- Sep 22, 2016
- 412
Jun 24, 2017 at 3:15 GMT
A massive trove in 32 terabytes of internal Microsoft source code, builds and tools have leaked onto the internet, downloadable by all and sundry,
The Register reports the files, Microsoft’s Shared Source Kit, appears to have leaked from internal Microsoft servers in March this year and includes the source to the base Windows 10 hardware drivers plus Redmond’s PnP code, its USB and Wi-Fi stacks, its storage drivers, and ARM-specific OneCore kernel code.
It also includes new builds for Windows 10 and Windows Server 2016, unreleased 64-bit ARM versions of Windows and multiple versions of Microsoft’s Windows 10 Mobile Adaptation Kit.
The source kit, found, but since removed on Beta Archive, is meant to be available to only “qualified customers, enterprises, governments, and partners for debugging and reference purposes,” and access to the source code may make it easier for motivated hackers to find exploits in Windows.
On the other hand, given that the code was already meant to be available to “qualified customers, enterprises, governments, and partners” its release may not be such a big deal after all, as Microsoft may already have an expectation that this data could one day leak.
We should see the impact if any of this leak with increased malware targeting Windows in the coming months. Hopefully, this won’t rise above the noise level normal for the biggest desktop operating system in the world.
A massive trove in 32 terabytes of internal Microsoft source code, builds and tools have leaked onto the internet, downloadable by all and sundry,
The Register reports the files, Microsoft’s Shared Source Kit, appears to have leaked from internal Microsoft servers in March this year and includes the source to the base Windows 10 hardware drivers plus Redmond’s PnP code, its USB and Wi-Fi stacks, its storage drivers, and ARM-specific OneCore kernel code.
It also includes new builds for Windows 10 and Windows Server 2016, unreleased 64-bit ARM versions of Windows and multiple versions of Microsoft’s Windows 10 Mobile Adaptation Kit.
The source kit, found, but since removed on Beta Archive, is meant to be available to only “qualified customers, enterprises, governments, and partners for debugging and reference purposes,” and access to the source code may make it easier for motivated hackers to find exploits in Windows.
On the other hand, given that the code was already meant to be available to “qualified customers, enterprises, governments, and partners” its release may not be such a big deal after all, as Microsoft may already have an expectation that this data could one day leak.
We should see the impact if any of this leak with increased malware targeting Windows in the coming months. Hopefully, this won’t rise above the noise level normal for the biggest desktop operating system in the world.
