In Baltimore and Beyond, a Stolen NSA Tool Wreaks Havoc

Re:In Baltimore and Beyond, a Stolen NSA Tool Wreaks Havoc by PeterisP on Saturday May 25, 2019 @06:34PM (#20011901)

I mean, there is a big difference - you have to directly send your exploits to the enemy so that they'd work; you don't have to send any escrowed keys to them.

[ Parent | on HN ]

Re:In Baltimore and Beyond, a Stolen NSA Tool Wreaks Havoc by natch on Saturday May 25, 2019 @06:40PM (#20011932)

The enemy will have escrowed keys too.

But see my answer to Gödel_unicode.

[ Parent | on HN ]

Re:In Baltimore and Beyond, a Stolen NSA Tool Wreaks Havoc by natch on Saturday May 25, 2019 @06:53PM (#20012001)

Fun fact, the need for NSA exploits to be installed on an “enemy” (target) device had nothing to do with how they were leaked in this case.

And stuff kept in vaults can be leaked too.

Sure the two things are different but the dynamics are the same. Information wants to be free, and it leaks.

Your argument can be turned around as well. The NSA tools were meant for use by a small specialized team under strict controls. Whereas key escrow has been put forward as a solution that would allow any podunk sheriff in any jurisdiction to apply for access to decrypt private information anywhere... virtually guaranteeing compromise with poor security practices, unlike what would be expected for the NSA tools.

[ Parent | on HN ]