News for hackers. Stuff that matters.

A comment on Patch Critical Cryptographic Vulnerability in Microsoft Windows [pdf].

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by age_bronze on Tuesday January 14, 2020 @01:50PM (#22047966)
Nothing screams "we have microsoft keys!" harder than the fact that the only vulnerabilities reported by the NSA is a cryptographic validation bug. If I had to guess exactly what kind of vulnerabilities they do not need, this is exactly those kind. Who needs crypto validation bug when you already own microsoft's keys?!
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by macinjosh on Tuesday January 14, 2020 @03:34PM (#22048976)
I think you're spot on. Everything agencies at this level do is calculated and weighed carefully. They definitely would not seek to patch a useful vuln. It is a PR stunt.
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by william_T on Tuesday January 14, 2020 @03:54PM (#22049144)
The NSA's job is to gather information. They have >400mil people to protect, and 6bn people to attack. They are in the business of using exploits, not closing them.
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by bepvte on Tuesday January 14, 2020 @06:37PM (#22050360)
Its patched because of the risk it poses to the government and from other state actors
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by cliqueiq on Tuesday January 14, 2020 @08:23PM (#22050949)
Thinking with my tin-foil hat: Same date as windows 7 last patch right? Not sure if this was a risk decision or an intentional message.
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by BlueTemplar on Wednesday January 15, 2020 @05:58AM (#22053239)
They likely have the control over the Intel IME backdoor too. And maybe even the (Ryzen) AMD equivalent.
[ Parent | on HN ]