Archive of posts tagged: Policy
HARDWARE 0-DAYS: PUBLISH, SELL OR HOARD? (PART II)
What should governments do when they discover a hardware 0-day? In the US, as a matter of policy, any vulnerability that is deemed to affect critical infrastructure is disclosed to the vendors by the government [VEP]. The government can hide vulnerabilities (and...
HARDWARE 0-DAYS: PUBLISH, SELL OR HOARD? (PART I)
[Editor’s Note: This post is the first in a series of micro-blogs over four consecutive days.] 0-day security exploits are attacks that use vulnerabilities that are unknown to a vendor. They are referred to as 0-days because the vendor knows about them for zero...Subscribe
