4 ms·
"The case raises questions about whether government agencies, even covert ones, should carry some responsibility for informing citizens of weaknesses they've un
by cdnsteve 11y ago
"The case raises questions about whether government agencies, even covert ones, should carry some responsibility for informing citizens of weaknesses they've unearthed in devices, operating systems and online infrastructure"
It should be legislation that any government agency discovers a security issue that it must be disclosed, promptly to software vendors, then after patched, it must also disclose to the public. Accountability is the keyword here. A major security agency must be accountable to security issues it finds, crazy right? After all, these agencies are suppose to be protecting their own citizens, or one would hope so...
- Zigurd 11y agoDuh. They do. Not doing that is the same as not revealing, say, a microbe that would be useful for wiping out some disfavored population, or, worse still, genetically engineering such a microbe. The people who make and sell exploits to governments are no better than freelance biologists weaponizing microbes. It is hypocritical of them to rattle on about "cyber terror" and conduct their own cyber war with the same weapons.