Reblogged by slightlyoff@toot.cafe ("Alex Russell"):
mjg59@nondeterministic.computer ("Matthew Garrett") wrote:
Reading a blog post earnestly arguing that someone discovering a vulnerability being exploited by a nominally allied government shouldn't disclose that vulnerability and my dude do you think the fucking vulnerability knows who's exploiting it and makes a careful value judgement over ensuring it's only exploited for "good" purposes?