| |||||||||||||
Talk about black marketsTalk about black marketsPosted Mar 24, 2012 9:18 UTC (Sat) by man_ls (subscriber, #15091)Parent article: Security quotes of the week Selling exploits in the open, had to come sooner or later. (Shivers.) Are now "government agencies" opposed to computer security? Is this limited to US agencies, or will these vulnerabilities be available to (even) more sinister governments? Is this even legal? Whatever happens to responsible disclosure now? (This last question is purely rhetoric; I see this development as somehow opposed to full disclosure.)
(Log in to post comments)
Talk about black markets Posted Mar 28, 2012 15:30 UTC (Wed) by njwhite (subscriber, #51848) [Link]
> Is this limited to US agencies, or will these vulnerabilities be available to (even) more sinister governments?
According to the article they sell "only to NATO governments and “NATO partners.”" So then, nothing to worry about, right? Oh wait...
Talk about black markets Posted Mar 28, 2012 19:58 UTC (Wed) by man_ls (subscriber, #15091) [Link] Yes, that is reassuring. NATO members include human rights champions as Turkey, Albania or the US. As NATO partners we find right about everyone: Afghanistan, Russia, Egypt, Israel or Pakistan. Reassuring indeed!
Talk about black markets Posted Mar 29, 2012 9:11 UTC (Thu) by njwhite (subscriber, #51848) [Link]
But then it's mistaken to assume that *anybody* should have the right to break into your computer. Some governments have better publicised human rights violations than others (depending significantly on your source of news, naturally,) but ultimately none should be granted the tools to do it more efficiently.
Talk about black markets Posted Mar 29, 2012 10:51 UTC (Thu) by man_ls (subscriber, #15091) [Link] Well, your government has a right to break into your house and confiscate your computers. That is not negotiable at this point in History (and pretty much at any point). But supposedly we as citizens have certain guarantees, or least we can be aware of the risks. But having 0-day exploits for browsers means that other governments can break into computers remotely and without any due process.
Talk about black markets Posted Apr 11, 2012 12:45 UTC (Wed) by massimiliano (subscriber, #3048) [Link] Well, your government has a right to break into your house and confiscate your computers. That is not negotiable at this point in History (and pretty much at any point). This is in some way fair: sometimes breaking into somebody's house is necessary to provide security for everybody else. What's creepy about "legally" exploiting zero days exploits is that if the police breaks into my house at least I know it, I can require the police to show me why they did it, and I can arrange some kind of legal defense if I think I deserve it. If the authorities "legally" break into my computer I have no notification at all... this is what makes me feel it's "plain wrong".
Talk about black markets Posted Apr 11, 2012 20:53 UTC (Wed) by mathstuf (subscriber, #69389) [Link]
> Well, your government has a right to break into your house and confiscate your computers.
That's a power, not a right.
|
|||||||||||||