Kim Zetter

The interview that is linked[0] in the footnotes of the article with the person from ETSI is absolutely wild... Some excerpts:

> kz (interviewer): How did it go about meeting those requirements, because that's the one they're saying has a backdoor in it. Was that the condition for export?

> BM (ETSI): Backdoor can mean a couple of things I think. Something like you'd stop the random number generator being random, for instance. [But] what I think was revealed [by the researchers] was that TEA1 has reduced key-entropy. So is that a backdoor? I don't know. I'm not sure it's what I would describe as a backdoor, nor would the TETRA community I think.

...

> KZ: People ... believe they're getting an 80-bit key and they're not.

> BM: Well it is an 80-bit long key. [But] if it had 80 bits of entropy, it wouldn't be exportable.

...

> kz: You're saying 25 years ago 32 bit would have been secure?

> BM: I think so. I can only assume. Because the people who designed this algorithm didn't confer with what was then EP-TETRA [ETSI Project-TETRA is the name of the working group that oversaw the development of the TETRA standard]. We were just given those algorithms. And the algorithms were designed with some assistance from some government authorities, let me put it that way.

...

> bm: That's what we now know yeah - that it did have a reduced key length.

> KZ: What do you mean we now know? SAGE created this algorithm but the Project-TETRA people did not know it had a reduced…

> who exactly would benefit from such a nefarious scheme

State Actors, given the current Geo-Political tensions.

You have to take a all-in-all broader view. I remember a while ago Kaspersky was accused of data-siphoning/spying from computers it was installed on and other nefarious activities. See New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S. - https://www.zetter-zeroday.com/new-government-ban-on-kaspersky-would-prevent-malware-signature-updates/

As for your opening statement "Some part of a company already aware of an issue but different part still ships is a pretty common tale" is not applicable here since this code runs in kernel mode (in both OSes) and thus would be subject to far far greater scrutiny and testing than an ordinary app. As Dave Plummer points out in his analysis Microsoft Kernel Drivers are signed and certified after an exhaustive testing process. Even if Crowdstrike wrote their drivers as an interpreter and the data update files were actually programs in some p-code, Microsoft would have definitely known of it and its inherent vulnerabilities. I would bet money that Microsoft knows all about preventing threats/vulnerabilities than any other company simply because of their long experience and large userbase and thus would not have allowed Crowdstrike such a free hand.

Kim Zetter has a great post walking through some details and commentary across a few sources, related to the vulnerability - https://www.zetter-zeroday.com/apple-chips/

> The cryptographic key itself isn’t placed in cache. But bits of material derived from the key gets placed in the cache, and an attacker can piece these bits together in a way that allows them to reconstruct the key, after causing the processor to do this multiple times. The researchers were able to derive the key for four different cryptographic algorithms: Go, OpenSSL, CRYSTALS-Kyber and CRYSTALS-Dilithium.

> [Green] notes that in theory this attack might be used to break the TLS cryptography that a computer’s browser uses to encrypt communication between their computer and web sites, which could allow attackers to decrypt that communication to extract a user’s session cookie for their Gmail or other web-based email account and use it to log into the account as them.

https://www.zetter-zeroday.com/court-documents-shed-new-light-on-doge-access-and-activity-at-treasury-department/

"New court documents shed light on what a 25-year-old DOGE employee named Marko Elez did inside Treasury Department payment systems. They also provide extensive new details about which systems Elez accessed, the security precautions Treasury IT staff took to limit his access and activity, and what changes he made to the systems. The documents indicate that the situation at Treasury is more nuanced than previously reported."

(...)

"Additionally, he could only connect using a government-issued laptop that had "cybersecurity tools" installed on it to prevent him from accessing web sites or cloud-based storage services with the laptop or connecting a USB or other external storage device to it to copy large amounts of data from Treasury systems. "

He was mistakenly given write access by the treasury department employees in charge of managing DOGE permissions. He resigned a day later, likely before he even realized he had write access. In that short window, he accessed the system "exclusively under the supervision of Bureau database administrators", and the initial treasury department investigation did not find any misuse of said write permissions.

I don't see how this can be blamed on DOGE. If anything it shows that DOGE employees are closely monitored, and their access is minimized and audited.

https://www.zetter-zeroday.com/court-documents-shed-new-light-on-doge-access-and-activity-at-treasury-department/