please tell me this is some attempt at sarcasm, and you aren't actually that ignorant?
Many states (such as the one I reside in) specifically ban the registration of firearms in their state constitution.
Welcome to the self-hatred that is working in the infosec business - any illusions we held about trying to improve the state of things for the greater good fell away many years ago when people started realizing that there was no profit in working towards making ourselves obsolete - casualties be damned. When it comes to computers, you're either responsible for your own OPSEC 24/7, or you accept that your systems will be interfered with in perpetuity. Nobody is looking out for you, least of all the infosec business.
certainly, if a government does it, it's not unlawful... and there's the rub. If interference and espionage with another nation's information systems are acts of aggression, will be ever see some updating of geneva/hague convention notions towards this? They both mention spies, but largely in the protection and treatment of them in habeus corpus situations... Do we even need such an updating? there is plenty of material on the legality of peacetime espionage, yet the sabotage issue remains murky as ever.
no, it was referencing the irony of something. You really aren't very good at this comprehension thing are you, so I think I'll take my leave of this thread now and give you some space for you and your bugbears to spend some time alone.
yet you remain blissfully unaware of my using it as a mechanism of irony to illustrate that if people are going to insist upon the term cyber -*war*, that perhaps some of the same perceptions and controls should apply to it equally? At least my brand of pedantry doesn't cause me to lose sight of the entire discussion as I crawl up my own asshole in sophistry.
Tl:Dr - "Whoosh!"
If these developers are so good at consciously creating vulns, you'd think they'd be better at NOT creating them too, now wouldn't you? After all, software shouldn't require
Reality does not support your hypothesis here I'm afraid, I think your tinfoil hat might have been backdoored...
Sad I blew mod points to comment on this article, but this reply deserves modding up. Your point about the redundancy of the term 'ethical hacker' is something I wrote about on Bloomberg last year (and was promptly libeled by Richard Stiennon in his column a day later)..
Because it is the common term used to paint the broader picture here (and the source of much debate in my circles). I used it so people would know what I'm talking about - it's this thing called a framing device. I brought it up first because that the is the larger context of the topic discussed in this article. Is the written word a second language for you or something? If you don't understand this, you're not the demographic I'm speaking to anyway and are still probably happily ignorant of the whole issue; for your own sanity, I'd probably keep it that way.
good point, I concur that laws are full of gotchas, and I was using ITAR as an example that a precedent has already been set once, not that ITAR is the hammer that should be used this time around...
There is no disclosure to these vulns, disclosing them would remove the value in them. These orgs aren't paying big money for vulns to have them
you can't sell something for profit that will be used in hostile actions, if you've already disclosed the information in public, now can you? The issue is profiteering from things that will
...yes, that would absolutely solve the matter, because never in the history of the world have people managed to obtain software and source code that did not belong to us! "Sorry, you can't analyze our software for vulns, because we're not going to give you a license for it!". Brilliant
nobdy else is using them? peered out from under that rock recently? Unless you're saying within this article in particular... in which case you're also blind if you don't realize it's part of the larger context. either way, I don't care, you probably don't work in infosec and have to get bombarded with cyberwar hype every 6 hours, and your comment makes very little sense no matter how much I strain to understand your perception of the matter.
....when do we start treating these folks like arms dealers? It's not a stretch, ITAR classified cryptography as munitions....
(* cyber 'war' is a ridiculous term for something we already have words for - espionage and sabotage, both of which have been achieved using only information, for centuries now).
Female executives for a company that just happens to be in tech, doesn't count to women in tech, just women in business.
The solution of this problem is trivial and is left as an exercise for the reader.
