Windows 2K and NT go open source, oops ! - Tilted Forum Project Discussion Community

nanofever · 02-12-2004, 03:33 PM

"Leaked to the net tonight, we first got word of it at around 5pm, from a Neowin moderator...

The source code, which was leaked initially to a P2P network, spread quickly to IRC, and is now heading for all the large warez channels out there. This really is a shame, because the high-security nature of Windows 2000 is likely to be compromised by an open codebase.

At the current time, anybody who has malicious intentions regarding your Windows 2000 computer can merely browse through the source code, find an unpatched hole, and then root you. If you're currently running Windows 2000, switch your machine off. If you can't, put a firewall up.

This is merely precautionary, as we still do not know the authenticity of the code. At the moment, OSFocus is trying to ascertain it through our MS sources, and we will post any updates as and when we get them.

This source code leak is one of the worst things I have ever come across in my experience as a tech/beta journalist and developer. Whoever leaked it should be dealt with harshly.

We will not assist you in finding this code, and we will not give it to you. We do not have it, and we do not want you to send it to us. The end."

http://osfocus.net/post.asp?PostID=18
http://slashdot.org/articles/04/02/1...id=109&tid=187
Hurray, security through obscurity no more if this happens to be the full source tree. /. also has an article but is just a copy from OSfocus. Unfortunatly, Neowin is /.'ed to hell right now with people trying to read the information posted there.

zenmaster10665 · 02-12-2004, 03:48 PM

wow....if this is true, this is bad news....

SiN · 02-12-2004, 03:53 PM

Quote:

Originally posted by zenmaster10665
wow....if this is true, this is bad news....

It is true.

*cough*...i've got proof...*cough*

Silvy · 02-12-2004, 04:29 PM

well that's a big fat: whoops!

And this is soooo true:

Quote:

Originally posted by nanofever

Hurray, security through obscurity no more if this happens to be the full source tree.

nothingx · 02-12-2004, 04:47 PM

HOLY CRAP! This is huge! WOW!

I think it would be cool if some legit hackers out there find some security flaws and notify Microsoft about it. Then perhaps they would see a value in having their code open souced, and would release it in the future....

/wishful thinking

nanofever · 02-12-2004, 04:58 PM

Quote:

Originally posted by nothingx
HOLY CRAP! This is huge! WOW!

I think it would be cool if some legit hackers out there find some security flaws and notify Microsoft about it. Then perhaps they would see a value in having their code open souced, and would release it in the future....

/wishful thinking

That is one possibility.... another is MS sues the hackers for having copyrighted information.

SonicRL · 02-12-2004, 05:02 PM

Wow...
GGNORE Microsoft

This is bad.... *goes off to try and fint it xD*

platypus · 02-12-2004, 05:54 PM

I found a listing for the <b>source code here</b>. Though smaller, it's about what I expected.

Yeah, i know it's been around for awhile, but it seemed like the right time.

propaganda · 02-12-2004, 06:42 PM

Wow is that actually the source code? I was expecting millions of line of code. My miniscule programming knowledge.

cheesemoney · 02-12-2004, 07:15 PM

/sarcasm

ToolBag · 02-12-2004, 07:54 PM

hehehe, after all the programming classes I have taken all I needed to know was to set the mouse to jumpy!

heyal256 · 02-12-2004, 08:39 PM

Zdnet believes that the full source code is about 40GB and this is only a partial leak. http://zdnet.com.com/2100-1104_2-5158496.html

I agree that the file seems to be too small if it fits onto a cd, besides that, don't comments in the source code take up a lot of space (i.e. "I fubared this feature, but maybe someone will get around to fixing it").
note: when I took programming courses, i would but in comments like that for my own personal reference

nanofever · 02-12-2004, 08:52 PM

Quote:

Originally posted by heyal256
Zdnet believes that the full source code is about 40GB and this is only a partial leak. http://zdnet.com.com/2100-1104_2-5158496.html

I agree that the file seems to be too small if it fits onto a cd, besides that, don't comments in the source code take up a lot of space (i.e. "I fubared this feature, but maybe someone will get around to fixing it").
note: when I took programming courses, i would but in comments like that for my own personal reference

My reading of the slashdot forum causes me to believe source code gets a really good compression ratio, something like 10:1. That being said if all of the international stuff in DAO is edited out, I think that it might be a close to complete source leak.

sailor · 02-12-2004, 09:25 PM

Holy Christ... BAD fucking news.

As much as I dont like MS, this is BAD news. Every Windows version since NT 4.0 uses a derivation of the same Kernel.

