Pluralistic: Microsoft pinky swears that THIS TIME they’ll make security a priority (14 Jun 2024) – Pluralistic: Daily links from Cory Doctorow
Or, as Bruce Schneier puts it: "Anyone can design a security system that you yourself can't think of a way of breaking. That doesn't mean it works, it just means that it works against people stupider than you."
the Solarwinds attack relied on defects in the SAML authentication system that Microsoft's own senior security staff had identified and repeatedly warned management about