, wormable, cross-platform remote code execution in Microsoft Teams. Parent comment

Re:Zero-click, wormable, cross-platform remote code executio... by kasajian on Monday December 07, 2020 @11:52AM (#25333915)
I had the same reaction to this when I was told by Microsoft, however this description seems intentionally misleading. Microsoft Support accepts calls for support and bug reports. There's a fee for the support. If it turns out that the issue is a defect, then you won't pay for the support call.

Unfortunately, this was the only way to report a bug at the time.

[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by jwiley on Monday December 07, 2020 @11:58AM (#25333970)
Yeah thats definitely possible, I may be misremembering the specifics. I think for us the end result was the same: it made us a lot less likely to help them improve their product.
[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by Spooky23 on Monday December 07, 2020 @12:09PM (#25334131)
We did the opposite. With premier support, you used to buy a bucket of hours. We had a few folks that learned the lingo and basically was able to attach a product defect to almost any call we made, billable to the product group.

We’d end up with a surplus of hours, and leverage the threat of slashing those hours to get the execs on the support side to push for concessions from the other parts of the business. Premier was basically a revenue generator for us :)

[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by byecomputer on Tuesday December 08, 2020 @06:18AM (#25343929)
Something tells me they don't mind if the bucket's overflowing so long as you're paying for the water. "Make 'em feel like _they're_ workin' _you_" is a tried-and-true sales tactic
[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by hutzlibu on Monday December 07, 2020 @12:10PM (#25334136)
But sadly not enough to break their desktop monopoly.
[ Parent | on HN ]