I disagree. Symantec is one of the few companies on the planet that has had to deal with this exact situation before: Stuxnet. By late 2010, Synametic had come

I disagree. Symantec is one of the few companies on the planet that has had to deal with this exact situation before: Stuxnet. By late 2010, Synametic had come to the conclusion that Stuxnet was most probably a joint US/Israeli malware project, designed to disrupt Iran's quest for a nuclear bomb. [1] Just try and imagine that the gravity of that moment. They had stumbled into an international covert action involving weapons of mass destruction. I mean the closest thing I can even compare this with is fiction (the "too many secrets"/"using the magic box" scene in the movie Sneakers). But this wasn't fiction, and Symantec researchers and management had to decide what to do. They could have just shut up and said nothing. After all they were a US company, forbidden by law to even to do business in Iran. But they didn't do that. Rightly or wrongly, they published their findings in a whitepaper and told the world about it. I think Synmantec has earned the benefit of the doubt when dealing with state sponsored malware. [1] http://www.wired.com/2011/07/how-digital-detectives-deciphered-stuxnet/all/ http://www.wired.com/2011/07/how-digital-detectives-decipher...