I think we agree that today, you can just use 0day to achieve, more or less, everything you would want to achieve with key escrow. It would bother me if you're arguing that is acceptable, because hoarding 0day puts people at risk.
Sure, we're talking magic-wand stuff. There is a plausible mechanism to meaningfully move the market though, such as tweaking VEP or other policies. You're correct that we can't eliminate exploits, but we *can* increase scarcity.
-
-
I suppose my question is, to put it bluntly, are you willing to throw people trying to make exploitation harder under a bus to prevent key escrow?
I think some people are, which bothers me. If you're not, then we're probably on the same page (or at least the same chapter!
) -
I’m not willing to make any tradeoffs like that at all. I’m hoping that people like you will make things more secure, and along the way governments learn how to police the way they did in 1990 before smartphones.
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.