alt Hacker NewsThe CIA ran one of the world's largest cryptography companies, for DECADES[1]. Are you truly so naive that you believe intelligence agencies that have more to gain from stifling the discovery of vulnerabilities they know of and use wouldn't do so?
[1] https://www.washingtonpost.com/graphics/2020/world/national-...
Replies
meowface • today at 10:04 AM
I believe it is unlikely. (Not because I do not believe NSA is hoarding 0-days, but for many other reasons.)
I'm curious: to any professional vulnerability researchers reading this, what do you think?
➕ show 2 replies
You should probably realise that the world has radically changed since then. This kind of thing works when you have a significant lead in the field that makes keeping vulnerabilities open sufficiently low risk for your own side. But if your adversaries have similar capabilities, then the calculation changes.