4 ms·
Not sure how I feel about this - on one hand the NSO Group happily sold this exploit to absolutely horrible clients[0], but on the other, app security shouldn't
by OsrsNeedsf2P 1y ago
Not sure how I feel about this - on one hand the NSO Group happily sold this exploit to absolutely horrible clients[0], but on the other, app security shouldn't depend on legal enforcement.
[0] https://www.theguardian.com/news/2021/jul/18/revealed-murdered-journalist-number-selected-mexico-nso-client-cecilio-pineda-birto https://www.theguardian.com/news/2021/jul/18/revealed-murder...
- JumpCrisscross 1y ago> app security shouldn't depend on legal enforcement Why not? There are significant negative externalities to not enforcing cybercrime laws.
- lazide 1y agoI think they meant solely depend on legal enforcement. For the same reason banks should have a decent vault for cash they aren’t using at this exact moment, since they shouldn’t just depend solely on any robbers getting caught.
- bloppe 1y agoIt's not like hacking WhatsApp was that easy. If it were, NSO wouldn't be able to sell it's exploits for so much
- vkou 1y agoJust because locks can be defeated by five seconds and a lockpick gun doesn't mean that the housebreaker, his fence, or his getaway driver is absolved of their responsibility.
- TZubiri 1y agoOf course law plays a huge part in computer security.
- walterbell 1y ago> app security shouldn't depend on legal enforcement EU Cyber Resilience Act (CRA) will soon impose legal security requirements on a wide class of software binaries sold in the EU.
- knorker 1y agoAs is constantly being made abundantly clear from blockchain stuff, code cannot make legal systems obsolete. No crime in the world can be made physically impossible. Why would hacking be any different?