What I don’t get is, we all know the NSA is doing this. It’s no big secret. Why don’t they just report the 0-day to Microsoft, so they can fix it, so that North Korea doesn’t also exploit it. In exchange, Microsoft can give them some special access or special keys or some backdoor. Why even bother pretending anymore or putting on this charade. It’s the same thing over and over again.
In exchange, Microsoft can give them some special access or special keys or some backdoor.
They might be doing this. The thing is, putting something like that in makes so much more likely you’ll accidentally create an exploit for other actors as well. It’s why security experts are so against backdoors. They fundamentally compromise security.
What I don’t get is, we all know the NSA is doing this. It’s no big secret. Why don’t they just report the 0-day to Microsoft, so they can fix it, so that North Korea doesn’t also exploit it. In exchange, Microsoft can give them some special access or special keys or some backdoor. Why even bother pretending anymore or putting on this charade. It’s the same thing over and over again.
They might be doing this. The thing is, putting something like that in makes so much more likely you’ll accidentally create an exploit for other actors as well. It’s why security experts are so against backdoors. They fundamentally compromise security.
If one puts an indeterminate amount of red tape around an object / thing / thought, does one become entangled in said red tape?
– some idiot called lad from the internet’s, circa last decade