5 ms·

You can't build an effective defense in cyber, or we haven't over the past 20 years. It's all offense. One senior three letter agency guy said if cyber were a f

You can't build an effective defense in cyber, or we haven't over the past 20 years. It's all offense. One senior three letter agency guy said if cyber were a football match, the score would be 421-420 at the 20min mark. It's all offense, so blaming one side for being the aggressor is a weird point.

koonsolo 7y ago
What offence did EU do? Genuinely curious, because it seems it's all defence over here, unlike the other big powers in the world.
- dvfjsdhgfv 7y ago
  You're probably right about the offensive aspect - the member states very often disagree on much simpler issues, I can't imagine them getting their act together on something as controversial. As for defense, the EU can't do much, sorry. Most interesting things are done at the hardware level. As for software, maybe they could sponsor security code reviews of some critical elements of open source ecosystem and encourage users to use them, but it would work only if these users used these components exclusively which is never going to happen, even in government.
  - friendlybus 7y ago
    In 2015ish Dan Geer, a prominent cybersecurity expert got up and said in a talk, we don't know if vulnerabilities are sparse in quantity or dense. If they are sparse and there is actually such thing as a system that can be secured by doing the work of patching all the vulns up, then Dan argues that the US should be paying double what everyone else pays for bug bounties, so that the vulns get patched up and anybody who attempts to hide secret vulns will be aware their competitor(s) is going to cash in and be pressured to do so themselves. If vulnerabilities are dense and there will always be more than we can patch.. well computers are a strange beast.
- dragonelite 7y ago
  I know that the dutch papers were super proud the intelligence agency had hacked multiple Russian institution.
  - koonsolo 7y ago
    Is this the intelligence on the "Cozy Bear" hacker group? Because in a sense that is defence and not offence if you investigate a hacker group, possibly linked with russian intelligence, that is hacking into your own ministries.

koonsolo 7y ago

What offence did EU do? Genuinely curious, because it seems it's all defence over here, unlike the other big powers in the world.

dvfjsdhgfv 7y ago
You're probably right about the offensive aspect - the member states very often disagree on much simpler issues, I can't imagine them getting their act together on something as controversial. As for defense, the EU can't do much, sorry. Most interesting things are done at the hardware level. As for software, maybe they could sponsor security code reviews of some critical elements of open source ecosystem and encourage users to use them, but it would work only if these users used these components exclusively which is never going to happen, even in government.
- friendlybus 7y ago
  In 2015ish Dan Geer, a prominent cybersecurity expert got up and said in a talk, we don't know if vulnerabilities are sparse in quantity or dense. If they are sparse and there is actually such thing as a system that can be secured by doing the work of patching all the vulns up, then Dan argues that the US should be paying double what everyone else pays for bug bounties, so that the vulns get patched up and anybody who attempts to hide secret vulns will be aware their competitor(s) is going to cash in and be pressured to do so themselves. If vulnerabilities are dense and there will always be more than we can patch.. well computers are a strange beast.
dragonelite 7y ago
I know that the dutch papers were super proud the intelligence agency had hacked multiple Russian institution.
- koonsolo 7y ago
  Is this the intelligence on the "Cozy Bear" hacker group? Because in a sense that is defence and not offence if you investigate a hacker group, possibly linked with russian intelligence, that is hacking into your own ministries.