News for hackers. Stuff that matters.

A comment on Shadow Brokers exploits are patched or inactive on supported Windows platforms. Parent comment

Re:Shadow Brokers exploits are patched or inactive on suppor... by hannob on Saturday April 15, 2017 @07:31AM (#14120339)
> So NSA knew 90 days ago and gave MS the heads up.

Where do you get that conclusion from? I don't read any such claim from this advisory. MS seems at least for now to stay silent how they got info about those exploits.

There are various ways this could've happened. NSA could've warned them. Shadowbrokers could've warned them. Someone else with inside knowledge could've given them anonymous tips. From the current available information we don't know that.

[ Parent | on HN ]
Re:Shadow Brokers exploits are patched or inactive on suppor... by strictnein on Saturday April 15, 2017 @01:55PM (#14121866)
The Shadowbrokers were trying to sell these exploits. There's screenshots from ~90 days ago with these all listed for sale with slightly modified names.

This probably explains why MS skipped February's patch day. They were extremely busy fixing all of these and wanted to do them all at once.

[ Parent | on HN ]
Re:Shadow Brokers exploits are patched or inactive on suppor... by nthcolumn on Saturday April 15, 2017 @02:55PM (#14122191)
No you're right I have no idea. For all I know these vulns could have been crafted by MS themselves as convenient backdoors at the behest of the NSA et al with tested patches on ice for the eventuality that they had to go away some day.
[ Parent | on HN ]