[Dailydave] Symantec AV source compromised and the questions it raises

William Arbaugh warbaugh at gmail.com
Fri Jan 6 15:54:48 EST 2012

Security Week ran a story that Symantec's AV source was obtained (and soon to be released) via a compromise of an Indian Military Intelligence server. http://www.securityweek.com/symantec-investigating-possible-theft-norton-av-source-code

Symantec issued a statement that the compromise and eventual release of the source does not place customers at risk since the source is 4+ years old.   http://www.facebook.com/Symantec/posts/10150465997682876

Really? I guess they don't reuse code across product generations like most vendors. 

The interesting question, however, is to whom in the Indian government did Symantec provide the source? I understand that major corporations provide source to a number of governments for a variety of reasons- mostly for sales and export approval. But did Symantec give it to the Indian Military Intelligence, or did the Indian intel community obtain it from another part of the Indian government? If the later, then any source provided to the Indian government is in Indian intel's hands. Sadly, we'll likely never know the answer.

More information about the Dailydave mailing list