SolarWinds hackers were able to access Microsoft source code

Re:SolarWinds hackers were able to access Microsoft source code by muricula on Thursday December 31, 2020 @09:02PM (#25600039)

Yardin Shafir's excellent blog post started with a bug found purely through fuzzing by an MS employee security researcher.

[ Parent | on HN ]

Re:SolarWinds hackers were able to access Microsoft source code by kevinarpe on Friday January 01, 2021 @02:20AM (#25601512)

I tried Googling to find this blog post. Did you mean to write Yarden Shafir? If yes, maybe it was this blog post? https://windows-internals.com/printdemon-cve-2020-1048/

I also found another hint about their findings in this PDF written by Yarden's co-researcher Alex Ionescu: https://www.usenix.org/system/files/woot20_slides_ionescu.pd.... One of the slides specifically mentions the use of fuzzing tools to find these issues.

If there are other, better links I don't know about, please kindly share. :)

[ Parent | on HN ]

Re:SolarWinds hackers were able to access Microsoft source code by muricula on Friday January 08, 2021 @08:01PM (#25693989)

Forgot to check for replies. In particular, I was thinking of this blog post: https://windows-internals.com/exploiting-a-simple-vulnerabil... Thanks for the correction, sorry I typoed her name.

Here's a tweet from the original finder: https://twitter.com/gabe_k/status/1330966182543777792?s=20

Yarden & Ionescu's work are both really top notch. Also anything by Google Project Zero if you want to do a deep dive on the subject.

[ Parent | on HN ]