DEV Community

Discussion on: Microsoft is absolutely at fault for WannaCry

 
dubyabrian profile image
W. Brian Gourlie

Indeed it appears an unpatched Windows 10 would have been affected as well.

You continue to gloss over the fact that Microsoft patched the vulnerability far in advance of it being used (or at least, used widely).

With all these points being made, your argument boils down to "Microsoft is at fault because their software has vulnerabilities." Which, sure. Point me to a large C/C++ codebase that doesn't have any vulnerabilities. It's not reasonable to say that software just shouldn't have vulnerabilities.

What is reasonable to say is that vulnerabilities should be patched in an expedient manner. Which is was.

Thread Thread
 
mortoray profile image
edA‑qa mort‑ora‑y

We have to assume there are vulenerabilities, precisely as you say. The goal is to design a system around this assumption. For this there are known techniques, which Windows does not appear to be using.

That is, I'm not holding anybody accountable for the particular error in SMB. This is unavoidable. What I take issue with is how this error allowed code injection and escalation.