Noting the “unintended but disconcerting” link between nation-state activity and criminal activity, Smith adds that governments need “to consider the damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits”. The “Digital Geneva Convention” Redmond recommends would therefore require governments “to report vulnerabilities to vendors, rather than stockpile, sell, or exploit them”.
Unintended? Not so sure about that.

