What's the backstory on this researcher? They seem to have a personal vendetta against Microsoft and thus releasing zero days that he found with the help of AI?
Seems like the gold rush period is over for bounty hunters and its more about who has access to hardware/token capital.
Is there any public word from Microsoft about what is going on here? Why would both Microsoft and Gitlab ban the user? I thought both platforms allowed hosting exploits and security research as long as everything is clearly marked up-front, I'm guessing some rules were broken?
It doesnt really matter. Banning someone GitHub account change literally nothing and its another proof Microsoft is not to be trusted as steward of open source platform.
What's the backstory on this researcher? They seem to have a personal vendetta against Microsoft and thus releasing zero days that he found with the help of AI?
Seems like the gold rush period is over for bounty hunters and its more about who has access to hardware/token capital.
I can’t help but feel Microsoft will regret this.
Guy finds zero days and gets no compensation. Instead gets banned.
Guy sells zero days elsewhere.
Also recently:
Satya Nadella says as much as 30% of Microslop code is written by AI:
https://www.cnbc.com/2025/04/29/satya-nadella-says-as-much-a...
Is there any public word from Microsoft about what is going on here? Why would both Microsoft and Gitlab ban the user? I thought both platforms allowed hosting exploits and security research as long as everything is clearly marked up-front, I'm guessing some rules were broken?
Well if it’s a full disk encryption exploit that still requires hardware access I imagine it would have been made for a 3-letter govt org or something
Shoot the messenger. That’ll fix it.
Researcher seems a bit unhinged.
Takes a certain kind of crazy to pay your bills with bug bounties.
That may go with the task of looking for low-level security holes.
Or being forced into homelessness by Microsoft
The optics don't look good for Microsoft, but we don't know their side of the story.
It doesnt really matter. Banning someone GitHub account change literally nothing and its another proof Microsoft is not to be trusted as steward of open source platform.
Surely, the public string of exploits means he can find gainful employment from any of the various spooks?
> forcing them to pack up and move shop to GitLab instead.
https://gitlab.com/nightmare-eclipse
Blocked user @nightmare-eclipse
Looks like they’re banned on GitLab as as well?
I suspect MS threatened them with a SmartScreen blackhole for the domain, I'm not surprised they pulled it.
I don’t like the idea Microsoft can bully other websites into blocking content they don’t like.
Do we have any evidence they did that other than the comment you replied to speculating?
This is such a bad idea and what the point anyway? Once 0-day is out its out.
Almost like trying to censor leakef HDCP key.
Basic conflict of interest stuff
MS owns GH. It's tonedeaf and criminal