Stolen Windows code not critical weakness

File published online will be of limited use to hackers

Iain Thomson

The source code leak from Microsoft is not as serious as first feared, security experts have advised.

Early indications are that the code that has been published will be of limited use to hackers. The 658MB which has been posted online in a compressed file makes up less than two per cent of the total source code for Windows 2000 and NT.

Advertisement

"I wouldn't be panicking too much," said Graham Titterington, senior analyst at Ovum.

"Understanding source code is a difficult job even for skilled hackers, and it's unclear how much good it will do them."

Hackers are most likely to be focusing on finding system code levels, where the operating system interacts with other data. This gives an idea of the data structures that are passed backwards and forwards by the operating system.

Meanwhile the search has begun for the source of the leak, with industry watchers suggesting that it may have resulted from the company's Shared Source Initiative (SSI).

"It's the SSI I'd point my finger at," said Professor Neil Barrett, technical director of Information Risk Management.

"Because of the SSI a lot of people have code. For a hacker looking for vulnerable systems to penetrate it would be a lot easier to go for a third party."

"There's a high probability this comes from a third party," agreed Ovum's Graham Titterington.

"Microsoft does share its source code fairly widely and this is a likely source."

In a statement Microsoft said: "Windows source code for Windows 2000, XP and Server 2003 have been available through the SSI to over 3,000 customers, partners and governments for the past three years.

"For more than 12 years we have been providing Windows source code to universities in order to facilitate research.

"Microsoft now provides source code for a range of products to more than 800,000 developers through the Shared Source initiative."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes HTC's new Sense overlay for Android

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes...

NetGear ReadyNAS NVX

Review: NetGear ReadyNAS NVX

NetGear's four-bay compact network-attached storage gets a serious speed boost

AMD

AMD adds to six-core Opteron line up

New HE processors promise even lower power consumption

Adobe Systems

Adobe launches ColdFusion 9 and ColdFusion Builder

Firm promises enhanced developer productivity

Primary Navigation