@waff It is a stupid claim, as they're so incompetent that they don't need a secret division to implement vulnerabilities - their garbage build systems and refusal to allow programmers to fix bugs is more than enough.

It's a proven fact that every time microsoft learns of a vulnerability they report it to the NSA immediately and then think about whether they'll fix it.

microsoft tends to force downgrades onto people, as a result there is no incentive needed to force people to update.