3 ms·

Let's all accept a depressing fact: effective cyber-security places all of us in a state of perpetual war. You cannot learn from your enemy without invasive act

Let's all accept a depressing fact: effective cyber-security places all of us in a state of perpetual war. You cannot learn from your enemy without invasive action, and you cannot test your capabilities without constantly attacking your adversaries, whether they know it or not. We cannot simply fork their nation's Github repo and try out zero-days in a safe and isolated environment. We shouldn't be so quick to rail against government zero-day stockpiling. It is likely that other branches of government are using these flaws for their own means to monitor foreign states and other entities. If we give up that power we risk crippling our offensive capabilities more than we might stand to gain by having a stronger defense. I cannot vouch for one side or the other. I am not a senior intelligence official and I do not have all the facts.

busterarm 11y ago
http://www.alternet.org/news-amp-politics/why-idea-big-cyber-attack-could-create-huge-tech-armageddon-pure-bs http://www.alternet.org/news-amp-politics/why-idea-big-cyber... http://dickdestiny.com/blog1/?p=913 http://dickdestiny.com/blog1/?p=913
- rm_-rf_slash 11y ago
  If you re-read my comment you will find nothing that suggests catastrophic cyber warfare is a major threat. The real threat is a death of a thousand cuts. Trade secrets, troop movements, active spies, little snippets of information that can cause a lot of trouble if put in the wrong hands.
  - busterarm 11y ago
    And our government shares a ton of information with contractors who are not 'in the know' about these vulnerabilities. If they truly cared about this, they would push vendors to plug the leaks that they know about.
coroutines 11y ago
> You cannot learn from your enemy without invasive action, and you cannot test your capabilities without constantly attacking your adversaries... I'm sorry but this just sounds unethical and wrong. So much can be learned passively. This is a good read: https://www.nostarch.com/silence.htm https://www.nostarch.com/silence.htm

busterarm 11y ago

http://www.alternet.org/news-amp-politics/why-idea-big-cyber-attack-could-create-huge-tech-armageddon-pure-bs http://www.alternet.org/news-amp-politics/why-idea-big-cyber... http://dickdestiny.com/blog1/?p=913 http://dickdestiny.com/blog1/?p=913

rm_-rf_slash 11y ago
If you re-read my comment you will find nothing that suggests catastrophic cyber warfare is a major threat. The real threat is a death of a thousand cuts. Trade secrets, troop movements, active spies, little snippets of information that can cause a lot of trouble if put in the wrong hands.
- busterarm 11y ago
  And our government shares a ton of information with contractors who are not 'in the know' about these vulnerabilities. If they truly cared about this, they would push vendors to plug the leaks that they know about.

coroutines 11y ago

> You cannot learn from your enemy without invasive action, and you cannot test your capabilities without constantly attacking your adversaries... I'm sorry but this just sounds unethical and wrong. So much can be learned passively. This is a good read: https://www.nostarch.com/silence.htm https://www.nostarch.com/silence.htm