3 ms·
Of course it is the Vendor's responsibility. But if the NSA, CIA, FBI, Homeland Security, Secret Service or any other government group gets in the way how much
by sqeaky 11y ago
Of course it is the Vendor's responsibility. But if the NSA, CIA, FBI, Homeland Security, Secret Service or any other government group gets in the way how much of the blame goes where when the shit hits the fan?
Most vendors will patch if they know about issues. Who is at fault when a hack happens and the the US government could have prevented it by divulging.
- tptacek 11y agoNone of these groups are "getting in the way". They're doing independent vulnerability research. Their work doesn't prevent you from doing the same research and finding the same bugs. It is really hard to understand the argument that they're somehow doing harm, simply by learning things and then not sharing them with you.