Thousands of computers now compromised with leaked NSA tools, researchers say

Re:Thousands of computers now compromised with leaked NSA to... by noir_lord on Sunday April 23, 2017 @03:39PM (#14180019)

> It's their job to exploit computers the same way it's the job of the military to apply force.

That's one half of their job, the other half is to secure government infrastructure from exactly the type of attacks they use on other countries.

The problem there is that it sets up an incredible tension since how do you get the message out about a 0-day in windows to protect your 'own' side without your opponents getting the same message.

I've thought for years that the NSA doing both jobs is silly since one side will inevitably win that argument (as seems to be the case).

It needs to be a separate agency concerned purely with securing government and infrastructure from external threats with a decent firewall between the two sides (and possibly an oversight clearing committee to keep an eye on what both sides are up to).

Over here in the UK we have largely the same problem with GCHQ having a dual mandate.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by tastythrowaway2 on Sunday April 23, 2017 @07:37PM (#14181038)

I think the obvious answer here is to go full open-source on the infrastructure. if they can afford to pay engineers to craft exploits, the can afford to pay engineers to fix them.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by cryptarch on Sunday April 23, 2017 @06:18PM (#14180728)

> how do you get the message out about a 0-day in windows

Force-push a Windows 10 update? That seems like one of the few legitimate usecases of Win10 being a corporate botnet.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by JumpCrisscross on Sunday April 23, 2017 @04:48PM (#14180362)

> how do you get the message out about a 0-day in windows

American companies get disclosures, foreign companies do not.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by hiram112 on Sunday April 23, 2017 @05:15PM (#14180503)

What's an 'American' company these days?

US companies like Oracle, MS, Google, etc. have offices all over the world.

They also tend to use various visas to import 10% of their own US based staff (probably a much higher ratio of engineers) from foreign nations.

The US has gotten very wealthy from offshoring, foreign talent, and technical exports, but it causes a massive problem when keeping secrets locally.

[ Parent | on HN ]