3 ms·
I'm wondering if government agencies like the CIA, NSA and their counterparts in other countries look for vulnerabilities in programs but never report them to t
by jbigelow76 14y ago
I'm wondering if government agencies like the CIA, NSA and their counterparts in other countries look for vulnerabilities in programs but never report them to the vendors for fixing but instead catalog them for possible use in future exploits.
(actually, I'm not really wondering, it's probably naive to assume they wouldn't)
- Spooky23 14y agoIt's beyond that -- they actually have created a market for the trading of 0-days, and bid against each other using various proxies.
- contingencies 14y agoMy own experience, meeting some of these people, suggests this is certainly correct.