Normally have been 86-ing a number of annoying things such as OneDrive, but leaving Paint in place figuring it's got to still be harmless.
Creeping increases in attack vector when just the opposite is needed more than ever.
I understood that reference.
Like when a previously sturdy old sailing ship starts taking on water, for instance in the 18th century and beyond.
Numerical equivalent to "deep-six."
Turns out paint was the thing almost every customer had installed/had access to, so he worked to the lowest common denominator and got really good at using it. I guess now he'll need to find a new tool to astonish devs with.
And at the end of the day $2 and $2000 screwdrivers are both still screwdrivers.
Then they added automatic HTML parsing of incoming emails, and the attackers cheered.
You can go back to mutt's parsing, and CVE-1999-0940 for an old example. But I'm sure that's only one of many.
once Microsoft has reinvented themselves as…security-first?
And there is the SFI program.
However this is a Windows application, and in spite some Rust advances in WinDev, it is pretty much C and C++ turf, with Rust getting the same warm reception as .NET used to enjoy.
Guess which language is Paint written on?
Nontheless, they are doubling down on sandboxing Windows, macOS, iOS and Android style, for quite some time, exactly to become security first as you are asking for.