China's Salt Typhoon recorded top American officials' calls, says White House
theregister.com
theregister.com
Not too hard to pick up on the Vulture's underlining here: when the need for sovereign surveillance interferes with the need for foreign security
That the outcome of such efforts is published by the government impacted is interesting but that begs the question of what the actual goal of releasing the information is, right? That's the interesting bit here.
Taking into account the latest wave of hardcoded passwords in Cisco, Fortinet and Palo Alto, i don't think that was the intention.
The primary concern should be the fact that we've built infrastructure that is easily eavesdropped on by foreign adversaries. Heck, assuming these users weren't on DSN, we already have a solution: DSN. We also have mobile solutions, like asking politically vulnerable people to use Signal, or developing secure technology for these users to use.
They used unpatched exploits in EOL network gear made by linksys that were several years past their expiration date to get into this system and then moved laterally. The root cause is a lack of investment in backbone security.
I would like the actual problem be fixed instead of a scapegoat this time.