- Joined
- Aug 20, 2006
- Messages
- 13,000
Its heavily redacted, but the EFF has acquired yet another document that unveils a little more about how the government manages 0-days. From what I understand, the VEP (Vulnerabilities Equities Process) is the process in which the NSA decides whether or not to reveal exploitable software flaws, with the concern being that exploits could be used beyond foreign targets and criminal suspects.