3 ms·
I'm always confused when I hear this about why malware researchers don't obtain a huge trove of malware samples (and/or zero-day exploits) by obtaining some of
by schoen 7y ago
I'm always confused when I hear this about why malware researchers don't obtain a huge trove of malware samples (and/or zero-day exploits) by obtaining some of these "gifts" and then connecting them to honeypot devices. If all you have to do to receive one is travel to China as an employee of a major U.S. company, they must be quite easy to get ahold of.
- yazan94 7y agoI imagine the average Joe working at MSFT/AAPL/GOOG/etc. doesn't get such gifts unless they are worth hacking - in which case I imagine the gift-givers would have done their due diligence. Also corporate policies can be pretty specific and strict regarding gifts to eliminate potential conflicts of interests.
- schoen 7y agoDue diligence about whether the gift recipient is likely to to use it personally rather than passing it along to a malware researcher?
- codedokode 7y agoSomeone must have a lot of free time to do this instead of work.
- komali2 7y agoIt is not a fun idea to travel to China as a malware researcher. You might get arrested for being involved in encryption at all, which to China means you were smuggling in anti-Party materials. Or, you might be arrested so you can be used as a pawn in a political game: https://www.scmp.com/news/china/diplomacy/article/2189605/us-academics-call-china-immediately-release-candian-michael https://www.scmp.com/news/china/diplomacy/article/2189605/us...