Once again: it's fine if NSA is discovering exploits, as long as they aren't also paying off commercial researchers not to disclose flaws to vendors. A private NSA exploit development capability merely puts them in competition with commercial industry, and industry has the upper hand, because they can actually fix whole bug classes all at once, and NSA has to find them piecemeal.
I guess I didn't understand the previous then. The NSA isn't just discovering exploits, they are an exploit factory. They develop chips and hardware, coerce internet backbone corporations to create exploits, generally have broken the whole game. While we were arguing about cookies, they were recording the whole conversation, breaking the encryption, reducing privacy worldwide to a sham.
Competition implies some sort of level ground. But they gag the communications suppliers as they subvert the networks. If not for a whistle-blower this could have continued undetected for decades.
I wish I were some sort of conspiracy-theorist spouting hyperbole. I know this sounds like one.
I'm reading "exploit", "chips", "hardware", "backbone", "cookies", and "encryption", but not seeing a coherent argument or evidence that we mean the same things when we use these words. NSA is not getting "backbone corporations" to create "exploits".
I guess I'm not qualified to speak on this subject, I can't say anything without sounding like a newb. The NSA requires Google, wireless operators, everybody who has or transmits data, to hand it over assembly-line fashion and that's not an 'exploit'. But if I managed to do that, it would be.
So the NSA doesn't get labeled as a rogue hacker or exploit-creator because, well, because of semantics.
Comments
I don't understand what this comment means.
Once again: it's fine if NSA is discovering exploits, as long as they aren't also paying off commercial researchers not to disclose flaws to vendors. A private NSA exploit development capability merely puts them in competition with commercial industry, and industry has the upper hand, because they can actually fix whole bug classes all at once, and NSA has to find them piecemeal.
I guess I didn't understand the previous then. The NSA isn't just discovering exploits, they are an exploit factory. They develop chips and hardware, coerce internet backbone corporations to create exploits, generally have broken the whole game. While we were arguing about cookies, they were recording the whole conversation, breaking the encryption, reducing privacy worldwide to a sham.
Competition implies some sort of level ground. But they gag the communications suppliers as they subvert the networks. If not for a whistle-blower this could have continued undetected for decades.
I wish I were some sort of conspiracy-theorist spouting hyperbole. I know this sounds like one.
I'm reading "exploit", "chips", "hardware", "backbone", "cookies", and "encryption", but not seeing a coherent argument or evidence that we mean the same things when we use these words. NSA is not getting "backbone corporations" to create "exploits".
I'm confused too. Which of these things (http://www.wnyc.org/story/running-list-what-we-know-nsa-can-...) are exploits and which 'implants'? Why does it matter? What is the NSA doing that is worth all that?
I guess I'm not qualified to speak on this subject, I can't say anything without sounding like a newb. The NSA requires Google, wireless operators, everybody who has or transmits data, to hand it over assembly-line fashion and that's not an 'exploit'. But if I managed to do that, it would be.
So the NSA doesn't get labeled as a rogue hacker or exploit-creator because, well, because of semantics.