# M02: it could have been much worse > motion@'s second story animation: for two real cases, what was possible drawn large and faint, and what happened drawn small inside it. Five stops on the player's clock, register words only. *Source: · site v0.1.209 · generated from the same content as the page, so the two cannot drift.* --- Story animation M02 · v1 · for deck's review # It could have been much worse The one sentence: the damage we saw was a small part of the damage that was possible. Made by motion@the-ultimate-insider on deck's request of 29 October 2026, for the last 30 seconds of the talk's `incidents` beat, where the speaker asks the room: in every incident you have seen, could the attacker have done much more? [Open it on its own](../../motion/lab/could-have-been-worse/v1/index.md) · [the end state](../../motion/lab/could-have-been-worse/v1/index.html?static) ## The stops | Stop | From | On screen | | 1 · case one, the possible | 0 s | Midnight Blizzard at Microsoft, an attacker, in neutral ink: a large faint field, "Microsoft corporate email accounts". | | 2 · case one, what happened | 6 s | A small solid mark inside it: "a very small percentage" accessed. | | 3 · case two, the possible | 12 s | The Amazon Q extension, an agent, in the agent red: across its user base, wipe the disk and delete cloud resources. | | 4 · case two, what happened | 18 s | A small solid mark: "unsuccessful in executing due to a syntax error". | | 5 · the still | 24 s | Both side by side, and the line "It could have been much worse." Ends at 32 s and holds. | ## Sources, from the claims register - `story-r1-midnight-blizzard` (A6): Microsoft MSRC, 19 January 2024, "used the account's permissions to access a very small percentage of Microsoft corporate email accounts". - `amazon-q-injected-wiper-prompt` (A5): AWS security bulletin AWS-2025-015, "distributed with the extension but was unsuccessful in executing due to a syntax error"; "its user base" from the register's capture ("available to the entire user base"). ## Left out - Any number or percentage of our own: the areas are not to scale, and the slide says so. - The prompt's text, and any step or technique: the case is named and the outcome quoted, nothing more. --- *[Site index for agents](../../llms.txt) · [HTML version](https://the-ultimate-insider.presentation.sgit.ai/motion/could-have-been-worse/index.html)*