The VEP Daniel now oversaw was designed to weigh the competing interests involved in keeping Americans safe. On the one hand, retaining a zero-day vulnerability undercuts our collective cybersecurity. On the other, disclosing a zero-day so vendors can patch it undercuts intelligence agencies’ ability to conduct digital espionage, the military’s ability to carry out offensive cyberattacks, and law enforcement to investigate crimes. This calculation was far simpler back in the day when we were all using different typewriters.
