3 ms·
True, but unless USA ordered Cisco to do that, it's a bit different. NSA will use whatever it can to spy on others, it's obvious
by onetimemanytime 8y ago
True, but unless USA ordered Cisco to do that, it's a bit different. NSA will use whatever it can to spy on others, it's obvious
- tracker1 8y agoI just with that the NSA had policies to disclose backdoors to appropriate business entities 30 days after discovery/purchase. They could still use 0-days, but at least the window would be reduced so the stockpile isn't unleashed on the world at large being a much bigger risk to security.
- smsm42 8y ago30 days is useless. Intelligence operations take years to unfold. Banning NSA from using zero-days doesn't mean everybody else is banned from using zero-days, including PRC.
- tracker1 8y agoI didn't say they couldn't use them.. only that they should have to disclose them to the company(ies) responsible. If they get a zero-day for windows, they can use it all they want... but they should have to disclose it to MS after 30-60 days of knowledge. The NSA is as responsible for technology security in the US as much as spying operations. They need to find a balance to do both. If they responsibly disclose and that happens before other nation states discover and take advantage of zero-days it makes it much better for everyone.