Hacker News Reader

Disclosing vulnerabilities.

They should definitely disclose vulnerabilities in American made software for SIGSEC. If it’s foreign then not disclosing it would be SIGINT

The problem with that is there's a lot of software that's American made that is also used by potential targets of SIGINT.

If the software is foreign made and used in US, americans are still vulnerable. And opensource isn't American/national