bugtraq - Re: Windows 2000 Source Leak Verified. Get ready for the havoc.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200402152257.i1FMvx0K024263@turing-police.cc.vt.edu>
Date: Sun, 15 Feb 2004 17:57:59 -0500
From: Valdis.Kletnieks@...edu
To: Lee <cheekypeople@...33.com>
Cc: ald2003@...rs.sourceforge.net, dotsecure@...hmail.com,
   full-disclosure@...ts.netsys.com, bugtraq@...urityfocus.com
Subject: Re: Windows 2000 Source Leak Verified. Get ready for the havoc.

On Sat, 14 Feb 2004 16:42:39 GMT, Lee <cheekypeople@...33.com>  said:
> again its 1/100 of standardd MS code for a OS, lets get a grip please... and
> I think I see the company who let the source get loose come out and say

Most earlier estimates of the Win2K source were about 45M lines of code (I think
the "40 gig" being tossed around is the size of the source-control-system database).
And I've seen the number 12.5M lines of code escaped.  That's closer to 1/3 than
to 1/100.

And remember that there's a synergistic effect - when you have THAT big of a chunk
of the source, you can start making a lot more educated guesses about what the
other 2/3 are...

Content of type "application/pgp-signature" skipped