If an intrusion campaign is discovered and detected by a security vendor, is withholding a posthumous publication preventing others to defend? Is that just competive advantage or turning “proprietary” some information that should really be available to the entire community?
-
-
These are tough questions. I think governmental CERTs should be accountable for "public safety", not the private companies that mostly do this for PR.
-
Don’t you think that governmental CERTs would rather reinforce more secrecy in order to maintain an intelligence advantage over (and at the cost of) other nations?
-
Depends on "who" is running the CERT. For instance, in France the national CERT is not run by an intelligence agency and doesn't have any ties to it. But I get that may be an issue in other countries (like the UK, NCSC part of the GCHQ, which raises a few questions)
-
Would be interesting to see governmental CERTs burn foreign operations irrespective of alliances and economic interests. Would that really work?
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.