Slashdot Mirror
32TB of Windows 10 Internal Builds, Core Source Code Leak Online (theregister.co.uk)
According to an exclusive report via The Register, "a massive trove of Microsoft's internal Windows operating system builds and chunks of its core source code have leaked online." From the report: The data -- some 32TB of installation images and software blueprints that compress down to 8TB -- were uploaded to betaarchive.com, the latest load of files provided just earlier this week. It is believed the data has been exfiltrated from Microsoft's in-house systems since around March. The leaked code is Microsoft's Shared Source Kit: according to people who have seen its contents, it includes the source to the base Windows 10 hardware drivers plus Redmond's PnP code, its USB and Wi-Fi stacks, its storage drivers, and ARM-specific OneCore kernel code. Anyone who has this information can scour it for security vulnerabilities, which could be exploited to hack Windows systems worldwide. The code runs at the heart of the operating system, at some of its most trusted levels. In addition to this, hundreds of top-secret builds of Windows 10 and Windows Server 2016, none of which have been released to the public, have been leaked along with copies of officially released versions.
Going to need a new storage array...
Only the State obtains its revenue by coercion. - Murray Rothbard
Maybe it tells us the secret to shutting down a laptop using ACPI in a way that doesn't drain the battery dead 2 hours after it "powers off" using Linux
Really very, very horrible. Really horrible. Very very not good at all, let me tell you. Leakers on any media, horrible. Don't watch that video.
Anyone who has this information can scour it for security vulnerabilities, which could be exploited to hack Windows systems worldwide.
You mean like.. BSD and Linux? Sounds like the way it should be -- the security by obscurity fad faded a long time ago.
nt
hundreds of top-secret builds of Windows 10 and Windows Server 2016
Is this top-secret as in Top Secret? as in classified information?
Or just private custom builds?
It seems they are just a heap of old builds, nothing top secret about them, most interim builds are only valid for a day or 2 till the next one. The Shared Source stuff while not publically available is hardly top secret either with hundreds if not thousands of organizations with it.
Maybe now we'll be able to find out what the telemetry actually sends back to MS and the three-letter agencies. It would also be nice for some to develop a way to completely kill it.
Ooops!
I hope this caused some synapses to fire.
Security!
I predict that Slashdot readers will be too cowardly to address my observation.
It's off-topic. Now, back to your containment board --> /pol/
Have gnu, will travel.
A) Plenty of muslims would disagree that you aren't born Muslim... you know, the sorts that would like to kill you.
B) Plenty of Muslims would disagree with the idea that you can just choose to leave... you know, the sorts that would like to kill you, and those who try to leave.
C) 'Muslim' isn't a race. Is a rabid atheist who hates religion racists for wanting to punish Christians?
In an effort to get more people to probe Windows 10 and find software flaws as well as confirm they aren't completely stealing your data. It's like open sourcing your OS without really open sourcing it! /sarcsam
/me goes to the store to get popcorn
How much is it if you skip all the #ifdef BUGS sections?
Have gnu, will travel.
If you sell these, even for 20 dollars to people claiming to be stupid enough not to download it for free. DO NOT DO IT.
You will get 2 years in prison and a news article and everyone will giggle.
sup willy beamer
captcha: carder (lol)
#ifdef US_GOVT_EDITION // Send stuff to Russia and China ... // Send stuff to NSA ...
#else
#endif
Time for another round of exploits.
Too bad it STILL won't tell anyone what is actually on a machine when a binary MS-Windows is installed. You still won't know what back doors, spyware, weakened encryption, "telemetry" sharing, and extra code was injected for the governments. And good luck on building something you will be able to actually install and use. This breech is unlikely to help anyone but black hatters, looking for vulnerabilities.
Meanwhile, grab distro Linux sources legally, see anything and everything you desire, and compile it and run it if you like.... it is actually DESIGNED to be compiled by people and groups who use it, if wanted.
This just in: it appears that many terabytes of Linux and GNU source code have also been leaked to the internet. Anyone who has this information can scour it for security vulnerabilities.
Microsoft should have protected their IP with APK's HOSTs file software! Some Trump supporting slashdotter probably thought running Linux on their nephew's PC was enough, though.
Who is leaking that source code??
... of the time the most religious manager at our Dallas office (nice guy, too) made me take a goddam trip to meet with him because he came in early and went to the network printer to get his stuff and his stack of papers included photos of nekkid wimmins.
