Re:Was the iOS SSL Flaw Deliberate?
by PhantomGremlin on Thursday February 27, 2014 @09:30PM
(#7316912)
> If I were the NSA, a strategy with much lower variance would be to hire a lot of smart folks to do the intense security reviews and testing that Apple (and many other companies, presumably) fail to do, and try to find bugs before they're patched.
Very very good point.
Until you made it, I might have thought "well of course NSA looks for bugs to exploit", but I didn't think through the implications.
Here we have Apple open sourcing their security code. They made the NSA's job 10x easier than w/o the source. So of course the NSA will lint and review and test and exploit Apple's source code. Intensively. It's low-hanging fruit, of the Apple variety. :)
Very very good point.
Until you made it, I might have thought "well of course NSA looks for bugs to exploit", but I didn't think through the implications.
Here we have Apple open sourcing their security code. They made the NSA's job 10x easier than w/o the source. So of course the NSA will lint and review and test and exploit Apple's source code. Intensively. It's low-hanging fruit, of the Apple variety. :)