CEO promises "rigorous threat modelling... embedding security into every stage of the software development lifecycle"
"The loss of a signing key is a serious problem, but the loss of a signing key through unknown means is far more significant... Microsoft’s customers did not have essential facts needed to make their own risk assessments."
"A corporate culture that deprioritized both enterprise security investments and rigorous risk management."
As well as coming under immediate pressure on social media chatterati to be immediately amusing and bring his meme A-game, Luber faces other challenges too...
Incident suggests a state actor exploiting overstretched maintainer of an "unpaid hobby project"