4 ms·
If the 0 day is in an open source project this seems doable but I don't know if the NSA has access to the Microsoft or Cisco source code.
by icefo 9y ago
If the 0 day is in an open source project this seems doable but I don't know if the NSA has access to the Microsoft or Cisco source code.
- Natsu 9y agoThey very likely do have access to the Windows source code. Microsoft does share that with certain governments & educational institutions. I think the Chinese government also has access, FWIW, but it's been a long time since I looked into this.
- MichaelGG 9y agoI got personal access to the Windows source along with many others via the MS MVP program. And it's unlikely that even if MS was secretive that the USG cannot get multiple people working at MS with access.
- sillysaurus3 9y agoTrue, but blackbox pentesting is pretty common. If a company is informed of a flaw in their XYZ service with details of how the flaw operates, it would probably be enough.
- dogma1138 9y agoMS has a code sharing program. Large government contracts almost always have a code transfer clause in them if nothing else than if the company goes bust or no longer wants to support the product.