OSS programmers, or those that think you may be one at some point, dont even *glance* at the code.

Hell hath no fury like MS will over this.

02-12-2004, 03:33 PM	#1 (permalink)
nanofever Huzzah for Welcome Week, Much beer shall I imbibe. Location: UCSB	Windows 2K and NT go open source, oops ! "Leaked to the net tonight, we first got word of it at around 5pm, from a Neowin moderator... The source code, which was leaked initially to a P2P network, spread quickly to IRC, and is now heading for all the large warez channels out there. This really is a shame, because the high-security nature of Windows 2000 is likely to be compromised by an open codebase. At the current time, anybody who has malicious intentions regarding your Windows 2000 computer can merely browse through the source code, find an unpatched hole, and then root you. If you're currently running Windows 2000, switch your machine off. If you can't, put a firewall up. This is merely precautionary, as we still do not know the authenticity of the code. At the moment, OSFocus is trying to ascertain it through our MS sources, and we will post any updates as and when we get them. This source code leak is one of the worst things I have ever come across in my experience as a tech/beta journalist and developer. Whoever leaked it should be dealt with harshly. We will not assist you in finding this code, and we will not give it to you. We do not have it, and we do not want you to send it to us. The end." http://osfocus.net/post.asp?PostID=18 http://slashdot.org/articles/04/02/1...id=109&tid=187 Hurray, security through obscurity no more if this happens to be the full source tree. /. also has an article but is just a copy from OSfocus. Unfortunatly, Neowin is /.'ed to hell right now with people trying to read the information posted there. __________________ I'm leaving for the University of California: Santa Barbara in 5 hours, give me your best college advice - things I need, good ideas, bad ideas, nooky, ect. Originally Posted by Norseman on another forum: "Yeah, the problem with the world is the stupid people are all cocksure of themselves and the intellectuals are full of doubt."

02-12-2004, 03:48 PM	#2 (permalink)
zenmaster10665 Bokonist Location: Location, Location, Location...	wow....if this is true, this is bad news.... __________________ "Beware of the man who works hard to learn something, learns it, and finds himself no wiser than before. He is full of murderous resentment of people who are ignorant without having come by their ignorance the hard way." -Kurt Vonnegut

02-12-2004, 05:02 PM	#7 (permalink)
SonicRL Insane	Wow... GGNORE Microsoft This is bad.... goes off to try and fint it xD __________________

02-12-2004, 05:54 PM	#8 (permalink)
platypus Essen meine kurze Hosen Location: NY Burbs	I found a listing for the <b>source code here</b>. Though smaller, it's about what I expected. Yeah, i know it's been around for awhile, but it seemed like the right time. __________________ Out the 10Base-T, through the router, down the T1, over the leased line, off the bridge, past the firewall...nothing but Net. Last edited by platypus; 02-12-2004 at 05:57 PM..

02-12-2004, 07:54 PM	#11 (permalink)
ToolBag Insane Location: Chicago	hehehe, after all the programming classes I have taken all I needed to know was to set the mouse to jumpy! __________________ Jesus was a ruffies victim! Dan 3:20

02-12-2004, 04:47 PM	#5 (permalink)
nothingx undead Location: nihilistic freedom	HOLY CRAP! This is huge! WOW! I think it would be cool if some legit hackers out there find some security flaws and notify Microsoft about it. Then perhaps they would see a value in having their code open souced, and would release it in the future.... /wishful thinking

02-12-2004, 06:42 PM	#9 (permalink)
propaganda Psycho	Wow is that actually the source code? I was expecting millions of line of code. My miniscule programming knowledge.

02-12-2004, 07:15 PM	#10 (permalink)
cheesemoney Loser Location: Paradise	/sarcasm

02-12-2004, 08:39 PM	#12 (permalink)
heyal256 Not so great lurker Location: NY	Zdnet believes that the full source code is about 40GB and this is only a partial leak. http://zdnet.com.com/2100-1104_2-5158496.html I agree that the file seems to be too small if it fits onto a cd, besides that, don't comments in the source code take up a lot of space (i.e. "I fubared this feature, but maybe someone will get around to fixing it"). note: when I took programming courses, i would but in comments like that for my own personal reference

02-12-2004, 09:25 PM	#14 (permalink)
sailor beauty in the breakdown Location: Chapel Hill, NC	Holy Christ... BAD fucking news. As much as I dont like MS, this is BAD news. Every Windows version since NT 4.0 uses a derivation of the same Kernel. OSS programmers, or those that think you may be one at some point, dont even glance at the code. Hell hath no fury like MS will over this. __________________ "Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws." --Plato