Wikileaks is offering tech firms CIA files first

Re:Wikileaks is offering tech firms CIA files first by andreyf on Thursday March 09, 2017 @12:38PM (#13831020)

1. It's the CIA and the NSA, as well as a host of friendly non-US intelligence agencies. They develop vulnerabilities, share them, and release them when the improvement to the defensive advantage the release provides outweighs the hindrance to the offensive advantage they provide over adversarial intelligence agencies.

2. Not only was such a promise never made, but it's well outside of the realm of reason. Of all the vulnerabilities out there (and the way the market works, there are more shipped every day), only small disjoint fractions have been discovered by intelligence agencies both friendly and hostile to the USIC, and hence there is absolutely no reason for them to disclose NOBUS vulns: https://en.wikipedia.org/wiki/NOBUS

[ Parent | on HN ]

Re:Wikileaks is offering tech firms CIA files first by filoleg on Thursday March 09, 2017 @02:38PM (#13832573)

1. The recent leaks were concerning CIA and not NSA.

2. I am not talking about all leaks ever, I am talking about the ones that CIA found. Also, NOBUS is in the domain of NSA, not CIA.

[ Parent | on HN ]

Re:Wikileaks is offering tech firms CIA files first by andreyf on Thursday March 09, 2017 @05:03PM (#13834193)

1. Makes no difference.

2. Makes no difference.

How do you know the CIA found these vulns, and that they weren't shared from IC partners?

You are, at best, advocating a policy which would lead to an absolutely disastrous disadvantage to the USICs SIGINT capabilities in relation to its adversaries.

[ Parent | on HN ]