3 ms·
>One compromise there and it is game over. Consider that every agency like the NSA, and private groups like the NSO Group (authors of the Pegasus spyware) alre
by npteljes 3y ago
>One compromise there and it is game over.
Consider that every agency like the NSA, and private groups like the NSO Group (authors of the Pegasus spyware) already sit on a pile of unpatched vulnerabilities, for various systems. If one vuln in systemd is game over, then the game is already over. And if what we currently experience is the game over state, then it's manageable.
- fl0ki 3y agoIt looks manageable to most of us because we don't know who was targeted and what would have happened if they weren't. We don't even know what whistleblowers were caught before they could publish their information, and we don't know what information that would have been. Imagine if nobody ever leaked what Edward Snowden did. Imagine that something similarly important, anywhere in the world, has not been leaked because of successfully exploited vulnerabilities.
- npteljes 3y agoI'd rather have a safer world for the software, and for the people especially. What I wanted to reflect on is just OP's assertion that if bad thing X happens, it's game over. It's not, I think, because if it would, then it were game over long ago. So now, if we find a vulnerability in systemd, we'll just fix it and put it with the rest of the fire.