A quite severe vulnerability was found in Skype (at least for windows, not sure about other systems) allowing anyone with system access (remote or local) to replace the update files skype downloads before updating itself with malicious versions because skype doesn't check the integrity of local files. This could allow an attacker to, once gaining access to the system, 'inject' any malicious DLL into skype by placing it in the right directory with the right file name and waiting for the user to update (except with auto updates of course).

From a company like Microsoft, taking in mind that skype has hundreds of millions of users worldwide, I'd expect them to take a very serious stance on this and work on a patch as soon as possible.

What they said about this: they won't be fixing it anytime soon as it would require a quite big rewrite of skype.

This kinda shit makes me so fucking angry, especially when it comes from big ass companies 😡. Take your fucking responsibility, Microsoft.

My mother sits in front of me with her laptop. After a time she asks me, who founded Microsoft. I say: "Bill Gates but why?"
She: "Oh my god, I am winning an iPhone!!!"
I know exactly what's going on, so I go to her and show her the shitty URL and some grammar mistakes in the text and close the tab after explaining that it is phishing.
After that she just looks at me and is sooooo angry about me, because she still thinks that it was real. Only because they "knew which Internet provider we were using and that they just wanted to reward us for being customer!!!". I'm so sad now, because I never thought she would fall for sth. like this... 😔

(I wrote most of this as a comment in reply about Microsoft buying GitHub on another rant but decided to move it here because it is rant worthy. Also, no, I'm not a Microsoft employee nor do I have any Microsoft stock).

Microsoft buying GitHub makes sense. They contribute more to the open source community on GitHub than any other company. (Side note, they also contribute/have contributed to the Linux Kernel).

Steve Ballmer isn't running the show anymore. Because of that, we have awesome things like:

* Visual Studio Code - Completely free and powerful light weight IDE for coding in just about any script or language. This IDE is also open source, hosted on GitHub. It can be installed on Win/Mac/Linux.

* Visual Studio Community Edition: fully featured flagship IDE free for solo developers and students, can be installed on Win/Mac.

* Fully featured Sql Server running in a Docker container.

* .Net Core, which can be compiled to native binaries of Windows, MacOS AND Linux. You can't even do that with Java, you have to first have the JVM installed in order to run any kind of Java code on any of those operating systems. .Net Core is also an absolutely beautiful framework with so many features at your disposal.

...and more.

Yes, they've done bonehead things in the past but who/which company hasn't. Yes, they have Cortana. Yes, they force Bing on you when searching with Cortana (does anyone actually regularly use Cortana? Or Bing?). Yes, their operating system costs money. Yes, their malware-style Upgrade-to-Windows-10 tactics were evil and they admitted such. Yes, they brought ads and other unfortunate things to Skype. I'd be lying if I said I wasn't concerned about that Skype bit translating over into GitHub. BUT, the fact that so many of their employees use GitHub daily means they are dogfooding the platform, which is a positive thing.

Despite the flaws, from the perspective of a software engineer they really should be given a lot of credit for all these new directions they are moving in now. They directly aim to help and contribute to the developer community. Plus, Windows 10 is finally getting a dark theme! haha.

I think Microsoft buying GitHub makes a lot of sense. Of course do what you want about it, feel how you want about it, but casting the same ol' shade at them for anything they do seems a bit like automatic reflex more than anything else.

I'm bracing myself for the impending wave of angry hornets from the nest I just kicked. In all seriousness though, I welcome discussion on the topic even if you feel differently than I do. I'm not saying there's no reason to dislike them, just saying there are lots of new reasons to hate them less and/or appreciate what they are doing now.

After investigation, I'm just refreshing my os and hoping I can reconfigure work applications. Feel bad, but help desk friends are getting me the software to install and are helping me out on a day off.

Wasn't the application like I thought. It was the useless update that won't install and therefore can't be rolled back but is still getting in the way of my work, therefore they can all daisy chain their dicks together in the sane manner little kids make daisy crowns, and then have a steamroller head towards them with faulty brakes (steamroller operator is innocent in this scenario, he jumps out safely).

I'm planning on calling Microsoft in the morning to tell them what I think of them at the moment. But I'm too angry to form words that don't sound petty and childish. I'm open to suggestions.

I've been using the Square REST API and I spent one hour thinking there was something wrong in my code until I f** found that THEY were not following OAuth 2 guidelines, which made their workflow incompatible with the OAuth lib I was using, so I had to mark an exception for Square's OAuth from the rest of my OAuths. Specifically, RFC 6749 Section 4.2.2 and 5.1.

However, after reading OAuth 2 guidelines, I became angry at THEM instead. The parameter `expires_in` should be the "lifetime in seconds" after the response. This will always be innevitably inaccurate, since we are not taking into account the latency of the response. This is, however, not a huge problem, since the shortest token lifetimes are of an hour (like f** Microsoft Active Directory, who my cron jobs have to check every ten minutes for new access tokens). Many workflows (like Microsoft, Square, and Python's oauthlib) have opted to add the `expires_at` parameter to be more precise, which marks the time in UTC. However, there's no convention about this. oauthlib and Microsoft send the time in Unix seconds, but Square does this in ISO 8601. At this point, ISO 8601 is less ambigious. Sending a raw integer seems ambiguous. For example, JavaScript interprets integer time as Unix _milliseconds_, but Python's time library interprets it as _seconds_. It's just a matter of convention, a convention that is not there yet.

Hope this all gets solved in OAuth 2.1 pleeeaasseee

I'm going insane.
My colleague wanted to sort an excel spreadsheet and got an error. "Can't sort, column width must match" (or something along the lines) . Which basically means you got non uniformly merged cells.
Without telling me this, he asked for training on how to change column width precisely, after spending 30 minutes explaining he done just that. Column by column for all 40 columns he did just that. Resized to 10 of something (no one really knows what those width numbers in Microsoft Excel really mean) and try to sort.
I Shit you knot, he got the exact same error and flipped out angry at me for creating a shitty system (I think he spent an hour or two total with double and triple checking the sizes)
I did laugh because of this, but I do feel bad for not asking what was the real reason before all of this.

I'm very angry at C# 😡 (and java in some degree). Recently I decided to create huge project in C#. (It is my favorite launguage now because of great VS2017 its features, lib and such). I used windows form app in order to make pretty gui for this program. Everything worked fine, but i decided to implement some 3d rendering system in order to display grafs in 3d, oh how foolish was I.

Ok so what are my options?
1.DirectX9 -> abandoned by microsoft, they say its ded so nope.
2. DX11 -> great! i even can use sharpdx or simpledx to use it! oh wait, what is that? INVALID DX CALL
(in demo code)Damit!
3.OpenGL -> obsolete, lib non existent.
4. Library that comes with .NET -> WFP only sorry!
(i found some dogdy tutorials on yt for dx11 but they need .net 2.0 really?) 😐

In that moment i decided to swich to java. (because Java c#_launguage = new Java("microsoft");)
After 1 day of instaling eclipse and 2 more to install the newest jdk MANUALY i realized that java isn't that easy to use as C#, because:
- no dynamic type-> HUGE PAIN i cant use a single list to store everything buuuu!
-console? yes but its burried inside some random lib and its not consistent with every java version!
-gui editor similar to VS one? oh you need to create it from scrach!😫

Well at lest i can render things. So maybe java will render suff as another tool in my app? Nope pipes NON existent, we need to use sockiets! (unity pipe plugin was easier! worked but it was SLOW)

Ok so after few more days of struggling i managed to render simple graf using directx9 in my original C# project that works fine.. 😥 I only need to create a lib to wrap in and we are done!

Why can't companies create a laungage that will have ALL the features i need? Or at lest give me something like pipes that work in every laungage that will be helpful!

I know it is sometimes stressful to be a dev. But when your program works 😀 that is great feeling! Especialy when you learned to code yourself like me 😁. (student before a university, that lives in small abadoned town)

Microsoft FUCK YOU!
How the fuck did you lock my account and make it impossible for me to recover it.
I have send you all the information that you have asked me and you still tell me that you can't prove my ownership? Bullshit!

Aggggghhh, this is making so angry since all my accounts are setup to log in with that email account.

This is why I hate technical support people who only reply what is written in a fucking script.

Sorry for swearing that much. Not really. Fuck you Microsoft!

What is your experience with Azure and Azure DevOps?

I got a decent job offer but they are microsoft die-hards and use everything from M$.

Is it usable or is it making you angry?

tl;dr: azure support are utter bollocks

so about late june-ish, my azure student subscription expired, which i wasn't notified about. but that's fine, surely once it's expired i can get my data back, right?

...right?

i try to download the .vhd file with my nodejs project on, and then contact their support after failing to mount the vhd. i asked them whether they could get my data for me (or at least provide some clear instructions, in case i mounted the vhd incorrectly). instead i was told to do loads of things, creating blobs, making snapshots, etc... all of which did absolutely nothing.

mid-august, i'm still trying to get my data back, when i get a call from, you guessed it, microsoft azure. a manager had told me that all my data had been lost, and that i was eligible for $500 in credit in compensation. i was angry (and rightly so), and refused their offer. i emailed azure support again expressing my anger, for them to tell me that my data wasn't lost...?

come to mid-september, and and i was fed up of waiting for my project. i wanted to finalise the fucker and launch the website, but azure had stalled me for well over two months. i had to put some money towards azure just to start up the vps, zip up the project, transfer it to another vps, and shut it back down.

and that kids, is why i wouldn't ever recommend azure.

ps: yes, i'm backing up files daily from now on