3 ms·
Perhaps because those involved in computer security don't see any end in sight. It's widely acknowledged that there is no such thing as perfect computer securit
by rapjr9 6y ago
Perhaps because those involved in computer security don't see any end in sight. It's widely acknowledged that there is no such thing as perfect computer security, if someone wants to get in bad enough they will. Zero-days will always exist. Every single app running on a computer that accesses the internet is an attack route, as are all the companies associated with the computer and software and all the people associated with all of those (via social engineering, bribery, threats). Stopping attackers from getting into computers, especially consumer computers (and many consumers have critical jobs at companies, in governments, etc.) is not possible in total it seems. And once they are in they can steal files, expose them, and encrypt them, or control the computers and data on them (for blackmail or other reasons). So expect it to get worse. It's been on that path for a while and nothing has stopped it yet. Even the CIA has had files outed. Without a solution expect the USA Congress to be blackmailed, chemical plants to explode, all financial dealings to be revealed, unless the ransom is paid. What is there to stop it from happening? I expect it to get much worse before it gets better, mainly because it has only been getting worse and no solutions are in sight. Passing a law that makes paying ransoms illegal is not going to work when the alternative is lots of people dying or big dents in economies. And we can not easily send military strike teams or drones into other countries to attack back, without inviting even bigger conflicts. An offensive cyber posture would also mean you have to find out who attacked you, not always possible. And militaries are set up to fight a single enemy, or a few enemies, not hundreds of thousands of enemies.
It has indeed been amazing to watch how little discussion there has been about this as it keeps getting worse. Some people are writing warnings, especially those who are the ones who are supposed to be doing something about it. That seems to be a common tactic these days, if you are responsible for solving a problem print a warning, then when the problem manifests say "I warned you". Many problems have been ignored for decades this way.
- lupire 6y agoWhat are we paying the NSA and CIA for if not defense against foreign attacks on US infrastructure?
- alsetmusic 6y ago> What are we paying the NSA and CIA for if not defense against foreign attacks on US infrastructure? The CIA seems to exist primarily to conduct attacks on foreign targets.