Stories
Slash Boxes
Comments

SoylentNews is people

posted by n1 on Thursday May 21 2015, @06:55PM   Printer-friendly
from the what-is-this-bis dept.

The Register and Threatpost report that the U.S. Department of Commerce may enshrine the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies into law, banning the export of zero-day vulnerabilities without permission:

The Bureau of Industry and Security (BIS) proposes to implement the agreements by the Wassenaar Arrangement (WA) at the Plenary meeting in December 2013 with regard to systems, equipment or components specially designed for the generation, operation or delivery of, or communication with, intrusion software; software specially designed or modified for the development or production of such systems, equipment or components; software specially designed for the generation, operation or delivery of, or communication with, intrusion software; technology required for the development of intrusion software; Internet Protocol (IP) network communications surveillance systems or equipment and test, inspection, production equipment, specially designed components therefor, and development and production software and technology therefor.

BIS proposes a license requirement for the export, reexport, or transfer (in-country) of these cybersecurity items to all destinations, except Canada. Although these cybersecurity capabilities were not previously designated for export control, many of these items have been controlled for their "information security" functionality, including encryption and cryptanalysis.

This rule thus continues applicable Encryption Items (EI) registration and review requirements, while setting forth proposed license review policies and special submission requirements to address the new cybersecurity controls, including submission of a letter of explanation with regard to the technical capabilities of the cybersecurity items. BIS also proposes to add the definition of "intrusion software" to the definition section of the EAR pursuant to the WA 2013 agreements.

A 60-day comment period ends July 20th.

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by kaszz on Thursday May 21 2015, @11:52PM

    by kaszz (4211) on Thursday May 21 2015, @11:52PM (#186256) Journal

    What's preventing anyone from just making secret deals?

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Friday May 22 2015, @01:38PM

    by Anonymous Coward on Friday May 22 2015, @01:38PM (#186439)

    What's preventing anyone to make secret deals about anything else that's illegal, be it drug smuggling, illegal gambling, or contract killing?

  • (Score: 2) by edIII on Saturday May 23 2015, @01:31AM

    by edIII (791) on Saturday May 23 2015, @01:31AM (#186737)

    That moment when you want to go to the bank, get a home loan or other such instrument, and need to prove the source of the money?

    Some real control right there.

    Bank: You have a million dollars?
    Me: Yes. In Gold.
    Bank: Interesting. Where did you get it?
    Me: Uhhh, it's gold. Money has no pedigree last time I checked.
    Bank: Uhhh, yeah... not in the United States of America, Land of the Free, and Home of the Brave. Seriously. The government demands we know.
    Me: Uhhhhh.... I guess I have a bunch of worthless gold then if all I can say is I blew a leprechaun?
    Bank: Yep.... but do you have the number for the leprechaun?

    --
    Technically, lunchtime is at any moment. It's just a wave function.
    • (Score: 2) by kaszz on Saturday May 23 2015, @09:23AM

      by kaszz (4211) on Saturday May 23 2015, @09:23AM (#186810) Journal

      Don't use the banks? buy something outright?