Reply to post: Re: Flaws? Really

Amnesty International and French media protection org claim massive misuse of NSO spyware

Michael Wojcik Silver badge

Re: Flaws? Really

If you actually make a little effort to study the vulnerability discovery and development process, and the 0day market, and other aspects of this field, you'll find that there's no need to add deliberate back doors. Modern commodity computing systems are riddled with vulnerabilities which are obviously the product of the same types of development errors we've documented for decades.

In the vast majority of cases, incompetence more than adequately explains the exploitable vulnerabilities that we find.

There are some high-profile cases of backdoors, such as the whole sorry Dual_EC_DRBG saga. But for the most part the cost of getting backdoors inserted isn't justified when there are plenty of windfall vulnerabilities lying around.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2021