A couple of ways that vulnerability research is nothing like bioweapon engineering:
1. Vulnerabilities exist in software, whether a researcher uncovers them or not. America's adversaries will continue to identify and exploit these vulnerabilities. So legislation that keeps this information out of the hands of our defense/intelligence community would really only serve to weaken us relative to our enemies, rather than making us safer.
2. Die Hard movies aside, software vulnerabilities are far less likely to lead to apocalyptic outcomes than nuclear or biological weapons. Maybe a better analogy would be the open market manufacturing of surveillance technologies, like cameras and radios. Where's the outrage about telephoto lenses that camera companies make that can be used to monitor our enemies or to take pictures of your daughter in your backyard swimming pool from a half-mile away?
1. Vulnerabilities exist in software, whether a researcher uncovers them or not. America's adversaries will continue to identify and exploit these vulnerabilities. So legislation that keeps this information out of the hands of our defense/intelligence community would really only serve to weaken us relative to our enemies, rather than making us safer.
2. Die Hard movies aside, software vulnerabilities are far less likely to lead to apocalyptic outcomes than nuclear or biological weapons. Maybe a better analogy would be the open market manufacturing of surveillance technologies, like cameras and radios. Where's the outrage about telephoto lenses that camera companies make that can be used to monitor our enemies or to take pictures of your daughter in your backyard swimming pool from a half-mile away?