[rlt]

> It's possible these companies are doing nefarious things. In which case create a country-agnostic legal framework and take them to court and prove your case. If it's all super-secret-spy-stuff then just do the damn parallel construction and show all these secret backdoors you claim to have found.

Are OTA software updates considered a “backdoor”? Because they essentially are one, even if the company is not doing anything nefarious yet.

[throwawaaay129]

Yeah I saw Minority Report. I know about future crime :) Now I'm imagining clones in vats at CIA headquarters telling them which companies will turn evil.

I dunno man, in the US you don't just ban people and companies for stuff they haven't yet done. Sure potential attack surfaces are important and you should think about stuff like that. But that's kinda my point.. you should make laws about that and regulate critical infrastructure. (maybe networking equipment shouldn't get OTA updates at all? Maybe that's too simplistic..）