zlacker

I'm always confused when I hear this about why malware researchers don't obtain a huge trove of malware samples (and/or zero-day exploits) by obtaining some of these "gifts" and then connecting them to honeypot devices. If all you have to do to receive one is travel to China as an employee of a major U.S. company, they must be quite easy to get ahold of.

>>schoen+(OP)
I imagine the average Joe working at MSFT/AAPL/GOOG/etc. doesn't get such gifts unless they are worth hacking - in which case I imagine the gift-givers would have done their due diligence. Also corporate policies can be pretty specific and strict regarding gifts to eliminate potential conflicts of interests.

>>yazan9+Yc
Due diligence about whether the gift recipient is likely to to use it personally rather than passing it along to a malware researcher?

>>schoen+(OP)
Someone must have a lot of free time to do this instead of work.

>>schoen+(OP)
It is not a fun idea to travel to China as a malware researcher. You might get arrested for being involved in encryption at all, which to China means you were smuggling in anti-Party materials. Or, you might be arrested so you can be used as a pawn in a political game:

https://www.scmp.com/news/china/diplomacy/article/2189605/us...