<![CDATA[The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename…]]>RE: https://cyberplace.social/@GossiTheDog/116565662607962457

The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename…

The charitable interpretation is that Microsoft accidentally shipped an internal test build to global production. The less charitable one isn’t very pleasant

]]>https://board.circlewithadot.net/topic/5bd22dce-1add-4ce5-b8a6-fdb17e26ba95/the-chill-i-got-when-i-downloaded-the-repo-and-realized-the-exploit-was-a-zero-byte-file-with-a-magic-filenameRSS for NodeThu, 14 May 2026 23:26:36 GMTWed, 13 May 2026 11:57:11 GMT60<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 19:01:57 GMT]]>@0xabad1dea Looks like one of the files causes winpeshl.ini on the ramdrive to be deleted, which eventually results in command prompt to be spawned instead of the usual UI.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/jernej__s/statuses/116568812272540893https://board.circlewithadot.net/post/https://infosec.exchange/users/jernej__s/statuses/116568812272540893Wed, 13 May 2026 19:01:57 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 18:08:07 GMT]]>@babble_endanger @oilheap if you have a password on bitlocker itself (as opposed to your Windows account) then yes, this debug backdoor cannot work.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116568600543963838https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116568600543963838Wed, 13 May 2026 18:08:07 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 17:55:46 GMT]]>@oilheap @0xabad1dea yeah i was wondering that... So this exploit only works if you don't use a password or pin?

]]>https://board.circlewithadot.net/post/https://freeradical.zone/users/babble_endanger/statuses/116568552003356447https://board.circlewithadot.net/post/https://freeradical.zone/users/babble_endanger/statuses/116568552003356447Wed, 13 May 2026 17:55:46 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 17:17:02 GMT]]>@0xabad1dea I feel certain that FileVault also has some kind of magic bypass. Either of the ‘haha nobody will ever discover the arcane incantation needed to put this developer test mode’ or more likely requested by a three letter agency.

]]>https://board.circlewithadot.net/post/https://vmst.io/users/slyborg/statuses/116568399681740525https://board.circlewithadot.net/post/https://vmst.io/users/slyborg/statuses/116568399681740525Wed, 13 May 2026 17:17:02 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 17:05:20 GMT]]>@energisch_ @0xabad1dea And this is unrelated to a former student of mine working on security for Huawei, because another student is managing security for Microsoft

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116568353697605344https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116568353697605344Wed, 13 May 2026 17:05:20 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:45:09 GMT]]>@0xabad1dea

Also for whatever reason, only windows 11 (+Server 2022/2025) are affect, windows 10 is not.
another win 10 w!!!!!!!!!!!!!!!!

]]>https://board.circlewithadot.net/post/https://wetdry.world/users/glitchy404/statuses/116568038425769032https://board.circlewithadot.net/post/https://wetdry.world/users/glitchy404/statuses/116568038425769032Wed, 13 May 2026 15:45:09 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:33:41 GMT]]>@0xabad1dea

]]>https://board.circlewithadot.net/post/https://mastodon.gamedev.place/users/shana/statuses/116567993334885522https://board.circlewithadot.net/post/https://mastodon.gamedev.place/users/shana/statuses/116567993334885522Wed, 13 May 2026 15:33:41 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:28:30 GMT]]>@jernej__s they're just empty log files (a header plus megabytes of zeroes), presumably because if they're missing entirely, something errors out before the flag gets processed

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116567972957574723https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116567972957574723Wed, 13 May 2026 15:28:30 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:27:08 GMT]]>@0xabad1dea There's also about 20 MB of other files.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/jernej__s/statuses/116567967541578101https://board.circlewithadot.net/post/https://infosec.exchange/users/jernej__s/statuses/116567967541578101Wed, 13 May 2026 15:27:08 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:14:51 GMT]]>@0xabad1dea How did they come by the content of these files?

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/crazyeddie/statuses/116567919295015002https://board.circlewithadot.net/post/https://mastodon.social/users/crazyeddie/statuses/116567919295015002Wed, 13 May 2026 15:14:51 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:11:06 GMT]]>@pa27 that's why I was quick to download it 😂

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116567904536081662https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116567904536081662Wed, 13 May 2026 15:11:06 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 15:07:41 GMT]]>@0xabad1dea Kind of ironic that this is posted on github!!

