Mystery Microsoft bug leaker keeps the zero-days coming

__alexander

So weird that GitHub requires a login to view their BlueHammer repo. https://github.com/Nightmare-Eclipse/BlueHammer

purpleidea

It's so obvious that many of the bugs being found are/were most likely M$ backdoors. There doesn't seem to be any other plausible explanation. The reckoning needs to come and people need to stop using their products for good. Would love a whistleblower to explain which part of the government or company forced it.

NDlurker

Oh cool. My brother's old laptop is locked. Maybe this will help

ndiddy

I think the Bitlocker "vuln" is a good reminder not to use vendor provided encryption for any sensitive data. https://github.com/Nightmare-Eclipse/YellowKey/ You load a specific file onto a flash drive, plug it into a Bitlocker encrypted computer, reboot it while holding a key combination, and it pops up a command prompt with full access to the encrypted volume. There's no way this isn't a backdoor.

quxuejun

i think so~

NordStreamYacht

Laid off Microsoft researcher?

ChrisArchitect

Related: YellowKey Bitlocker Bypass Vulnerability https://news.ycombinator.com/item?id=48114997

aussieguy1234

Could the Bitlocker vulnerability be a backdoor mandated by some government agency?