In January 2021, a debate had coursed through the infosec community regarding Google’s TAG and P0 decision to publish a report on what they suspected could be a western antiterrorism operation. While there were dissenting voices back then, it seemed like there was a degree of industry consensus that Google’s decision was the correct one. Fast forward to June 24, 2024: Michael Coppola releases a blog post firmly in favor of not disclosing such cyberattacks, which I encourage reading. This is as good an occasion as any to lay down my thoughts on the subject.
