4 ms·

The NSA leverages these exploits to spy on foreign nations. That's fine, spies should spy... But it does beg the question: who's protecting our information fro

The NSA leverages these exploits to spy on foreign nations. That's fine, spies should spy... But it does beg the question: who's protecting our information from foreign intrusions?

macspoofing 10y ago
Isn't that partly the mission statement of the NSA and CIA and FBI?
- losteric 10y ago
  The CIA and NSA are externally oriented. Defense is arguably part of the FBI mission, however they don't have the NSA's level of skill or resources. The FBI might be able to detect abuse when it gets rampant but I have zero confidence that they would discover any of these exploits themselves. The FBI is mostly cleanup and criminal prosecution. We need an organization focused on preemptively securing our infrastructure.
  - knowaveragejoe 10y ago
    The NSA is actually tasked with that mission: > NSA is concurrently charged with protection of U.S. government communications and information systems against penetration and network warfare. https://en.wikipedia.org/wiki/National_Security_Agency https://en.wikipedia.org/wiki/National_Security_Agency
    - losteric 10y ago
      Yes, government defense. Who protects the rest?
      - jessaustin 10y ago
        Private entities protect themselves and their customers, to varying degrees, which is how it has always been.
      - knowaveragejoe 10y ago
        That actually overlaps with things like the power grid and ATC, for what it's worth. It's a little bigger than just "government computers".
jimnotgym 10y ago
Before this runs the risk of becoming a universally acknowledged truth, is it fine? Actually wasn't "Gentlemen don't open each other mail", also a perfectly reasonable position? In the cyberwar the US already seems to be fighting against its own weapons! Would it actually be much better for a nation like the US to use its knowledge defensively and keep their citizens safe from foreign interference?
- losteric 10y ago
  I also strongly advocate for information disclosure and collaborating with vendors. However, I'm not convinced the NSA is the entity for that role. Organizationally, the NSA makes more sense as an R&D entity that discloses to offensive intelligence agencies and defensive security forces.

The NSA leverages these exploits to spy on foreign nations. That's fine, spies should spy... But it does beg the question: who's protecting our information from foreign intrusions?

macspoofing 10y ago

Isn't that partly the mission statement of the NSA and CIA and FBI?

losteric 10y ago
The CIA and NSA are externally oriented. Defense is arguably part of the FBI mission, however they don't have the NSA's level of skill or resources. The FBI might be able to detect abuse when it gets rampant but I have zero confidence that they would discover any of these exploits themselves. The FBI is mostly cleanup and criminal prosecution. We need an organization focused on preemptively securing our infrastructure.
- knowaveragejoe 10y ago
  The NSA is actually tasked with that mission: > NSA is concurrently charged with protection of U.S. government communications and information systems against penetration and network warfare. https://en.wikipedia.org/wiki/National_Security_Agency https://en.wikipedia.org/wiki/National_Security_Agency
  - losteric 10y ago
    Yes, government defense. Who protects the rest?
    - jessaustin 10y ago
      Private entities protect themselves and their customers, to varying degrees, which is how it has always been.
    - knowaveragejoe 10y ago
      That actually overlaps with things like the power grid and ATC, for what it's worth. It's a little bigger than just "government computers".

jimnotgym 10y ago

Before this runs the risk of becoming a universally acknowledged truth, is it fine? Actually wasn't "Gentlemen don't open each other mail", also a perfectly reasonable position? In the cyberwar the US already seems to be fighting against its own weapons! Would it actually be much better for a nation like the US to use its knowledge defensively and keep their citizens safe from foreign interference?

losteric 10y ago
I also strongly advocate for information disclosure and collaborating with vendors. However, I'm not convinced the NSA is the entity for that role. Organizationally, the NSA makes more sense as an R&D entity that discloses to offensive intelligence agencies and defensive security forces.