News for hackers. Stuff that matters.

A comment on Thousands of computers now compromised with leaked NSA tools, researchers say. Parent comment

Re:Thousands of computers now compromised with leaked NSA to... by icefo on Sunday April 23, 2017 @01:26PM (#14179160)
If the 0 day is in an open source project this seems doable but I don't know if the NSA has access to the Microsoft or Cisco source code.
[ Parent | on HN ]
Re:Thousands of computers now compromised with leaked NSA to... by Natsu on Sunday April 23, 2017 @01:31PM (#14179196)
They very likely do have access to the Windows source code. Microsoft does share that with certain governments & educational institutions. I think the Chinese government also has access, FWIW, but it's been a long time since I looked into this.
[ Parent | on HN ]
Re:Thousands of computers now compromised with leaked NSA to... by MichaelGG on Sunday April 23, 2017 @02:03PM (#14179410)
I got personal access to the Windows source along with many others via the MS MVP program.

And it's unlikely that even if MS was secretive that the USG cannot get multiple people working at MS with access.

[ Parent | on HN ]
Re:Thousands of computers now compromised with leaked NSA to... by dogma1138 on Sunday April 23, 2017 @02:32PM (#14179587)
MS has a code sharing program. Large government contracts almost always have a code transfer clause in them if nothing else than if the company goes bust or no longer wants to support the product.
[ Parent | on HN ]
Re:Thousands of computers now compromised with leaked NSA to... by sillysaurus3 on Sunday April 23, 2017 @01:33PM (#14179207)
True, but blackbox pentesting is pretty common. If a company is informed of a flaw in their XYZ service with details of how the flaw operates, it would probably be enough.
[ Parent | on HN ]