As we mentioned yesterday, the source code of several builds and tools of Microsoft's Windows 10 leaked online. According to the company, the potential damages from the breach may be limited.
Windows 10 the leak:
The Register first reported the leak on June 23 and reported that up to 32TB of “official and non-public (Windows 10) images installations” were uploaded to BetaArchive.com. (BetaArchive calls itself “the community for beta collectors” and “one of the largest repositories of Beta & Abandonware!”
The leaked code can be dated from March of 2017, according to Reg and allegedly part of Microsoft's Shared Source Kit. Includes source code for basic Windows 10 drivers, PnP code, USB and WiFi stacks, storage drivers, and code ARM OneCore kernel. "
The builds of Windows 10 and Windows Server & Hosting 2016, were never released to the public. The internal builds were created by team of Windows only for Microsoft engineers for testing and debugging purposes that are not usually found in public releases.
This software includes, for example, pre-versions of Windows 10 "Redstone" and builds of 64-bit ARM Windows. Many of the leaked versions of the internet have been recalled by Microsoft due to the Secure Boot mechanism.
In the tweet below, you can see images from the leaked files
Windows 10 leak: Beta Archive has removed the private MS files from its FTP. Here's examples of non-public stuff that was dumped online pic.twitter.com/WULYM7me7U
- The Register (@TheRegister) June 23, 2017
BetaArchive has already downloaded according to the owner of the 1,2 TB code of Windows 10 according to the original report.
The "Shared Source Kit" folder existed on FTP until the Register article was released. We removed it from FTP and our lists. ”
Microsoft, for its part, confirmed the leak by saying:
"Our review confirms that these files are part of the source code from the Shared Source Initiative, and are used by OEMs and partners."
Through the Shared Source Initiative, Microsoft licenses the source code for various productits to certain "specialized" customers, governments and partners for debugging purposes.
Windows 10 leak: The Counter
Let's mention Windows 10 Shared Source Kit means the source code that is shared.
Another leak from The Verge claims that "most of the collection (of leaked files) was available for months or even years."
The publication from the UK Reigster claims that 32 TB was leaked data. but The Verge claims that most of that 32TB has been online for years, and that the new leak is actually much smaller at just 1,2GB.
Reigster claims that this leak is even greater than the famous 2004 source code of Windows 2000, but The Verge disagrees.
Verge seems to be correct because the leakage of this source code seems to be secondary and uninteresting, as it includes files related to USB, storage, and Wi-Fi only Windows 10 drivers.
These files were already shared by Microsoft to manufacturers computers και άλλους εταίρους, (OEMs, businesses and governments) while the leakage of 2004 was huge.
I do not think anyone would argue that USB drivers are so important. The only thing that seems to be in the leak is the ARM OneCore kernel, but if it belongs to the Windows 10 Shared Source Kit, it's already Shared by the company itself.
Verge tries to link one incident: Yesterday, two men in the United Kingdom were arrested who had gained unauthorized access to the Microsoft network.
These two men apparently gathered internal Windows 10 Insider Preview internal updates that were never given to external testers and then put them on the Internet. Most of these 32 GB of the Windows 10 leak was obviously these builds, rather than their source code.
What really happened, we will probably learn about it in the next few days. Of course we do not expect to know what happened from Microsoft itself, as a possible leakage of the Windows 10 source code would mean the end of the highly-advertised operating system. Unless the company does it Open Source.
I can then reinstall Windows on my computers.