<story><title>We may have witnessed a NSA &quot;Shotgiant&quot; TAO-like action</title><url>http://blog.erratasec.com/2014/03/we-may-have-witnessed-nsa-shotgiant-tao.html</url></story><parent_chain><item><author>paul</author><text>Where there are security vulnerabilities, I&amp;#x27;d rather it be the NSA exploiting them than someone else. The fact that Huawei support engineers have so much power is much more troubling.</text></item></parent_chain><comment><author>tptacek</author><text>This is so obviously true that I found the tone of the post confusing. It&amp;#x27;s similar to people&amp;#x27;s reaction to the comparative threat of keeping their email on Google Mail or some random webmail provider that&amp;#x27;s likely to lose their mail spool to SQL injection. I&amp;#x27;m not arguing that the NSA threat isn&amp;#x27;t worrisome; it is. But other threats are in fact even worse!</text></comment>
<story><title>We may have witnessed a NSA &quot;Shotgiant&quot; TAO-like action</title><url>http://blog.erratasec.com/2014/03/we-may-have-witnessed-nsa-shotgiant-tao.html</url></story><parent_chain><item><author>paul</author><text>Where there are security vulnerabilities, I&amp;#x27;d rather it be the NSA exploiting them than someone else. The fact that Huawei support engineers have so much power is much more troubling.</text></item></parent_chain><comment><author>Nacraile</author><text>I think it&amp;#x27;s naive to assume that the NSA is the only entity that is likely to be able to exploit vulnerabilities.  This is the crux of the controversy around NSA&amp;#x27;s attacks on web security.&lt;p&gt;I only see a difference between an opaque, unaccountable organization in the USA and an opaque, unaccountable organization in China when I look through a nationalistic lens.</text></comment>