> The fourth was a decision at the National Security Agency to focus not on making computer networks more secure through defensive strategies, but to focus on offensive capabilities. The NSA wanted to be able to hack our enemies when they use our own software, and that meant keeping our software shitty. Essentially the shadow regulator of software security became our spies, and they regulated to ensure there would be more vulnerabilities, not fewer.<p>What's the best evidence for this? Particularly of "a decision" and "they regulated" -- beyond the hoarding of zero-day vulnerabilities mentioned later.