4 ms·
Most likely these vulnerabilities were known by adversaries and they decided to report these to make it more difficult for those adversaries to attack. I’m sur
by spacephysics 2y ago
Most likely these vulnerabilities were known by adversaries and they decided to report these to make it more difficult for those adversaries to attack.
I’m sure the really juicy zero days they’ve discovered in-house are kept out of reports like these
- thewebguyd 2y agoThis is the most likely scenario. Its not like the government has decided they no longer need to hang on to zero days to use against adversaries. They've just determined these ones are either no longer useful to them, or adversaries have discovered and began using them.
- tptacek 2y agoIt literally is the scenario, as really the only outcome of the VEP (for serious, "marketable" vulnerabilities) is "disclose once burned".
- kevin_thibedeau 2y agoThe US depends on exploits being available for the companies it uses to circumvent the 4th amendment.
- stephen_g 2y agoThe problem is when they don't know that their adversaries know about those exploits... There's a lot of arrogance and hubris with the idea of NOBUS, and they often make things worse assuming only they know...