5 ms·
Isn't this what the NSA is for? Also, I think we have plenty of reason to believe they regularly try to penetrate powerful companies, they just don't necessaril
by frenchy 2y ago
Isn't this what the NSA is for? Also, I think we have plenty of reason to believe they regularly try to penetrate powerful companies, they just don't necessarily tell us when they do.
- Buttons840 2y agoI've never heard anything about the NSA telling a company they have a security vulnerability. Have you?
- orr94 2y agoNot the NSA, but I know of at least one time the FBI did: https://arstechnica.com/security/2024/01/chinese-malware-removed-from-soho-routers-after-fbi-issues-covert-commands/ https://arstechnica.com/security/2024/01/chinese-malware-rem...
- rho138 2y agohttps://www.cbsnews.com/news/nsa-microsoft-vulnerabilities-microsoft-exchange-email-app/ https://www.cbsnews.com/news/nsa-microsoft-vulnerabilities-m...
- bb88 2y agoThat was probably because the NSA and other critical government agencies use Microsoft Exchange and it was a bug found in the wild. But if it wasn't a bug found in the wild, can you imagine the fights between the NSA red and blue teams on whether to alert Microsoft about it?
- deleted 2y ago[deleted]
- rho138 2y agoProbably not a lot at all tbf
- kyboren 2y agoI don't have citations on hand, but it's commonly held that NSA fixed the S-boxes in IBM's "Lucifer" cipher design for DES to improve its resistance to (then publicly-unknown) differential cryptanalysis. Of course they also crippled the key length to 56 bits...
- zavec 2y agoThey absolutely have bugs up their sleeve, but if they tell the companies to allow them to fix them then they can't use the bugs for spying (or at least, not as effectively)