3 ms·
> Unless there is a clear national security or law enforcement need, this process is biased toward responsibly disclosing such vulnerabilities. wow, those two
by anonbanker 13y ago
> Unless there is a clear national security or law enforcement need, this process is biased toward responsibly disclosing such vulnerabilities.
wow, those two caveats are broad enough to remove any real meaning from the process.
- Zigurd 13y agoThe cool part is that you can actually measure how weasely are those weasel words: As other security experts have pointed out here, the NSA's hoard of zero-days is numbers in the thousands. How many times have they practiced "responsible disclosure?"