full-disclosure - MS code leak update?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: ruff.lists at edelweb.fr (Nicolas RUFF (lists))
Subject: MS code leak update?

> has anyone heard anything else about the win2k and nt code leak? it seemed
> to be hot news for a while and now there is nothing. was anyone fingered
> in it?

In short :

If you publish anything based on MS source code, you will be sued.
If you publish anything about MS Software, they will try to prove that you had access to the 
"leaked" source code.

BTW, it seems that the "leaked" source code was quite old and incomplete, many bugs were fixed 
(silently or not) during Microsoft code review process 2 years ago.

Regards,
- Nicolas RUFF
-----------------------------------
Security Consultant
EdelWeb (http://www.edelweb.fr/)
Mail : nicolas.ruff (at) edelweb.fr
-----------------------------------