4 ms·
It means there is a known & exploitable flaw in one security option on one model of phone running one version of an operating system. Given that a government ha
by ctdonath 11y ago
It means there is a known & exploitable flaw in one security option on one model of phone running one version of an operating system. Given that a government had to hire a computer forensics company to do it, I wouldn't call this a "hack" (a la the difference between a locksmith and a burglar).
Apparently there is a law (enacted under the Obama) requiring the disclosure of the cracking technique, at least to the manufacturer, precisely to facilitate improvements in security.
- PascalsMugger 11y agoDoes this disclosure requirement apply when the work is contracted to a third party? I have a hard time believing security companies would ever work for the government if doing so required them disclosing the vulnerabilities they use to the manufacturer. If the disclosure is not required of third parties then all such a policy does is incentivizes government agencies to ostensibly farm out such work to compliant security firms. This is how we end up with private firms as extensions of government a la Blackwater. Seems ill advised.