top | item 46354629

(no title)

hnmullany | 2 months ago

What are the bets that the NSA has been encouraging Microsoft to keep shipping this?

discuss

order

Someone1234|2 months ago

Low.

While the NSA would, absolutely, use it to elevate existing internal access - it is such low-hanging fruit that they have enough alternative tools in their arsenal that it isn't a particularly big loss. Most of their competent adversaries disabled it years ago (as has been best-practice since 2010~).

More likely, it is Microsoft's obsession with backwards compatibility. Which while a great philosophy in general has given them a black eye several times before vis-a-vis security posture.

GuB-42|2 months ago

Most importantly, the NSA is not just about spying, it is also about protection.

A weakness anyone can exploit in software Americans use is not a good thing for the NSA. If they were to introduce weaknesses, they want to make sure only they can exploit them. For instance in the famous dual_ec_drbg case where the NSA is suspected to have introduced a backdoor, the exploit depends on a secret key. This is not the case here.

On the other hand if Snowden has shown us anything, it is that the NSA is more stupid than it looks.

pixl97|2 months ago

There are tons of old printers/copy machines that allow SMB access or AD auth that will never see a software update that will break.

Honestly I blame the copy machine manufactures for requiring service contracts for security updates on a lot of this.

expedition32|2 months ago

Microsoft supporting something doesn't mean that you have to use it. There's something as personal responsibility.