3 ms·
There was a long interview with Snowden posted recently, which didn't make it to the frontpage. I guess because of Snowden penalty on HN and Snowden fatigue. An
by pdknsk 12y ago
There was a long interview with Snowden posted recently, which didn't make it to the frontpage. I guess because of Snowden penalty on HN and Snowden fatigue. Anyway, he kept repeating a point which is quite easy to understand for the public I think.
https://news.ycombinator.com/item?id=8859606 https://news.ycombinator.com/item?id=8859606
And the reality is when it comes to cyber conflicts [...], we have more to lose.
We spend more on research and development than these other countries, so we shouldn’t be making the internet a more hostile, a more aggressive territory. We should be cooling down the tensions, making it a more trusted environment, making it a more secure environment, making it a more reliable environment, because that’s the foundation of our economy and our future.
[...]
The concept there is that there’s not much value to us attacking Chinese systems. We might take a few computers offline. We might take a factory offline. We might steal secrets from a university research programs, and even something high-tech. But how much more does the United States spend on research and development than China does? Defending ourselves from internet-based attacks, internet-originated attacks, is much, much more important than our ability to launch attacks against similar targets in foreign countries [...].
[...]
When you look at the problem of the U.S. prioritizing offense over defense, imagine you have two bank vaults, the United States bank vault and the Bank of China. But the U.S. bank vault is completely full. It goes all the way up to the sky. And the Chinese bank vault or the Russian bank vault of the African bank vault or whoever the adversary of the day is, theirs is only half full or a quarter full or a tenth full.
But the U.S. wants to get into their bank vault. So what they do is they build backdoors into every bank vault in the world. But the problem is their vault, the U.S. bank vault, has the same backdoor. So while we’re sneaking over to China and taking things out of their vault, they’re also sneaking over to the United States and taking things out of our vault. And the problem is, because our vault is full, we have so much more to lose. So in relative terms, we gain much less from breaking into the vaults of others than we do from having others break into our vaults.
- ed 12y agoThere's no reason to pick Offense vs. Defense any more than there is Social Security vs. Education. It's just a question of budgeting. Why wouldn't we invest in both?
- AgentME 12y agoIf offense includes things like trying to ban or secretly weaken defensive measures like encryption, then that doesn't work out so nicely.
- Cakez0r 12y agoI think offensive vs defensive is a very easy choice. We want to prevent our systems from being compromised, but don't have any business provoking attacks by breaking into systems. Invest in defense.
- pyre 12y agoIn this situation, you can't pick both. The offensive measures we are discussing exist by breaking the defensive measures. The problem is breaking the defensive measures breaks not only their defensive measures, but ours as well. Hence Snowden's analogy to making a secret entrance to all bank vaults, even ours. In this case, the idea is that the NSA will keep knowledge the secret door to the bank vault to themselves, and we'll all be secure. The problem with this is that other countries can inspect the bank vault and discover the secret door for themselves, or steal said knowledge from the NSA via espionage. Now our bank vault is just as exposed as theirs.
- MichaelApproved 12y agoI thought the back doors into our vaults were intentional, so that NSA could get in. Is the NSA willing to allow local companies have a completely secure network if it means they can't get into it also? Seems like they're comfortanle with the risk of hacks as long as they can get to go into the vault and look around too.
- dang 12y ago> I guess because of Snowden penalty on HN There hasn't been any such penalty for many months. There used to be a weak penalty, which started during the period when there were hundreds of NSA/Snowden stories. But our intention was always to remove that once the quantity normalized, and so we did.