News for hackers. Stuff that matters.

A comment on Drilling Down on Uncle Sam's Proposed TP-Link Ban. Parent comment

Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by jasonlotito on Monday November 10, 2025 @11:03AM (#45877218)
> I suspect its likely because TP-Link tells/is forced to tell the Chinese government...

I think if we are there, then we should assume all 0days are known by various states before patches are available regardless of whether companies are setup to share that information or not. You don't need to get the company to share that information, just one person in a company, and I don't really see that as being a challenging task for a state to do.

Assuming otherwise seems more risky.

[ Parent | on HN ]
Re:Drilling Down on Uncle Sam's Proposed TP-Link Ban by thewebguyd on Monday November 10, 2025 @11:52AM (#45877855)
Hence zero-trust, buzzwords aside.

You should absolutely assume breach as part of your company's security policy/trust model.

[ Parent | on HN ]