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pa27/statuses/116567891056268063https://board.circlewithadot.net/post/https://mastodon.social/users/pa27/statuses/116567891056268063Wed, 13 May 2026 15:07:41 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:50:52 GMT]]>@rrb exactly! @0xabad1dea

]]>https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567824963672779https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567824963672779Wed, 13 May 2026 14:50:52 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:48:58 GMT]]>@energisch_ @0xabad1dea and I don't live in China, so their ability to mess with me is limited

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116567817460908244https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116567817460908244Wed, 13 May 2026 14:48:58 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:42:37 GMT]]>@0xabad1dea oh I'm sure if was the merest accidental oversight and that they're very very sorry and feel so foolish now.😉

]]>https://board.circlewithadot.net/post/https://c.im/users/capnthommo/statuses/116567792533080545https://board.circlewithadot.net/post/https://c.im/users/capnthommo/statuses/116567792533080545Wed, 13 May 2026 14:42:37 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:41:19 GMT]]>@rrb Well you got a point there. At least it wouldn't be worse than a US tech phone @0xabad1dea

]]>https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567787413585385https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567787413585385Wed, 13 May 2026 14:41:19 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:32:07 GMT]]>@0xabad1dea MS has been known - from the start with their first windows versions that they distribute beta versions that come with bugs galore. The user/customer then hands in all those problematic situations which (with luck) get repaired and updated every other day. Those repair updates will happen as long as the version is distributed and only stop when there is a new and "better" version... again, of course, beta, full of bugs.
Microsoft customers are used to being used as beta testers.

]]>https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567751258275719https://board.circlewithadot.net/post/https://troet.cafe/users/energisch_/statuses/116567751258275719Wed, 13 May 2026 14:32:07 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 14:13:49 GMT]]>@0xabad1dea To be honest, I had a Huawei phone for a long time, because I trust the human rights record of the PRC more than I trust the US tech companies.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116567679248581891https://board.circlewithadot.net/post/https://infosec.exchange/users/rrb/statuses/116567679248581891Wed, 13 May 2026 14:13:49 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:52:34 GMT]]>@kallisti @0xabad1dea well by asking Microsoft nicely for the decryption keys they store in plain text among account data on their server of course 😵‍💫 (fck microsoft)

]]>https://board.circlewithadot.net/post/https://hostux.social/users/Equity7804/statuses/116567595720096059https://board.circlewithadot.net/post/https://hostux.social/users/Equity7804/statuses/116567595720096059Wed, 13 May 2026 13:52:34 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:43:58 GMT]]>@0xabad1dea This would be pretty serious if BitLocker was a security feature, not a user annoyance one. 🙃

]]>https://board.circlewithadot.net/post/https://mastodon.gamedev.place/users/landelare/statuses/116567561893041238https://board.circlewithadot.net/post/https://mastodon.gamedev.place/users/landelare/statuses/116567561893041238Wed, 13 May 2026 13:43:58 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:40:17 GMT]]>https://board.circlewithadot.net/post/https://hub.azkware.net/objects/6e2ecb8d-406a-047f-41ac-e52207602723https://board.circlewithadot.net/post/https://hub.azkware.net/objects/6e2ecb8d-406a-047f-41ac-e52207602723Wed, 13 May 2026 13:40:17 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:39:48 GMT]]>@0xabad1dea this is what you get when you do disk encryption without user input 🤷

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/oilheap/statuses/116567545521281033https://board.circlewithadot.net/post/https://infosec.exchange/users/oilheap/statuses/116567545521281033Wed, 13 May 2026 13:39:48 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:32:35 GMT]]>@0xabad1dea Maybe their new LLM forgot to remove the code before shipping a new production version.

]]>https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116567517165955355https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116567517165955355Wed, 13 May 2026 13:32:35 GMT<![CDATA[Reply to The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename… on Wed, 13 May 2026 13:23:16 GMT]]>@0xabad1dea shiiiiiiiiiit that's cool

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/SomeVeganCheeseIsOk/statuses/116567480487760881https://board.circlewithadot.net/post/https://mastodon.social/users/SomeVeganCheeseIsOk/statuses/116567480487760881Wed, 13 May 2026 13:23:16 GMT