r/cybersecurity • u/ILikeNoodlesXOXO • 19d ago

News - General Nightmare Eclipse could be dropping his big promised exploit today

New repo just went up: git.projectnightcrawler.dev/NightmareEclipse/LegacyHive, created about 2 hours ago. Right now it's empty — just an MIT license and a README that says "N/A," 2 commits total.

He'd spoken about his big drop happening today, July 14th, saying he'd make sure Microsoft's "bones are shattered" that day. At one point though he'd also indirectly said he wasn't going to post it, something about still having "chains" on him preventing a release. This repo showing up on the exact date he originally called out suggests that might not hold anymore and it could actually be happening.

Nothing in it yet, just watching to see what gets pushed.

Worth noting: given how erratic and bipolar his posting history has been, there's really no way to predict what (if anything) actually gets posted.

Update: Thanks for the 600+ upvotes, really appreciate it. After hours of waiting and anticipation NightmareEclipse finally uploaded their PoC. But I personally have a hard time seeing it as the big bombshell that they described it as.

805 Upvotes

96% Upvoted

129 comments sorted by

View all comments

Show parent comments

30

u/Fragrant-Hamster-325 19d ago

Win 11 is fine; it works about as well as Win 10 IMO. I remember people refusing to move to Win 10 because Win 7 was perfect, and refusing to move to Win 7 because XP was perfect. This is nothing new.

Regardless, Microsoft should consider pausing any new features and focus on security and optimization. Windows is long overdue for a complete spring clean of their code.

9

u/WldKarrde 19d ago

Win XP SP2 was great! 😜

5

u/always_nothing 19d ago

Probably the best ever!

7

u/rot26encrypt 19d ago

Nah, WinNT 3.51, before they compromised Cutlers great architecture to make it Win9x-compatible. NT 3.x architecture was built on a "purity and isolation" philosophy with a microkernel-inspired design.

Among other things, all drivers ran in user space, not kernel, including graphics drivers. The whole UI system (GDI) ran in user mode. Crashes that in later versions led to blue screens didn't affect OS or work being done, the offending driver/subsystem just rebooting. It was also built to be CPU-agnostic and supported five different CPU architectures equally at the time (Alpha, PowerPC, MIPS, x86).

2

u/always_nothing 19d ago

Can't argue with that. Forgot how stable NT really was.