32TB of Windows 10 Internal Builds, Core Source Code Leak Online (theregister.co.uk)

According to an exclusive report via The Register, "a massive trove of Microsoft's internal Windows operating system builds and chunks of its core source code have leaked online." From the report: The data -- some 32TB of installation images and software blueprints that compress down to 8TB -- were uploaded to betaarchive.com, the latest load of files provided just earlier this week. It is believed the data has been exfiltrated from Microsoft's in-house systems since around March. The leaked code is Microsoft's Shared Source Kit: according to people who have seen its contents, it includes the source to the base Windows 10 hardware drivers plus Redmond's PnP code, its USB and Wi-Fi stacks, its storage drivers, and ARM-specific OneCore kernel code. Anyone who has this information can scour it for security vulnerabilities, which could be exploited to hack Windows systems worldwide. The code runs at the heart of the operating system, at some of its most trusted levels. In addition to this, hundreds of top-secret builds of Windows 10 and Windows Server 2016, none of which have been released to the public, have been leaked along with copies of officially released versions.

Comments

Re: Oh no, security problems might be found!

[Anonymous Coward]

Not exactly. The difference is that, with open source, anyone can fix bugs and contribute those fixes back for everyone to benefit.

In theory, yes. In reality, not so much.

Or maybe you've already forgotten "heartbleed" which went unnoticed for .... how many years? Or the glibc bug that went unnoticed for 8 years, or the major Linux kernel bugs that went unnoticed for 3-4 years. Etc ... etc ... etc ...

"Many eyes makes bugs shallow" is a lie. Because the truth is, people rarely look at source code, other than the code they are currently working on.