[194662] in North American Network Operators' Group
Re: Please run windows update now
daemon@ATHENA.MIT.EDU (valdis.kletnieks@vt.edu)
Tue May 16 23:39:36 2017
X-Original-To: nanog@nanog.org
From: valdis.kletnieks@vt.edu
X-Google-Original-From: Valdis.Kletnieks@vt.edu
To: "Keith Medcalf" <kmedcalf@dessus.com>
In-Reply-To: <5ea5a0bdbe575f48b90e133f51c2d96d@mail.dessus.com>
Date: Tue, 16 May 2017 23:39:25 -0400
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1494992365_2998P
Content-Type: text/plain; charset=us-ascii
On Tue, 16 May 2017 20:55:37 -0600, "Keith Medcalf" said:
>
> On Tuesday, 16 May, 2017 18:13, Valdis Kletnieks <valdis@vt.edu> wrote:
> > On Tue, 16 May 2017 16:41:36 -0600, "Keith Medcalf" said:
>
> >> Of course Microsoft knew, since they wrote in the backdoor in the first
> >> place. That is why when informed by their employers that the backdoor
> >> was going to be made public, they could undo the changes they had
> >> introduced so rapidly.
>
> > Do you have any actual evidence or citations that in fact, this was an
> > intentionally inserted backdoor?
>
> Equal in quantity and quality to the evidence to the contrary.
In that case, "Of course Microsoft didn't know" is equally probable.
In fact, it's *more* probable, because if it was intentional, they'd
have to have ways in place to make sure that if some random programmer
managed to find it and report it, the bug wouldn't get fixed - and the
fact that there was a long-standing bug not fixed didn't get noticed by
the QA team and the rest. After all, once some TLA paid good money to
get that backdoor installed, the *last* thing you want happening is the
sentence, "What do you mean, you accidentally fixed it?"
Plus, since "Microsoft didn't intentionally put the MS17-010 bug in as
a backdoor" is the null hypothesis, it requires zero evidence, and it's
your job to bring positive evidence for the non-null hypothesis.
--==_Exmh_1494992365_2998P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Comment: Exmh version 2.8.0 04/21/2017
iQEVAwUBWRvF7Y0DS38y7CIcAQIIRgf/dzmi0hyThxN+fF/D2zvQnJLxagEd6Lbm
pD7npZjsI+6HIj7cl/9EGfDjTAr4WkS2mfKzPoFz8beNVpj3JCKCXXiHr9uABGBb
1W2gbPlqG/sn77a8f9qntHoorF9Fn/7HHHE6GPDuqnYMzEgfY6SrPAwrBOzxABnu
jYxjW7ZCgWyFI037ve++SHSVCD2eOp6/GJuJlyasYGuIdJKaY/NRvHigPxw8YCjS
6JHg+uCVNgw/7SrLfldcpgQEUe4UB/FcCGAv7ml49J3PESsw9nYO/LqgmMd0Kcvs
y0LyduPTID9ZAlg0abTSb1/owOCvn8KsvJflDtUvTW+kf9WnfRQT9g==
=wQxP
-----END PGP SIGNATURE-----
--==_Exmh_1494992365_2998P--
