[cryptography] [info] The NSA Is Building the Country’s Biggest Spy Center (Watch What You Say)

Steven Bellovin smb at cs.columbia.edu
Sun Mar 25 18:07:37 EDT 2012

On Mar 25, 2012, at 10:43 PM, Jon Callas wrote:

> On Mar 25, 2012, at 1:22 PM, coderman wrote:
>> now they pay to side step crypto entirely:
>> iOS up to $250,000
>> Chrome or IE up to $200,000
>> Firefox or Safari up to $150,000
>> Windows up to $120,000
>> MS Word up to $100,000
>> Flash or Java up to $100,000
>> Android up to $60,000
>> OSX up to $50,000
>> via http://www.forbes.com/sites/andygreenberg/2012/03/23/shopping-for-zero-days-an-price-list-for-hackers-secret-software-exploits/
>> plenty of weak links between you and privacy...
> This is precisely the point I've made: the budget way to break crypto is to buy a zero-day. And if you're going to build a huge computer center, you'd be better off building fuzzers than key crackers.

Bingo.  To quote myself, you don't go through strong security, you go around it.

		--Steve Bellovin, https://www.cs.columbia.edu/~smb

More information about the cryptography mailing list