He told me to look at the logs and tell him who printed the porn.
I informed the guy that with over 500 users who could choose any printer on any floor, that was not going to happen.
He was upset and frustrated and asked me why I couldn't help.
I told him that messages and logs related to printers were designed to aid in troubleshooting tech problems -- not to address personnel misconduct.
--
That's the answer here, as well.
No amount of infosec is going to stop determined employees.
For reference, see Manning, Snowden, and Winner.
It little behooves the best of us to comment on the rest of us.
The sky is falling!
Why is this bring posted here? No more SJW stories?
Calm your tits, bitch
No, Microsoft. Even if you give me the sources to Windows, I'm still not going to work on it for you.
Hahahahahahaha!!!!
http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
And nothing of value was lost. Yawn. Another slow "news" day for /.
Some of the Windows code was released. It was downplayed. But everyone had a good laugh at the notes which were left in it like (language cleaned up and paraphrasing.): My personal favorite..."Why was this section added?" - "Because someone is doing something way above our pay grade." - "Take this out! It could be exploited" - "It's been two years, why is this still here?" - "This was put in for a reason. Don't take it out again." - "I removed it because It could be exploited!" - "I don't give a m***er f**k! As long as it's our exploit it stays in!"
Care killed the cat, but satisfaction brought it back.
Sounds like a BS claim then.
Trust us with your data.
https://www.betaarchive.com/fo...
Seems The Register story may not be accurate, or if you prefer FAKE NEWS!
In other news, thousands of programmers appear to have gone blind and insane while screaming, "The Spaghetti! The Horror! It burns my eyes!"
Don't worry, it "plays for sure!!"
Source code for Window$ leaks and people freak like it's going to be used for exploits. A little late for that, don't you think? Yet, Linux developers release their code intentionally as open source and typically, the complete opposite happens.
How do you find anything in thirty two or whatever number of terrabytes? Are their algorithms to search for certain patterns?
Kind of like when IBM pushed source code belonging to SCO into Linux.
Run OS X
Stallman buys Microsoft since it got open sourced.
Microsoft has moved to the open source license model!
Yup, just look at all the APPLE leaks. OS source code everywhere.
I wonder if there are still secret "DOS ain't done 'till Lotus won't run" type traps in there anywhere. These days those would probably be aimed at things such as Firefox, Chrome, interop with competitors' cloud solutions vs. OneDrive, etc. ..and a real goldmine would be UEFI related stuff, or power management (Microsoft had intentionally made ACPI buggy and obtuse in order to discourage reliable Linux power management on laptops, if I recall correctly, years back when those standards were forming).
if you make derivative software from this MS software, that derivative software is under the same license (meaning copyright).
That's right, copyright itself is a viral license. Horrible isn't it.
A first glance of the headline, I was worried that they were insinuating that the 10.x builds toward toward Win 11 were in the neighborhood of 1 TB....
What a horrific waste of valuable hard drive space.
Every time I try to use a Windows laptop that I keep for Steam/Oculus games, it needs to install updates, or has installed updates and lost my game progress, or asks me to adjust my privacy settings for Windows 10 whatever edition. With source, one can presumably build a non-nagging distro with working DirectX and live free of this crap?
Beta Archive is a huge resource for beta/abandoned/other material archiving, primarily of unusual windows builds (Think all the pre-Win2k/XP/Longhorn era stuff), as well as backups of other media at risk of being lost.
The trade something new for access attitude is kind of old school, but it has served well in increasing the quantity and quality of available material on the site.
My only hope at this point after all these dumbasses have reported on it and shined a bright light that will engender many C&Ds if not lawsuits against it, is that somebody has mirrored the most unusual of its files to other websites/torrents/etc and will ensure it is available in the future.
Also in case anyone with betaarchive ftp access is reading this: Can you please double-check if the SWG source code up in the http://www.mrpijey.net/betaarc... directory tree on ftp is just the leaked nge code, or if it is the Pre-CU/CU source code and/or media assets, and ensure a duplicate of it makes it onto torrent sites (ideally I2P) before access to it is lost forever! If you need to verify the archives, try tracker2.postman.i2p (via a browser configured use i2p-router or i2pd's http web proxy to access I2P darknet addresses) and search for 'swg-src.zip' or 'swg' to find out if it is the same code mirrored on BetaArchive! Now is the time to protect and mirror these works, before, like a virtual burning of the Library of Alexandria, the data contained within is irrevocably lost to the annals of history.
