3 ms·
Not smart to take your security advice from the same organisation that leaked the hacking tools that the bad guys are probably going to use to hack you.
by jeffrallen 5y ago
Not smart to take your security advice from the same organisation that leaked the hacking tools that the bad guys are probably going to use to hack you.
- tlb 5y agoWhy? All security agencies have both offensive and defensive operations. Hacking tools leak often, because you have to install them on hostile systems. So it seems like an unrealistic goal to want an agency with good defensive advice and no leaks.
- andrewflnr 5y agoI think you're confusing the NSA with CISA. CISA is to my knowledge entirely defensive, and the biggest leaks of hacking tools to which I suspect you're referring came from the NSA (and CIA IIRC, but more famously NSA). Unless the "same organization" is the USG, and you're casually assuming all of its left and right tentacles know what the others are doing, in which case I'd say you're laughably optimistic about its competence.
- jeffrallen 5y agoI know the difference between the CISA and the NSA. The NSA infiltrated and compromised the NIST (and got caught), so I can't see why they wouldn't do the same to CISA. Basically, yes, I'm saying don't trust the entire USG, because they have a catastrophic record on security, both defensive (OMB leak) and offensive (attacking your own team is an own goal).
- andrewflnr 5y agoAh, so wild speculation that maybe the NSA is somehow behind it after all. Gotcha.
- jeffrallen 5y agoThe history of the NSA shows that wild speculation is usually not sufficient to understand what they are up to.