Re:The FBI is working hard to keep you unsafe
by sqeaky on Monday April 25, 2016 @04:37PM
(#11567146)
Of course it is the Vendor's responsibility. But if the NSA, CIA, FBI, Homeland Security, Secret Service or any other government group gets in the way how much of the blame goes where when the shit hits the fan?
Most vendors will patch if they know about issues. Who is at fault when a hack happens and the the US government could have prevented it by divulging.
Re:The FBI is working hard to keep you unsafe
by tptacek on Monday April 25, 2016 @04:45PM
(#11567218)
None of these groups are "getting in the way". They're doing independent vulnerability research. Their work doesn't prevent you from doing the same research and finding the same bugs. It is really hard to understand the argument that they're somehow doing harm, simply by learning things and then not sharing them with you.
I'm pretty skeptical that anything the FBI is doing is altering the balance of power in software security between the US and China.
It's also a little weird to me that we have the expectation that a government agency is going to shoulder responsibility for ensuring the software we run is secure. Shouldn't that be the vendor's responsibility?