Slashdot Mirror
Microsoft Says Previous Windows Patches Fixed Newly Leaked NSA Exploits (pcworld.com)
Microsoft said it has already patched vulnerabilities revealed in last week's high-profile leak of suspected U.S. National Security Agency spying tools, meaning customers should be protected if they've kept their software up-to-date. From a report: Friday's leak caused concern in the security community. The spying tools include about 20 exploits designed to hack into old versions of Windows, such as Windows XP and Windows Server 2008. However, Microsoft said several patches -- one of which was made only last month -- address the vulnerabilities. "Our engineers have investigated the disclosed exploits, and most of the exploits are already patched," the company said in a blog post late on Friday. Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.
you are completely secure citizen. not that you had anything to hide... right?
I'd rather they fix the god damn default apps reseting themselves randomly for no good reason instead. Since the day Windows 10 came out it's been an issue. No I don't want Edge to be my default PDF reader, now stop reseting my shit!
They patched them in the months before they were released, which implies one of two things : Wikileaks contacted them ahead of the release, or the NSA contacted them ahead of the release.
The NSA doesn't have to hack for windows user data, Microsoft is doing the spying for them with Windows 10.
Microsoft has never been known for security prowess, it stands to reason the Wikileaks dump was controlled and Microsoft had foreknowledge of what was being dumped.
ONE of the fixes was fairly recent. Most are old fixes for old exploits.
Our company actually has more recent code than the NSA has in this dump.
From our analysis so far, we're most concerned about Windows 2003.
"We're the only ones allowed to pwn our customers", says Microsoft to the NSA.
'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
Your windows 10 spyware will install if I turn on updates.
It's a catch 22 gentlemen
probably Linux Torvallis woudl send angry emails to his free devloperes telling them they do sloppy work
Yea, we discussed this a couple of days ago on reddit. Frankly the whole thing is.... suspicious to say the least.
https://www.reddit.com/r/sysadmin/comments/65j5nc/nsa_exploits_not_zero_days_they_were_patched_or/dgaw45u/?context=3
Because we really need to install this telemetry tracking software and keylogger on your computer.
And by the way, if you are a developer, we're going to slurp samples of your code back through Visual Studio for 'analysis'
And added new ones...
...isn't whether they fixed the exploits or not. The real question is how many more exploits were added at the NSA's behest alongside these new patches.
There are suspicions that Microsoft included a key in Windows just for the NSA:
https://en.wikipedia.org/wiki/NSAKEY
If you can't hire an independent contractor to audit the code to your standards, you probably don't want to use it for tasks that require security.
So: Put it on your gaming box, but don't use it for online banking, social media, etc.
What you just said is one of the most insanely idiotic things I have ever heard. At no point in your rambling, incoherent response, were you even close to anything that could be considered a rational thought. Everyone in this room is now dumber for having read to it. I award you no points, and may God have mercy on your soul.
I'm OEM so no third party participation and Win10 is a tiny freaking OS. My Mom had a preference of shopping with out me and bringing home Acers. I missed my games and went Windows 10 Pro and so far 2 Linux Mint OS's, but it's early - Asus's EFI-BIOS will not update
There are mistakes in the TOS (You read it if asked), one being who you get the updates from, MicroSoft and a tightly controlled thirds. If you use Autoruns https://technet.microsoft.com/... you will find a server running, while mayhaps a bad thing, I see it as their plans of sending them out as torrents (and against the TOS).
Having no malware handy other than the stuff I know I have (no you can't touch that), had to use Eciar https://en.wikipedia.org/wiki/... and found Defender fairly quick and killed a bit of time hiding the packets :)
Windows is dead.
Face it.
god is a Luddite concept, we worship at the altar of AI which is a large touch screen with Apps that can ape apps with their deep learning neural networks... or something like that
So basically the government is fine with people personally selecting which information they will keep private
The summary actually contradicts the title.
Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.
Many people still run XP and are at risk because of three unpatched flaws.
ONLY apps can app apps, which is why Appdows 10 changes the default apps to appy app apps instead of your filthy LUDDITE software! Apps!
He's back! Now where is that Idiot moderator tag?
Why should I --given past and recent Microsoft behavior-- believe anything they say? Just because...
"Just fucking trust us"?
No.
Sure, Jan.
Apps are for cows! You are all LUDDITE cows. Cows say moo. MOOOOOOOOOO! MOOOOOOO! Moo cows MOOOOOOO! Moo say the cows. YOU LUDDITE COWS!!
I don't trust Microsoft, and I don't believe them. Using a computer today, for me, is terrible, things designed badly, not being secure, having no privacy. :O
Anyone know if there are any available auditing tools for these, specifically? I've got a meeting with my upper managment and cross-country team and would love to show them this specifically as to why they need to drop 2008 ASAP.