News for hackers. Stuff that matters.
Re:Shadow Brokers exploits are patched or inactive on suppor... by hexadecimated on Saturday April 15, 2017 @06:05AM (#14120113)
This idea that Microsoft is deliberately introducing bugs into its software so nation states can exploit them is so absurd, it really is tinfoil hat conspiracy theory ludicrousness.
Re:Shadow Brokers exploits are patched or inactive on suppor... by hl5 on Saturday April 15, 2017 @06:53AM (#14120226)
How absurd was Room 641A? Congress had to step in and grant retroactive immunity.

https://en.wikipedia.org/wiki/Room_641A

Re:Shadow Brokers exploits are patched or inactive on suppor... by hexadecimated on Saturday April 15, 2017 @07:25AM (#14120323)
Room 641A wasn't a software vulnerability trying to hide in plain sight, it was a secret network tap.
Re:Shadow Brokers exploits are patched or inactive on suppor... by bigtimeidiot on Saturday April 15, 2017 @07:39AM (#14120357)
>it was a secret network tap

...trying to hide in plain sight, implemented by a major corporation so nation states cold exploit customers.

Re:Shadow Brokers exploits are patched or inactive on suppor... by hl5 on Sunday April 16, 2017 @06:36AM (#14125242)
It's unlikely the NSA would illegally infiltrate only one multinational corporate entity given the exposed operational success.
Re:Shadow Brokers exploits are patched or inactive on suppor... by partycoder on Saturday April 15, 2017 @10:05PM (#14123967)
Going back to your original comment

> This idea that Microsoft is deliberately introducing bugs into its software so nation states can exploit them is so absurd, it really is tinfoil hat conspiracy theory ludicrousness

Replace Microsoft with AT&T and suddenly it makes sense?

Re:Shadow Brokers exploits are patched or inactive on suppor... by partycoder on Saturday April 15, 2017 @06:30AM (#14120181)
This is why I said:

> Are these good faith bugs or willful backdoors? Most likely they're bugs, but it is hard to know.

My suspicion on Microsoft has more to do with the latter facts I mentioned.

Then, you need to understand this happens within the framework of espionage, which is by nature concealed and discrete, and not necessarily with consent (e.g: infiltration).

Re:Shadow Brokers exploits are patched or inactive on suppor... by kuschku on Saturday April 15, 2017 @06:08AM (#14120123)
It doesn't have to be known by Microsoft management.

It's enough if the NSA has people working at MS on their payroll.

Re:Shadow Brokers exploits are patched or inactive on suppor... by partycoder on Saturday April 15, 2017 @06:28AM (#14120173)
In the case of Yahoo for example, there were surveillance mechanisms that were even unknown to their security team (a Linux kernel module).
Re:Shadow Brokers exploits are patched or inactive on suppor... by hexadecimated on Saturday April 15, 2017 @06:16AM (#14120145)
That's just an insinuation of conspiracy with no evidence whatsoever behind it. The more believable alternative is that developers simply make mistakes now and then.
Re:Shadow Brokers exploits are patched or inactive on suppor... by MichaelGG on Saturday April 15, 2017 @10:39AM (#14120891)
But having state sponsored employees is so obvious, effective, and cost efficient it seems odd to assume it's not being done. The US found a bunch of Russian spies a while back.

But true, it's not right to assume any particular vuln is from spies.

Re:Shadow Brokers exploits are patched or inactive on suppor... by kuschku on Saturday April 15, 2017 @02:16PM (#14121973)
Correct. But you have to assume the spies have vulns in there, either intentionally added, or, if they found vulns, they simply reported them to their agency, instead of their employer.
Re:Shadow Brokers exploits are patched or inactive on suppor... by cormacrelf on Saturday April 15, 2017 @06:21AM (#14120151)
And even if it were true, it wouldn't be a reason to distrust Microsoft as a whole.
Re:Shadow Brokers exploits are patched or inactive on suppor... by alphapapa on Saturday April 15, 2017 @10:45AM (#14120921)
You sound like a shill. Typical deceptive argumentation tactics. Casually dismissing anything you don't like, ignoring common knowledge, veiled insults toward your opponents, and hypocritically advocating blind faith in your position without any evidence behind it--a position which happens to leave you completely vulnerable to trivial deception by plausible deniability.

Oh, and a new account, too. I should hope that few people here would be so naive as to not see through you.

Re:Shadow Brokers exploits are patched or inactive on suppor... by glasz on Saturday April 15, 2017 @08:56AM (#14120536)
everything snowden put out was tinfoil stuff before him. echelon was tinfoil. room 641a was tinfoil.

give us a fucking break from such dangerous naivety.