2 ms·
One of those goals benefits the people with power who are above the NSA. The other provides a benefit to the public at large that few will notice. Which goal
by JasonFruit 7y ago
One of those goals benefits the people with power who are above the NSA. The other provides a benefit to the public at large that few will notice. Which goal do you think is likely to be top priority?
- monocasa 7y agoWell, in the case of heartbleed where first the NSA found it, and an independent researcher found it, and the DoD uses Linux and OpenSSL all over the place, you'd think that the information assurance side would be better represented. Who knows how many adversaries were using that as well before it was public (hence the whole point of responsible disclosure). Edit: Like, stuff like cryptanalysis of SM4 is for sure on the table. I can even see their neat Diffie-Hellman hack that costs $100m per nonce. But a trivially remotely exploitable memory safety bug in software that runs large sections of the military? Like, come on.
- admax88q 7y agoTo be fair, I bet the NSA knows better than anyone if any given exploit is being used in the wild.