content: I think I'll blame both. Microsoft is an American company, so the NSA should have revealed these flaws to Microsoft in order to protect the product of an American company which, when compromised, could have cause a breach of National Security. Which it incidentally did. Fuck the NSA for not reporting the vulnerabilities, and fuck Microsoft for making a vulnerable product and not giving a shit.