6 ms·
Another aspect perhaps most of people ignored is: Chinese government has all the source code of Windows systems: http://news.cnet.com/2100-1016_3-5083458.html
by est 17y ago
Another aspect perhaps most of people ignored is:
Chinese government has all the source code of Windows systems:
http://news.cnet.com/2100-1016_3-5083458.html http://news.cnet.com/2100-1016_3-5083458.html
Including:
Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems
It's reviewed by top three Chinese universities and other three government agencies.
The Party is the new overload of 0day farmer.
- BrentRitterbeck 17y agoYeah, North Korea, Iran, and Afghanistan also have all of the source code of Linux. What is your point?
- jbooth 17y agoLinux security assumes source code visibility, Windows doesn't?
- BrentRitterbeck 17y agoYeah, so you give it to a government who is reviewing it for security problems. More than likely the NSA and CIA also have the source code for Windows.
- est 17y agoon the other hand iDefence itself has a conspiratable spooky background of CIA/DoD http://www.reddit.com/r/netsec/comments/app8q/_/c0issy7 http://www.reddit.com/r/netsec/comments/app8q/_/c0issy7 The more you poke into it the more it looks like a full scale war
- ig1 17y agoIt's not unusual among security firms, Kaspersky was founded by a Russian government cryptologist, Check Point was founded by a Unit 8200 alumni, etc. People with computer security talent founding security companies shouldn't be surprising, especially here of all places !
- joe_the_user 17y agoYes, Windows' closed-source nature has allowed MS to rely on security-though-obscurity. Now that one of the entities MS has taken behind it's golden screen has turned out to be a black hat, MS' approach is looking foolish.
- est 17y agoLinux is very different issue IMO. 1. Customized compilation result different address offsets thus an exploit is not very generic portable. 2. Everyone can do a static vulnerability scan for Linux source code, so if there is a hole it's more likely to be well known in the industry Recently series of events with google.cn suggests that this is just a test ground for industrialized 0day farming for closed source software as a strategic weapon.
- tvon 17y agoAll the pitfalls of open source with none of the benefits.
- dschobel 17y agoThe report stressed the need for checking Windows source code for security loopholes, especially in light of recent attacks The irony is too rich.
- kalid 17y agoJust fyi, this article is in reference to the Blaster/Slammer worms back in 2003.
- zyb09 17y agoSay what? Microsoft gave away the Windows source code to Chinese official for inspections? I'm absolutely stunned they would do that, never would've thought they agree to something like that.