Hot on the heels of the latest Sony hack, the seemingly-dormant National Cybersecurity and Critical Infrastructure Protection Act passed by the House is expecting movement within the Senate.
If passed, the bill would allow private companies to share cybersecurity data with the Department of Homeland Security. The bill also outlines Homeland Security’s role in American cybersecurity and would reauthorize the department’s authorities.
The bill would also give legal protection to private companies that share information with the federal government. All government agencies would also be required to tell Homeland Security about any cyberattack.
What would constitute a "cyberattack" from a corporation's perspective? To paraphrase Rahm Emanuel, "Never let a serious crisis go to waste."
(Score: 0) by Anonymous Coward on Friday December 05 2014, @12:01PM
First rule of tabloid journalism. Never let a story run unbiased!
(Score: 4, Insightful) by The Mighty Buzzard on Friday December 05 2014, @12:18PM
Silly AC, that was about as neutrally-worded as I've seen any coverage of the bill to date. MSM are cheerleaders for it and those in the tech sector generally want it killed with fire.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Friday December 05 2014, @12:35PM
What constitutes neutrality from an Uncle Tom Soyer's perspective? Every corporation is evil incarnate, except The Soylent Corporation.
(Score: 0) by Anonymous Coward on Friday December 05 2014, @12:41PM
Mod up, mod up, Buzzard's mighty insightful cock isn't stiff enough yet. Show those ACs who's really in charge of this heap of shit.
(Score: 2) by The Mighty Buzzard on Friday December 05 2014, @04:32PM
How would you know? Did I leave my webcam plugged in again? Damnit!
My rights don't end where your fear begins.
(Score: 2) by Thexalon on Friday December 05 2014, @04:38PM
When you say "those in the tech sector", are you referring to:
- management of cyber-security businesses who stand to gain customers by this?
- academic and professional security experts who might well disdain attempts to hide breaches rather than fix the problem?
- CTOs and other IT executives of big corporations whose systems have more holes than a cheese grater and fear getting caught?
- polled programmers and admins and QA analysts, who might either get a bunch of jobs fixing the problem or might lose a bunch of jobs for causing it?
- software vendors like Microsoft, Google, and Oracle, who might stand to gain if this forces people to upgrade their software?
I could keep going, but I doubt the "tech sector" is a homogenous group on this issue with so many interests tugging both ways.
The only thing that stops a bad guy with a compiler is a good guy with a compiler.
(Score: 2) by The Mighty Buzzard on Friday December 05 2014, @04:44PM
Meant journalistic sites/publications that primarily cover tech-related matters.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Friday December 05 2014, @12:06PM
Phantom goose chases are no fun. Send in your real data today!
International Terrorists remove shared library dependency from FreeBSD, totally crippling Sudo! Bash shell unusable!! Accounts locked out!!! SUDO under attack from INTL terrorists!!!!!! [freebsd.org]
(Score: 0) by Anonymous Coward on Friday December 05 2014, @01:49PM
Yeah, like I wanna do that.
(Score: 2) by Open4D on Friday December 05 2014, @02:11PM
I'm in favour of mandatory reporting of this kind of thing, though I'm thinking more along the lines of corporations rather than government agencies. (With the latter, I would have hoped that a law wouldn't be neccessary.)
(Score: 1) by SecurityGuy on Friday December 05 2014, @03:02PM
Be careful to define "cyberattack", though, or you'll have legions of people spending hours filling out paperwork about every script kiddie port scan.
(Score: 2) by Leebert on Saturday December 06 2014, @12:10AM
If you think that's funny and not sad, you clearly don't work in government infosec. Because I've seen exactly that.
(Score: 1) by SecurityGuy on Tuesday December 09 2014, @05:39PM
You might note that nowhere did I say it was funny. I wasn't kidding.
(Score: 5, Insightful) by Nerdfest on Friday December 05 2014, @03:53PM
he bill would also give legal protection to private companies that share information with the federal government
This is the part that would worry me. Companies should be forbidden by law from sharing customer information with the government without receiving a warrant.
(Score: 0) by Anonymous Coward on Friday December 05 2014, @06:33PM
Que in the Dog.
We can now have him run a new Cyber Security company and start to bash heads.
Might run for a couple of seasons at least.
(Score: 0) by Anonymous Coward on Friday December 05 2014, @07:34PM
i know you're joking but that is a very good point about the actual danger here, because private sec like private military don't really have to follow the same rules as the gov sector.