@RoryAlsop Does anyone think something really awful will happen with these tools in the wrong hands? Or, do you think MS or anyone else affected got a copy of the tools now that it was leaked, maybe they will be patching out these exploits?

@LateralTerminal really awful things are already happening. That's kinda the point

@LateralTerminal the answer is yes on both accounts

but people are slow to patch which is a problem

that's also a big part of why MS now forces updates with Windows 10

the botnets that unpatched windows machines made possible are a serious problem for the internet

Yeah I figured. Has anything happened yet? I haven't heard of anything yet.

@r

@RoryAlsop

@AJHenderson

@LateralTerminal yes - the major attacks this summer used NSA tools

and there are various less public ones using modules

@LateralTerminal there was a major ransomware attack that was only made less bad because it had a kill switch

if it hadn't, it would have spread uncontrolled and taken down a lot

as it was, the kill switch gave time to get the vulnerability patched before a new version showed up

@AJHenderson Well that sucks

@RoryAlsop

WannaCry and Not-Petya were the biggies, but a fair few smaller ones

@RoryAlsop I thought WannaCry used an older leaked kit from last year. That's why I was more concerned about the nsa leak that just happened recently

@LateralTerminal EternalBlue was released in April this year

Damn the Shadow Brokers have their own wikipedia page. Now its serious business en.wikipedia.org/wiki/The_Shadow_Brokers

I found that when I was looking up EternalBlue.

So does EternalBlue work without knowing the wifi password? Or do you already need to be connected to the network.

@RoryAlsop