3 ms·
It is always better to have more options - but it is also a matter of trust - how much can you trust a bought zero day? Especially when your opponent is the UK
by zby 8y ago
It is always better to have more options - but it is also a matter of trust - how much can you trust a bought zero day? Especially when your opponent is the UK state.
- wallace_f 8y agoTrust? In terms of competency of the exploit? I've wondered how the security experts privately regard nation state security personnel and teams? For example, no government was competing to employ Barnaby Jack. And of course government is notorious for inefficiency and incompetence when producing goods and services. Of course nation states also have enormous advantages over any other individual or group.
- londons_explore 8y agoThe only trust risk is that the guy you bought it from also told someone else, and they're just waiting for you to use the exploit so they can 'spy on your spying'. That risk can be mitigated by just hiring someone in-house to find exploits. Security services employ lots of exploit finders for that reason.