If this was indeed developed by NSA, wouldn't this sort of attack be easier for them since NSA gets access to Microsoft's source code for Windows?
Access to signing keys is very relevant, and I think there is a very real chance (p>0.2) that the huge oversight MS did with the terminal server keys happened because they were ordered to do it.
There is a reason we have programming languages, and we don't all write directly in machine code. Just because it's techincally possible to do things in a more difficult way doesn't mean they would be done that way with a faster, easier option readily available.
Stop being silly. :P
The point is there's not a /significant/ difference; understanding code at a high level doesn't really help to attack it (it can make it harder, since the edges that you look for to exploit are precisely those parts you try and abstract away in a higher-level language), and the windows codebase is well-understood with lots of publicly available information describing in, even without the source code.
I suspect a polite request (perhaps backed by a threat including the L-word) will get them far further than a virus.
Edit: Others have pointed to public documentation of this program. I believe the two cases I was aware of at the time were the governments of China and Germany.
US Govt: we want source code access
MS: That is propiatory information
US Govt: give us access or we wont allow MS products to be used by govt. departments
MS: how quick do you want that access?
Enterprises w/ 10k+ seats, OEMs, MVPs and governments can get access to Windows source these days. Microsoft launched the program in 2006 or so to dampen the "Linux is more secure because we can see the source!!" FUD.
Government Security Program: Addressing the unique security requirements of governments worldwide by helping government actively participate in ensuring the security of their critical systems. We help enhance system security by providing access to Microsoft Windows and Office source code, prescriptive and authoritative security guidance, technical training, security information, and Microsoft security experts.
You can view the results for the Windows 7 accreditation at [1]. The website also has comprehensive documentation on the methodology used to accredit the software (including visibility of the source code).