3 ms·

If previously aware, shouldn't they have been even more prepared to stop the attack then?

• JshWright 9y ago
  The attackers used the NSA's exploit as a means to distribute their payload. It was the payload that was inadvertently disabled.
  • nonbel 9y ago
    I honestly don't know the details, I am just wondering what government agencies have the responsibility of defending against attacks like this. Even in this case though, you would think the NSA, etc have to do less analysis of the payload since they got to inspect and play with it for much longer than anyone else. Therefore they could waste less time on that and more quickly focus on the rest of the issue.
    • Bartweiss 9y ago
      Historically, I think the answer is just that the NSA doesn't even try. There are some three-letter agencies that do work on fighting malware, often by partnering with relevant companies like Microsoft (who was a major anti-malware player here too). I know the FBI does so publicly, and some government groups invite large companies to low-secrecy briefings on security. But I've never heard a mention of the NSA 'fighting' malware that isn't obviously governmental. Even if they knew about the exploit, used the exploit instead of disclosing it, and are well-placed to fight it, I think that's just filed under 'not my department'.
• Bartweiss 9y ago
  NOBUS is basically a doctrine of assuming that no one else will find and use these exploits, so they can be maintained as strict-offense.