Hacker News Reader

Comment by Aurornis | Hacker News Reader

But the story is supposedly about him posting the zero-day exploits, not selling them. It’s in the title.

He also got banned from Gitlab, which isn’t related to Microsoft at all.

Ever considered these aren't the full set of exploits the researcher discovered? Or that he can find more since he found these? If I found a bunch, I'd certainly withhold a few as insurance.

He's claimed that he has more as well. He seems to have a personal vendetta against Microsoft going by his blog, said nothing will be released in June but will in July: https://deadeclipse666.blogspot.com/2026/05/july-14th.html

Sure, but GitHub and Gitlab aren’t the only two ways to share code on the Internet. The conspiracy theories about two unrelated companies shutting down his git accounts to prevent him from releasing these supposed exploits are reaching pretty deep into conspiracy theory nonsense. The conspiracy theories can’t even agree if he was banned for posting them or because he hadn’t posted them but might post them.

time to post on IPFS

Sadly, IPFS is compromised[0].

0. https://specs.ipfs.tech/ipips/ipip-0383/

What does this mean and compromised in which sense?

They’re pointing out a proposal that some nodes can block pins, resulting in censorship

and that censorship at all would compromise the point of IPFS

although I disagree with both of those takes. Nodes always had discretion in IPFS, just pick a different node or pin something yourself which has pretty much always been required. Everyone can route to your pinned files while pinned.

Ah! Ok, when I read compromised I thought it was a proposal that introduced a security vulnerability to the tech. Thanks!

Is Gitlab also part of this? This is disappointing but unsurprising :(

I can see a situation where Microsoft contacted federal law enforcement to strongarm both GitLab and GitHub. But I believe all megacorps are one giant government conspiracy so consider the source.

At this point, the government is a megacorp conspiracy.

I'm not sure if this is an unintentional mistake. Gitlab did not perform a ban. Github performed the ban. Github is fully-owned by Microsoft.

Yes they did: https://gitlab.com/nightmare-eclipse

That git account was posted on their blogspot...

Awful.

I understand Microsoft's being petty, but why would GitLab do this?

Lawyers?

Not one or the other but both. He's banned on GitLab as well.

Well, after they didn't pay him for previous bugs. Not an excuse but certainly a reason.

Are you sure?

Reply on news.ycombinator.com