3 ms·

My initial thoughts And what happens if they break something while patching the exploits? Just seems odd that somehow the FBI is the best server admin here? I

My initial thoughts And what happens if they break something while patching the exploits? Just seems odd that somehow the FBI is the best server admin here? I feel like I’m missing the full view of the implementation specifics. Shouldn’t the disincentive for admins to run unpatched just be monetary damages once/if a damage occurs? Why are my tax dollars paying for lazing email hosts? Seems like a lot of other issues (unless I’m missing something)

0xcde4c3db 6y ago
> And what happens if they break something while patching the exploits? Probably the same thing that happens when officers injure people or damage property in the course of executing a warrant (which is quite common). In short, either the victim is rich and/or outraged enough to venture a lawsuit against the relevant agency or they just file insurance claims and hope for the best. I wouldn't be surprised if part of the reasoning for signing off on this action was that the risk of damage was considerably lower than what is routinely understood to be part and parcel of executing search warrants.
avz 6y ago
> Just seems odd that somehow the FBI is the best server admin here? Without arguing for or against it, I can see this new role viewed as a "sysadmin of last resort" wherein an authorized institution steps in to ensure a minimum security level among neglected systems in their jurisdiction.
ericbarrett 6y ago
> Why are my tax dollars paying for lazing email hosts? I presume they're worried about industrial espionage and sabotage.
mlyle 6y ago
If your front door breaks leaving your house unsecured such that it is noticed and reported to authorities... you'll find that many local police will secure your building for you in the most hamfisted way possible. It's still probably better than leaving it open.
PaulAJ 6y ago
Its not just the insecure servers that are at risk. These systems can be used as jumping off points for further intrusions elsewhere. So to extend the broken front door analogy, its not just that the police are worried about your property, they are also worried that your house will be taken over by criminals and used to sell crack / store stolen property / run a brothel / insert other crime of choice.

0xcde4c3db 6y ago

> And what happens if they break something while patching the exploits? Probably the same thing that happens when officers injure people or damage property in the course of executing a warrant (which is quite common). In short, either the victim is rich and/or outraged enough to venture a lawsuit against the relevant agency or they just file insurance claims and hope for the best. I wouldn't be surprised if part of the reasoning for signing off on this action was that the risk of damage was considerably lower than what is routinely understood to be part and parcel of executing search warrants.

avz 6y ago

> Just seems odd that somehow the FBI is the best server admin here? Without arguing for or against it, I can see this new role viewed as a "sysadmin of last resort" wherein an authorized institution steps in to ensure a minimum security level among neglected systems in their jurisdiction.

ericbarrett 6y ago

> Why are my tax dollars paying for lazing email hosts? I presume they're worried about industrial espionage and sabotage.

mlyle 6y ago

If your front door breaks leaving your house unsecured such that it is noticed and reported to authorities... you'll find that many local police will secure your building for you in the most hamfisted way possible. It's still probably better than leaving it open.

PaulAJ 6y ago

Its not just the insecure servers that are at risk. These systems can be used as jumping off points for further intrusions elsewhere. So to extend the broken front door analogy, its not just that the police are worried about your property, they are also worried that your house will be taken over by criminals and used to sell crack / store stolen property / run a brothel / insert other crime of choice.