4 ms·
True, but the article is arguing it's the FBI's failure to disclose the vulnerabilities that is making us less safe. We expect researchers to follow responsibl
by matthewmcg 11y ago
True, but the article is arguing it's the FBI's failure to disclose the vulnerabilities that is making us less safe.
We expect researchers to follow responsible disclosure practices and at least notify the vendor to give them a chance to prepare a patch. I can understand why the FBI might not want to do that, but that's where the OP is coming from.
- mc32 11y agoBut whether someone knows there are vulnerabilities is not the same as exploiting the vulnerabilities for nefarious uses. Lets say the FBI did not exist. We know those same vulnerabilities would exist, except an organization would not be aware of them as such since the org does not exist, but the vulns would still be there and software would still be as vulnerable. So them knowing is more or less neutral in terms of making software more or less vulnerable.