4 ms·
I agree. Presenting on Protego doesn't seem like a good idea – the information given in this talk could aid terrorists.
by maxfan8 7y ago
I agree. Presenting on Protego doesn't seem like a good idea – the information given in this talk could aid terrorists.
- jlgaddis 7y agoToyota trucks are often used by terrorists. I don't think they should stop making them, though.
- nl 7y agoI had a vague idea that perhaps there is a difference between a Toyota truck and a Stinger Anti-aircraft missile. But yes, I see we can't possible make that distinction.
- Buge 7y agoIt could also aid the CIA in making a more secure virtual fencing solution. It's similar to the debate about full disclosure vs coordinated disclosure. Some companies pay for bug bounties. Additionally it could convince the CIA to distribute less weapons.
- maxfan8 7y agoThis is a good point! However, the CIA surely has sufficient internal incentives to fix privately disclosed vulnerabilities. There is no need for "bad publicity" to motivate them to become more secure. The CIA may even have already started working on fixes after Vault 7. Who knows? The only thing this action serves to do is allow less than trusted third parties abuse the weapons given to them (a possibility that the speaker clearly recognizes).
- Buge 7y ago> the CIA surely has sufficient internal incentives to fix privately disclosed vulnerabilities. Do they? Also various people could have different definitions of "sufficient". They might previously have had 3 people spending half their time on it, and this might cause them to increase it to 5 people working full time on it. Do major tech companies (Apple, Google, Microsoft) have less internal incentives than the CIA? This XSS vulnerability apparently took a year to be fixed: https://www.openbugbounty.org/reports/164180/ https://www.openbugbounty.org/reports/164180/