Bonus points if you can mirror large swaths of that data and see to it that it ends up on a darknet mirror before the site inevitably shuts down as a result of all this attention!
Did they give it to James Comey?
"There are no gods, no devils, no angels, no heaven or hell. There is only our natural world. Religion is but myth and
BA only has ~16 terabytes of online storage. The majority of the data on the site (everything past 7-10TB is Win10 iso builds and heavily deduplicated, since almost everything is decompressed to help make deduplication easier.) Mirroring it would be easy if someone had a half dozen 4TB+ drives with a deduplicating filesystem.
Relax! Our most valuable and most secure operating system is out there for free! How am I suppose to explain that?
I don't know... Say it was all part of the plan!
What would be horrible would be if the Microsoft Certificate server was compromised allowing anyone to create certificates in the name of Microsoft using their private key.
On the other hand - if that happened we wouldn't be told because it would compromise every Windows computer out there.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
https://www.betaarchive.com/forum/viewtopic.php?t=37283
Remember those Enterprise Partnerships where Microsoft demanded manufacturers show them the firmware code, then suddenly, the hardware wouldn't work with the latest MS operating system? Microsoft can't do that anymore.
finally.
Not sure - Look at the source code!
For the real story to be mined out of this trove.
I predict we will see that consumer and small business software is heavily back-doored while corporate software is less so.
There is no way for me to trust that some leaked source code has anything to do with whatever runs M$ code on my machine. I would have to dump all the software I have on my machine, and then, keep doing that to make sure, there isn't anything foreign there.
You can usually compile the source and match it to the binaries - something new or different would then warrant further investigation. Depends on the compiler used for the output, and the binary matcher (probably diff would suffice!) but it wouldn't be too difficult to get the basics up and running.
Then it's just a case of looking for the differences that pop up, and working out why they're different.
(this assumes you have enough source code to produce binaries, and the same compiler/etc)
Source
Really hope Win 10 pure source code is way less than 1 TB, or that system is even more crappy than I thought, reusing old code as is, putting bandage on it to get something runable.
Slashdot, fix the reply notifications... You won't get away with it...
See subject: I see you also attempted to impersonate me https://it.slashdot.org/comments.pl?sid=10780983&cid=54678569/ there too.
* Grow up - get a life, loser!
APK
P.S.=> Moron... apk
But the freedoms of free software are still missing. Having a snapshot of what Windows code looked like at one time doesn't grant one the freedom to improve that code, distribute (including commercially) that code (or a variant of that code), and thus control one's computer or help one's community by distributing improved code.
Digital Citizen
Until Microsoft changes the source code to do something else. That's the thing about source code: people alter it and make programs do different things, so we need the freedoms of free software to control our computers, help keep people honest, and treat each other ethically.
Digital Citizen
Maybe, it is time for Microsoft to follow the NSA's recent example and just open-source their proprietary code...
In Soviet Washington the swamp drains you.
Fortunately, they use proper HSMs and whatnot, so even compromising their CA system couldn't get you the private key.
Here you go:
https://github.com/Microsoft
I know this may seem coincidental, but I recall MS just recently switched to Git for their source code. Wonder if one of their Linux servers were running unprotected.
The Kai's Semi-Updated Website Thingy
Mic drop.
Woohoo! Maybe we can start fixing some of those assertion Microsoft left laying around for the last 20 years or so!!
And after digging deep into the 32 TB, what when they finally find out that the innermost GB is a Linux kernel...
Slashdot, fix the reply notifications... You won't get away with it...
nothing of value was lost...
Microsoft has gone open source ;)
Did you learn that via the Hasbara?
I bet your proctologist says, "Get your head out of your butt!", when you first walk into his office.
Now that I've stooped low enough to communicate with you on your level, I find your religion related comment is off topic, conjecture based, and blatant bigoted. I'm sorry for you, of you've suffered the tragic experience of being a feral child raised and educated by a pack of rats. I'll pray for your enlightenment, the rest is up to you. I suggest you repair your warped knowledge be reading the Torah, Gospel of Jesus, or Qur'an with an open, unbiased mindset.