<story><title>US and UK spy agencies defeat privacy and security on the internet</title><url>http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security</url></story><parent_chain></parent_chain><comment><author>mullingitover</author><text>Recall how Huawei got raked over the coals in the US congress, and now realize that every US networking hardware company is going to get the same treatment in pretty much every country in the world they try to sell to.</text></comment>
<story><title>US and UK spy agencies defeat privacy and security on the internet</title><url>http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security</url></story><parent_chain></parent_chain><comment><author>ihsw</author><text>And yet full and anonymous disclosure[1] is eschewed for &amp;quot;responsible&amp;quot; disclosure. Hopefully we can move beyond the insane money-making scheme known as &amp;quot;whitehat&amp;quot; and &amp;quot;ethical hacking&amp;quot; security research.&lt;p&gt;The zero-day exploit market[2] deserves fair mention too, especially since a variety of three-letter agencies across the planet are some of the largest purchasers. Zero-day exploit purchases and sales haven&amp;#x27;t had any news publicity at all, even though it&amp;#x27;s effectively comparable to trafficking nuclear warheads.&lt;p&gt;Both nuclear warheads and zero-day exploits are used as leverage between competing security organizations and competing nation states, both are being stockpiled, and both are exceedingly dangerous. We&amp;#x27;re on the cusp of global network warfare and it&amp;#x27;s just starting to become clear how terrifying and widespread it is. America&amp;#x27;s rivalry with China is in over-drive now.&lt;p&gt;I&amp;#x27;m not saying that security researchers don&amp;#x27;t deserve to be paid for their work, but that we should be plain and honest about their work: it can be for the good of humanity or it can be for the destruction of humanity, there&amp;#x27;s very little inbetween.&lt;p&gt;And yet what is it for? Fighting terrorists and drug dealers, and protecting children and intellectual property?&lt;p&gt;[1] &lt;a href=&quot;http://www.schneier.com/essay-146.html&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.schneier.com&amp;#x2F;essay-146.html&lt;/a&gt;&lt;p&gt;[2] &lt;a href=&quot;https://www.eff.org/deeplinks/2012/03/zero-day-exploit-sales-should-be-key-point-cybersecurity-debate&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.eff.org&amp;#x2F;deeplinks&amp;#x2F;2012&amp;#x2F;03&amp;#x2F;zero-day-exploit-sales...&lt;/a&gt;</text></comment>