Swiss developer get access to Microsoft, Nintendo and other big firm’s source codes, revealing confidential information
Looks like big tech companies are not protecting their websites properly enough as a Swiss Developer named Tillie Kottmann was able to pull source codes from 50 high-profile tech. This exposed some of the confidential company information and details on products as well. Some of the companies included were Microsoft, Nintendo, Disney and Motorola. These were said to have an insecure DevOps application that left proprietary information exposed. The developer even posted about it on Twitter.
Out of all these codes, the leaked Nintendo code was the highlight in the gaming world. As mentioned by Polygon, the leak included source codes for Super Mario Kart, The Legend of Zelda: A Link to the Past, and Yoshi’s Island. This means people can look at files and original source codes that make up these games – something that is never revealed to the public.
if you have access to any confidential info, documents, binaries or source code, which you think should be made available to the public, please reach out to me via DMs (you can ask for Signal), or at @deletescape on Telegram, Wire or Keybase so we can discuss safely releasing it.— Tillie 1312 Kottmann #BLM 💛🤍💜🖤 (@deletescape) July 22, 2020
“Apparently, for example, Super Mario World contains assets where it appears Luigi gives the player the middle finger,” says the report. Some other never seen before characters were also seen including mustachioed Yoshi.
The leak even shows some early level of Super Mario 64 like a castle one, where Nintendo likely tested Mario’s capabilities.
Kottmann, in a conversation with Bleeping Computer said that the developers attempt to remove the hardcoded credentials that are usually created for backdoor access. This is done before publishing the source code and avoid security breach.
“I try to do my best to prevent any major things resulting directly from my releases,” said the developer to the website. We are yet to get an official statement from Microsoft, Nintendo and other companies that are in the list.