News for hackers. Stuff that matters.
Re:Two vulnerabilities in Zoom could lead to code execution by whydoyoucare on Sunday June 07, 2020 @11:53AM (#23448232)
How would code-signing help if NSA arm-twists you into introducing a backdoor in your code? Even for open-source, it is difficult for average-Joe to trace and figure out contributions (its like saying the automobile engine has blueprints available, so everyone should be able to figure out what's wrong). :-)
Re:Two vulnerabilities in Zoom could lead to code execution by joering2 on Sunday June 07, 2020 @01:43PM (#23449097)
Arm-twist?

You know NSA is an American Agency, and America is not China - there is a free enterprise. The only way they can "arm-twist" you is by rules and regulations that every company has to follow. In other words - NSA cannot force you to break the law.

Re:Two vulnerabilities in Zoom could lead to code execution by jtsuken on Sunday June 07, 2020 @03:48PM (#23450161)
"The FBI wanted to work out an arrangement in which the developer would secretly feed its operatives information about Telegram’s inner workings—things like new features and other components of the service’s architecture that they might want to know about. The arrangement would be strictly confidential, and they were willing to pay." source: https://thebaffler.com/salvos/the-crypto-keepers-levine
Re:Two vulnerabilities in Zoom could lead to code execution by joering2 on Sunday June 07, 2020 @04:26PM (#23450493)
Whats your point? Telegram owners are private enterprise. They could say "okay we do it for money", or say "we won't do it because of principles".

Where is this so-called "arm-twisting" ??

Re:Two vulnerabilities in Zoom could lead to code execution by Angeo34 on Sunday June 07, 2020 @04:43PM (#23450633)
>What is a metaphor the post

Even if it wasn't a metaphor the US has been known to physically harass people for Software more than any other regardless of what the people did.

Re:Two vulnerabilities in Zoom could lead to code execution by joering2 on Sunday June 07, 2020 @06:40PM (#23451635)
Us government has been _physically_ harras people for software?

Some examples please?

Re:Two vulnerabilities in Zoom could lead to code execution by jtsuken on Sunday June 07, 2020 @07:50PM (#23452144)
Isn't it ironic how the majority of threads on this forum currently discuss the abuse of power of government officials and the excessive violence of countless law enforcement agencies, while this thread abounds in commenters conspicuously ignorant of the problem?
Re:Two vulnerabilities in Zoom could lead to code execution by joering2 on Sunday June 07, 2020 @11:49PM (#23453405)
I'm not being ignorant. I am simply asking question - what are examples of government physically harassing software people?

Unless what you saying is that some programmer neck was crushed for 8 minutes because they didn't want to implement backdoor??

Re:Two vulnerabilities in Zoom could lead to code execution by jtsuken on Sunday June 07, 2020 @08:02PM (#23452222)
Bribing the software engineers of an independent private business behind the owner's back, and/or showing up without announcement at private residences of major stake-holders is "arm-twisting" for all intents and purposes. Admittedly it's more subtle than the typical approach the Russian or Chinese governments would follow, yet the essence is the same. In rare cases, where bribery and coercion fail, there is the institution of FISA courts in the US and the lack of control over secret services in other countries. The potential of a private business to say "okay we do it for money" is exactly the risk at hand and the reason for more than a handful of "accidental" security breaches in the recent past.
Re:Two vulnerabilities in Zoom could lead to code execution by nitrobeast on Sunday June 07, 2020 @03:34PM (#23450045)
This is an ok thing for some Americans to believe in, but at least Google encrypted all its traffic between data centers specifically to avoid NSA eavesdropping. And many people in the rest of the world don’t think US respects the rule of law as it advertizes.
Re:Two vulnerabilities in Zoom could lead to code execution by whydoyoucare on Monday June 08, 2020 @11:24AM (#23457296)
Google encrypted it after Snowden documents revealed NSA was silently exfiltrating the data. [1]

[1] https://www.washingtonpost.com/world/national-security/nsa-i...