Conversation

Notices

1. Rysiekúr Memesson (rysiek@mastodon.social)'s status on Friday, 15-Jun-2018 14:42:58 EDT Rysiekúr Memesson

   So, just listened to the newest episode of the #DefensiveSecurity podcast.

   One of the topics touched on was WannaCry/NotPetia - it's been over a year since they hit, and @jerry made some good points about why these infections keep happening (have a listen, worth it!).

   But one thing I felt was sorely missing: the way three-letter-agencies basically made us all less secure. EternalBlue, after all, was #NSA's tool that got leaked.

   US CERT budget: ~$93mln
   NSA official budget: ~$10bln

   #Infosec

   1. Rysiekúr Memesson (rysiek@mastodon.social)'s status on Friday, 15-Jun-2018 14:46:46 EDT Rysiekúr Memesson

      in reply to

      These numbers are insane. It should be the other way around!

      I firmly believe we need to start calling NSAs and GCHQs of this world out on their bullshit. If you have ~$10bln annual budget and you leak a weaponized exploit, which then gets used in *malware*, you should be liable for damages.

      WannaCry alone caused estimated $4bn of damage. Why should the victims pay for it?

      #infosec