I have no idea how to parse this, but if you thought I was going to give you a list of all the CNE vendors I'm aware of on an HN thread, obviously, no. Why would you care anyways? I know enough to know that I'm speaking factually about the state of the market, but I don't work in it or interact with it in any meaningful way, so you could just as easily say "if you know about that vendor, that means they're not a SOTA CNE vendor either". You might be right!
On this leg of the thread, we're considering basically one issue: is NSO Group one of the {only,most} {important,impactful,sophisticated,whatever} CNE vendors. Is someone seriously arguing that's the case? I'd assume the idea that there are lots of vendors more impactful would be pretty banal, but maybe there really are people on this thread whose understanding of CNE comes entirely from that book linked upthread?
What is the purpose of your original comment? Do you disagree with one of the parent's assertions that (this will keep evolving) (keep getting worse) (we might as well act as if we are getting surveilled) (Too much incentive to not have adversarial actors)? It doesn't seem as if you do, yet some would interpret your tone as argumentative, or unsubstantiated alarmism
I would sum my original comment up as "NSO doesn't matter". It's an interesting CCC talk. It's worth digging into what NSO implants do. There's not much bigger-picture stuff to pull out of it.
By all means, sue them, sanction them, proscribe them, whatever it is you want to do to make NSO less profitable, I'm fine with it. But don't pretend that's solving the broad social problem of CNE operations. Everybody does it, and most people don't need NSO to do it; they have other, better vendors to work with.
It depends on where you are, but generally being a CNE vendor isn't, so long as you're not selling to criminal organizations. If you're doing enough KYC to be reasonably sure you're selling exclusively to agencies of governments your home state doesn't have export controls for, you're probably fine.
Actually conducting operations, totally different story.
On this leg of the thread, we're considering basically one issue: is NSO Group one of the {only,most} {important,impactful,sophisticated,whatever} CNE vendors. Is someone seriously arguing that's the case? I'd assume the idea that there are lots of vendors more impactful would be pretty banal, but maybe there really are people on this thread whose understanding of CNE comes entirely from that book linked upthread?