Re:SolarWinds hackers were able to access Microsoft source code
by webmobdev on Thursday December 31, 2020 @01:55PM
(#25595783)
Yeah, the whole point of looking through the source code is to find undocumented APIs and bugs to exploit.
[ Parent
| on HN ]
Re:SolarWinds hackers were able to access Microsoft source code
by monocasa on Thursday December 31, 2020 @02:01PM
(#25595868)
A lot of times stuff like undocumented APIs and bugs are easier to find taking apart the binary anyway. Goofy stuff tends to be obfuscated in source as engineers add so much abstraction around the goofy pieces, but it's clear in the final binary.
Re:SolarWinds hackers were able to access Microsoft source code
by webmobdev on Thursday December 31, 2020 @03:30PM
(#25596791)
> A lot of times stuff like undocumented APIs and bugs are easier to find taking apart the binary anyway.
Is that why Microsoft, and all you people who poke at its binaries, have fixed all the bugs in MS binaries? /s
Re:SolarWinds hackers were able to access Microsoft source code
by monocasa on Thursday December 31, 2020 @04:05PM
(#25597122)
Why do you think the people poking around MS's binaries overwhelmingly want the bugs they find to be fixed?
Re:SolarWinds hackers were able to access Microsoft source code
by webmobdev on Friday January 01, 2021 @01:48AM
(#25601400)
The point was that if it was so easy, a lot more people would be disclosing the bugs and asking MS to fix. Not everyone hacker has a malicious intent.
Re:SolarWinds hackers were able to access Microsoft source code
by saltyshake on Thursday December 31, 2020 @02:18PM
(#25596072)
there are many books written on Windows undocumented APIs. these things aren't hidden at all.
Re:SolarWinds hackers were able to access Microsoft source code
by webmobdev on Thursday December 31, 2020 @03:33PM
(#25596809)
Yeah, right. Everything is so open about all MS binaries that they don't even need to be closed source! It takes a lot of time and effort to find these poking the binaries, and then experimenting them. The source code makes this task obviously easy.