News for hackers. Stuff that matters.
Re:Microsoft says encryption laws make companies wary of sto... by shakna on Thursday March 28, 2019 @07:24AM (#19511084)
Systemic weakness or systemic vulnerability is redefined to not include anything that the notice can require however, rendering that particular exception pointless.

> systemic vulnerability means a vulnerability that affects a whole class of technology, but does not include a vulnerability that is selectively introduced to one or more target technologies that are connected with a particular person. For this purpose, it is immaterial whether the person can be identified.

The words "systemic weakness" means something completely different to how the industry would use it.

Re:Microsoft says encryption laws make companies wary of sto... by bigiain on Thursday March 28, 2019 @07:55AM (#19511270)
"We don't need you to introduce a Systemic Weakness into the whole class of 'electronics', we just need you to selectively target the specific class 'mobile phones' that are connected to John Doe 3 aka bogey-man-de-jour."

This is now request that your lawyer would happily bill by the hour arguing with their lawyers in front of a judge - to determine whether it's a correct and enforceable interpretation of that shittily written legislation.

Except you aren't allowed to tell your lawyer we asked you to do it.