4 ms·
> So NSA knew 90 days ago and gave MS the heads up. Where do you get that conclusion from? I don't read any such claim from this advisory. MS seems at least fo
by hannob 10y ago
> So NSA knew 90 days ago and gave MS the heads up.
Where do you get that conclusion from? I don't read any such claim from this advisory. MS seems at least for now to stay silent how they got info about those exploits.
There are various ways this could've happened. NSA could've warned them. Shadowbrokers could've warned them. Someone else with inside knowledge could've given them anonymous tips. From the current available information we don't know that.
- strictnein 10y agoThe Shadowbrokers were trying to sell these exploits. There's screenshots from ~90 days ago with these all listed for sale with slightly modified names. This probably explains why MS skipped February's patch day. They were extremely busy fixing all of these and wanted to do them all at once.
- nthcolumn 10y agoNo you're right I have no idea. For all I know these vulns could have been crafted by MS themselves as convenient backdoors at the behest of the NSA et al with tested patches on ice for the eventuality that they had to go away some day.