Beta hack rattles Microsoft - News - Software

To print: Select File and then Print from your browser's menu

--------------------------------------------------------------
This story was printed from ZDNet Australia.
--------------------------------------------------------------

Beta hack rattles Microsoft

By Robert Lemos, Special to ZDNet
October 23, 2002
URL: http://www.zdnet.com.au/news/software/soa/Beta-hack-rattles-Microsoft/0,130061733,120269233,00.htm

The software giant acknowledges that a hacker broke into its Windows beta testing network and had access to yet-unreleased software.

Microsoft is investigating a security breach on a server that hosts its Windows beta community, which allows more than 20,000 Windows users a chance to test software that is still in development.

As a result of the break-in, Microsoft advised beta testers to change their passwords late last week. However, company spokesman Rick Miller downplayed the significance of the incident, saying the online trespasser didn't get access to the company's crown jewels: its source code.

"They are not grabbing code; they are grabbing product, and it's going to be buggy and it's going to have problems," he said. "This is obviously not good, but it's not terrible either."

However, the system does contain yet-unreleased versions of Microsoft Windows products. In addition, the hacker would have had access to comments posted by beta testers, as well as the key used by beta testers to activate their software, said Miller.

This is not the first time Microsoft's network has been breached. Microsoft's source code may have been accessed two years ago, when a hacker broke into some of the company's systems several times over three weeks. In January 2001, online vandals prevented many people from accessing Microsoft's network by flooding routers and servers with data.

At least one beta tester questioned the security of Microsoft's products.

"We were right in the middle of beta testing its .Net server and that's going to be a centerpiece of Microsoft's future," one tester told TechTV, a US cable television channel, which first reported the incident.

Microsoft has been laboring to improve the security of its products for several years now, but the efforts were given a higher priority in a January email from co-founder Bill Gates to the company's employees. The products being tested on the server include some of that work.

The software giant is treating the breach as a criminal investigation but Miller refused to comment on whether any law enforcement agency had been called in on the case.