Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

I don't understand why there are so many comments saying that the NSA needs offensive digital capabilities. What valid reasons does the NSA have to ever be committing a cyber attack?


The obvious one: war with another nation.

Along with threat deterrent.

I can't think of any good argument for why the US military should have no offensive capabilities in the digital realm. It'd be the equivalent of staying out of the skies when flight became possible.

In any war, the US is going to come under digital attack, and it should be fully capable of responding both defensively and offensively. Besides that, shutting down the power grid of a country you're at war with via digital means, sure beats doing it with hundreds of missiles.


But by stockpiling vulnerabilities they are making civilians less safe. Offensive digital capabilities should never come at the expense of fixing software.


I ended up rescuing & then adopting a German Shepherd 18 months ago, without having planned such a thing. These days I don't even bother to read the the scarevertising from burglar alarm suppliers that turns up in the mailbox every month or two. I don't want to barricade myself into my own home or have some corporation constantly surveilling it for me. While it's far from an exact analogy, I actually feel quite a bit safer with an active deterrent than I did previously.


What is the "active deterrent" analogy in computer security that makes it worth leaving vast numbers of civilian computer systems vulnerable to stockpiled 0-days, engineered backdoors, and weaknesses surreptitiously introduced into standards?


Bombs under your neighbor's porches, according to this sister comment - more seriously, the offensive capabilities outlined in the original article. I think both of you are taking an over-literal reading of my comment despite the qualification therein.


Bombs under your neighbor's porches, according to this sister comment - more seriously, the offensive capabilities outlined in the original article. I think both of you are taking an over-literal reading of my comment.


That's a great and well-reasoned argument that is clearly relevant to the current scenario.

Oh, wait, no, it's not. Your German Shepherd isn't planting bombs underneath the neighbours' porches in case they decide to rob your house.


Well, the comment you responded to said they need offensive capabilities because they have/need defensive capabilities.

It seems like a bit of a self-fulfilling prophecy to me, which can be a very dangerous thing.

Vulnerabilities should be searched for, but when discovered they need to be disclosed and fixed, not used to create real world damage.


Possibly they're operating on the assumption that "cyber war" works like nuclear war and the most effective deterrent is the threat of retaliation.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: