{"id":10617,"date":"2013-02-12T11:10:30","date_gmt":"2013-02-12T19:10:30","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=10617"},"modified":"2013-04-03T12:04:46","modified_gmt":"2013-04-03T19:04:46","slug":"cyberwarfare-is-putting-ordinary-citizens-at-risk","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/cyberwarfare-is-putting-ordinary-citizens-at-risk\/","title":{"rendered":"Cyberwarfare is Putting Ordinary Citizens at Risk"},"content":{"rendered":"

There was a recent article on NPR<\/a> about the vulnerability market that has cropped up in the last several years, where researchers can sell their findings to the highest bidder. Sometimes those bidders are governments, sometimes those bidders are cybercriminals, but there is very little way of knowing as there are no regulations.<\/p>\n

The fundamental problem here is that having an unregulated grey market for vulnerabilities is part and parcel of accepting the use of \u201ccyberweapons.\u201d By attacking other countries, we\u2019re essentially saying that this is acceptable behavior, which means that it\u2019s also okay for these other companies to attack us. And the incredibly poor state of information security readiness<\/a> of our national infrastructure could put us in a very dangerous situation sooner than later. If these sales were reported and use was licensed, it would not end sale of vulnerabilities to criminals, but it could certainly decrease them.<\/p>\n

On a mundane level it likely means you and I, as everyday users, are surfing around with holes that may already be known to criminals who are actively trying to steal our data. On a more universal level, it could mean we\u2019re open to some very real life-or-death problems.<\/p>\n

So, what can you do about it? On a certain level, surfing around with unknown holes is just a fact of life and why security people recommend layered defenses. On a political level, this article\u2019s final point is right on \u2013 regulating \u201ccyberweapons\u201d is a no-brainer and something we should request of our legislators.<\/p>\n

photo credit: 401(K) 2013<\/a> via photopin<\/a> cc<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

There was a recent article on NPR about the vulnerability market that has cropped up in the last several years, where researchers can sell their findings to the highest bidder. Sometimes those bidders are governments, sometimes those bidders are cybercriminals, but there is very little way of knowing as there are no regulations. The fundamental […]<\/p>\n","protected":false},"author":6,"featured_media":10627,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[291,293,289],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n