4 ms·

I've seen it mentioned below, but I feel this is deserving of its own comment. If security researchers could report vulnerabilities with impunity it would dras

I've seen it mentioned below, but I feel this is deserving of its own comment. If security researchers could report vulnerabilities with impunity it would drastically reduce the incentive to sell vulnerabilities to black market buyers. This is a full-blown national security issue. If security researchers could work with our three letter agencies in defending our infrastructure it would go a long way towards securing the US against increasingly advanced opponents. As it stands right now, if I found a critical vulnerability in a government system I think I would just drop it and tell nobody. I think it's more likely that I would be punished rather than rewarded, which destroys any incentive I would have to help.

mtgx 9y ago
Yeah, if only the three-letter agencies actually cared about cybersecurity. The agencies don't want all devices and servers to have "iPhone-level" security or better -- that much is clear. They're still fighting Apple over it and they try to get them to weaken their security "so law enforcement can get in" whenever it's convenient to them. Cybersecurity compromises be damned. This is how they think. Their priorities are pretty far removed from "cybersecurity". They also blew their chance with cybersecurity, when they passed a supposed Cybersecurity Act of 2016, that was meant to stop all of these data breaches from happening. But as all the critics said back then, the law was nothing more than additional surveillance powers given to the NSA and DHS/FBI. They never actually intended to use it to stop any of the data breaches - they just wanted to collect more data on people and add to the big stack of hay, in which they want to find their needle.
- deleted 9y ago
  [deleted]
- rallycarre 9y ago
  The iphone isn't as secure as Apple wants people to believe.
  - jjevanoorschot 9y ago
    Do you have any examples of how the iPhone is insecure? Genuinely curious.
    - rallycarre 9y ago
      In the age of the IME and the hundreds of billions of dollars the US spends on US covert operations. I'll let you guess what the path of least resistance is.
      - willstrafach 9y ago
        I think “examples” refers to hard proof. Anyone could make an unsubstantiated claim about anyone or anything else if they wanted to, so it is not very productive to include.

mtgx 9y ago

Yeah, if only the three-letter agencies actually cared about cybersecurity. The agencies don't want all devices and servers to have "iPhone-level" security or better -- that much is clear. They're still fighting Apple over it and they try to get them to weaken their security "so law enforcement can get in" whenever it's convenient to them. Cybersecurity compromises be damned. This is how they think. Their priorities are pretty far removed from "cybersecurity". They also blew their chance with cybersecurity, when they passed a supposed Cybersecurity Act of 2016, that was meant to stop all of these data breaches from happening. But as all the critics said back then, the law was nothing more than additional surveillance powers given to the NSA and DHS/FBI. They never actually intended to use it to stop any of the data breaches - they just wanted to collect more data on people and add to the big stack of hay, in which they want to find their needle.

deleted 9y ago
[deleted]
rallycarre 9y ago
The iphone isn't as secure as Apple wants people to believe.
- jjevanoorschot 9y ago
  Do you have any examples of how the iPhone is insecure? Genuinely curious.
  - rallycarre 9y ago
    In the age of the IME and the hundreds of billions of dollars the US spends on US covert operations. I'll let you guess what the path of least resistance is.
    - willstrafach 9y ago
      I think “examples” refers to hard proof. Anyone could make an unsubstantiated claim about anyone or anything else if they wanted to, so it is not very productive to include.