Hacker News Reader

Yeah, but they don't share 0 days like this, just like the NSA doesn't.

From the article:

> Responsible disclosure

> All the two vulnerabilities we presented above are reported to Tesla in March 2019. Tesla already fixed them in version 2019.36.2, and the Marvell also has deployed a fix and published a security advisory[4] to the issue. The disclosure of the vulnerability research report had been communicated to Tesla, and Tesla is aware of our release.

Right... They shared the 0 day.

NSA and Comment Crew just sit on them like a dragon hording gold.

I believe it’s less black and white than that - all of these organizations have both offensive and defensive priorities and sometimes choose to disclose exploits publicly after calculating their remaining value. See e.g.

https://foreignpolicy.com/2017/09/25/is-the-nsa-doing-more-h...

https://www.npr.org/sections/alltechconsidered/2017/11/17/56...

Can you give an example of a recent (say last decade) exploit the NSA or PLA Unit 61398 have publicly disclosed?

In a way NSA did publicly disclosed Eternalblue.

Lol, not quite what I meant.

Reply on news.ycombinator.com