John Carroll

security configuration attestation is what we’re looking for here, ‘verify an administrator can verify’ forgive me ! Is a bit word soupy, - perhaps 4 (appropriate) eyes on changes +...

I’ve some big thoughts on telemetry, and I think there should be a declaration schema - that might be an external thing to ASVS (pedantically privacy isn’t a security concern)...

My thoughts here are, limiting telemetry isn't a security concern, it's a privacy issue, dependent on what the business wants, what the user accepts - personally I love zero telemetry...

we have security officers for security issues and privacy officers or privacy issues Leaking information isn't the same as allowing information. This is a permission issue if it's a vulnerability...

To qualify the weight of data collected and data processed is a task for organisations data protection officers, the role of an application defender is to ensure the safety of...

I think you're confusing scope with responsibility. No one said it's not a concern. I don't agree that _privacy_teams issues are _security_teams issues. The link you provided on CIA is...

Let me make it easier. Do you think it's security's responsibility to do privacy's job ? If your answer is yes, you fail to recognise the systemic challenge of washing...

@0xdade I like that, thank you... I'm sorry it took this long to get back to you (mad year!), so the one goal of this project was to make contact...

slight adjustment in the install script change the python3 line to a relative path from /root/shadow/requirements.txt to requirements.txt it should look like: python3 -m pip install -r requirements.txt a easy...

Thanks @wietze ! (let's make it 6 ?) PhoneExperienceHost.exe will eat YourPhone.AppCore.WinRT.Utilities.dll using the above method (altho that exe was hard to find :] - I came back to see...