4 ms·
Exploits are much easier to find if you have pure source code and not having to reverse engineer it.
by j_walter 6y ago
Exploits are much easier to find if you have pure source code and not having to reverse engineer it.
- acct776 6y agoAssuming your source isn't a fucking mess, is commented, APIs documented, etc
- rhexs 6y agoNo, it’s still much easier.
- onionisafruit 6y agoRight. One place I worked would probably benefit from attackers getting access to the source code. It would cost them weeks of productivity trying to figure it out.
- tpmx 6y agoThe core Windows source code is surprisingly readable/well written, I've heard.
- sn_master 6y agoWe are morons! http://atdt.freeshell.org/k5/story_2004_2_15_71552_7795.html http://atdt.freeshell.org/k5/story_2004_2_15_71552_7795.html
- tpmx 6y ago> Despite the above, the quality of the code is generally excellent. Modules are small, and procedures generally fit on a single screen. The commenting is very detailed about intentions, but doesn't fall into "add one to i" redundancy.
- sn_master 6y agoyup, similar sentiments are always given whenever MS code leaks, whether the MS DOS 6 that MS officially released, or the more recent Windows XP leak. Nobody who looked into it claimed any of the code was "messy" or anything but excellent engineering.
- deleted 6y ago[deleted]
- unionpivo 6y agoEvery state actor already has MS source code, because Microsoft is giving them access (including china). And this doesn't look like something bored 15 year old would pull, So I doubt it was to access their source. If I had to guess, they were either trying to find something specific, about one of MS's customers (some gov org) or the target was Azure. Lots of corps keep a lot of data there.