Inside the WMF Backdoor

Mark Russinovich writes
“given a choice of believing there was malicious intent or poor design behind this implementation, I?ll pick poor design”.