This Is How They Tell Me the World Ends
The Cyberweapons Arms Race
Ratings23
Average rating4.1
15
The Cyberweapons Arms Race
Ratings23
Average rating4.1
THE NEW YORK TIMES BESTSELLER WINNER of the 2021 Financial Times & McKinsey Business Book of the Year Award “Part John le Carré and more parts Michael Crichton . . . spellbinding.” The New Yorker "Written in the hot, propulsive prose of a spy thriller" (The New York Times), the untold story of the cyberweapons market—the most secretive, government-backed market on earth—and a terrifying first look at a new kind of global warfare. Zero day: a software bug that allows a hacker to break into your devices and move around undetected. One of the most coveted tools in a spy's arsenal, a zero day has the power to silently spy on your iPhone, dismantle the safety controls at a chemical plant, alter an election, and shut down the electric grid (just ask Ukraine). For decades, under cover of classification levels and non-disclosure agreements, the United States government became the world’s dominant hoarder of zero days. U.S. government agents paid top dollar—first thousands, and later millions of dollars— to hackers willing to sell their lock-picking code and their silence. Then the United States lost control of its hoard and the market. Now those zero days are in the hands of hostile nations and mercenaries who do not care if your vote goes missing, your clean water is contaminated, or our nuclear plants melt down. Filled with spies, hackers, arms dealers, and a few unsung heroes, written like a thriller and a reference, This Is How They Tell Me the World Ends is an astonishing feat of journalism. Based on years of reporting and hundreds of interviews, The New York Times reporter Nicole Perlroth lifts the curtain on a market in shadow, revealing the urgent threat faced by us all if we cannot bring the global cyber arms race to heel.
Reviews with the most likes.
Reads like a thriller. Until you realize it all could be actively happening on the device you are reading the book with ;-) Yikes
Zero days in connection with state intelligence agencies is a volatile situation with no easy answers. I suspect we need to end up similar to the privacy/encryption debate. Nobody gets super-keys to encrypted data, impossible to control to only the “good guys” (also my good guy might be your bad guy). Need to do same with zero days.
This was a depressing read, even if much of it covered ground I’ve read about before.
My first impression was that barely 30 pages in, the demeaning descriptions given of stereotypical hacker appearance, mannerisms, and interests were incredibly off-putting. Perhaps she was trying to add color to the personalities, but I did not appreciate that. Fortunately it subsided the partway through the book.
My thoughts were as follows:
The potential of cyberwar - where countries turn off another country's electricity in the middle of winter, attack the internet infrastructure of hospitals to render those hospitals dysfunctional in the middle of a pandemic, break into voter registration and election count system to mess with foreign election data - is very real. All of this has already happened. Yet somehow it still feels distant, like the plot of a thriller movie. It fits in well with the threats of the [b:New Dark Age: Technology and the End of the Future 36696533 New Dark Age Technology and the End of the Future James Bridle https://i.gr-assets.com/images/S/compressed.photo.goodreads.com/books/1512132962l/36696533.SY75.jpg 58496642]: systems that are so complex that we've lost oversight. And it's not the layers of technology that are complex, it's the politics tangled up with it. A lot of this underground war of cyber criminals and cyber mercenaries is enabled and funded by governments - the US, Russia, China, Iran being the biggest players. They exploit vulnerabilities in internet software (so-called “zero-days” - called for the fact that you only learn about the vulnerability on the day it is already exploited, day zero), that they use for spy operations instead of alerting the software companies to its existence. Often they even pressure the software companies to NOT FIX THE BUG, in order to be able to keep on using it. Perlroth's book is a wakeup call for the general public. Alerting everyone not just to update their software with the latest security patches and to smarten up about phishing emails, but also to be aware that governments are putting our crucial infrastructure - our power grid, our health system, our elections - on the line, if they keep on insisting on playing the spy game. Reads like a thriller.
