This Is How They Tell Me the World Ends: The Cyberweapons Arms Race

by Nicole Perlroth

No one asked what this might one day mean for the American tech companies they were breaking into, who were now servicing more customers abroad than in the United States. During the Cold War, the NSA did not have to reckon with this dilemma: Americans spied on Russian technology, while Russians backdoored American typewriters. But that was no longer the case. The world was now using the same Microsoft operating systems, Oracle databases, Gmail, iPhones, and microprocessors to power our daily lives. Increasingly, NSA’s work was riddled with conflicts of interest and moral hazards. Nobody seemed to be asking what all this breaking and entering and digital exploitation might mean for the NSA’s sponsors—American taxpayers—who now relied on NSA-compromised technology not only for communication but for banking, commerce, transportation, and health care. And nobody apparently stopped to ask whether in their zeal to poke a hole and implant themselves in the world’s digital systems, they were rendering America’s critical infrastructure—hospitals, cities, transportation, agriculture, manufacturing, oil and gas, defense; in short, everything that undergirds our modern lives—vulnerable to foreign attacks. There are no patents on vulnerabilities, exploits, and malware. If NSA found a way to exploit a digital system, there was a good chance that one day, months or years down the road, other bad actors would discover and exploit those very same weaknesses.