Stories
Slash Boxes
Comments

SoylentNews is people

posted by LaminatorX on Friday December 05 2014, @11:57AM   Printer-friendly
from the series-of-tubes dept.

Hot on the heels of the latest Sony hack, the seemingly-dormant National Cybersecurity and Critical Infrastructure Protection Act passed by the House is expecting movement within the Senate.

If passed, the bill would allow private companies to share cybersecurity data with the Department of Homeland Security. The bill also outlines Homeland Security’s role in American cybersecurity and would reauthorize the department’s authorities.

The bill would also give legal protection to private companies that share information with the federal government. All government agencies would also be required to tell Homeland Security about any cyberattack.

What would constitute a "cyberattack" from a corporation's perspective? To paraphrase Rahm Emanuel, "Never let a serious crisis go to waste."

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Friday December 05 2014, @12:01PM

    by Anonymous Coward on Friday December 05 2014, @12:01PM (#122894)

    First rule of tabloid journalism. Never let a story run unbiased!

    • (Score: 4, Insightful) by The Mighty Buzzard on Friday December 05 2014, @12:18PM

      by The Mighty Buzzard (18) Subscriber Badge <themightybuzzard@proton.me> on Friday December 05 2014, @12:18PM (#122901) Homepage Journal

      Silly AC, that was about as neutrally-worded as I've seen any coverage of the bill to date. MSM are cheerleaders for it and those in the tech sector generally want it killed with fire.

      --
      My rights don't end where your fear begins.
      • (Score: 0) by Anonymous Coward on Friday December 05 2014, @12:35PM

        by Anonymous Coward on Friday December 05 2014, @12:35PM (#122903)

        What constitutes neutrality from an Uncle Tom Soyer's perspective? Every corporation is evil incarnate, except The Soylent Corporation.

      • (Score: 0) by Anonymous Coward on Friday December 05 2014, @12:41PM

        by Anonymous Coward on Friday December 05 2014, @12:41PM (#122905)

        Mod up, mod up, Buzzard's mighty insightful cock isn't stiff enough yet. Show those ACs who's really in charge of this heap of shit.

      • (Score: 2) by Thexalon on Friday December 05 2014, @04:38PM

        by Thexalon (636) Subscriber Badge on Friday December 05 2014, @04:38PM (#122959)

        When you say "those in the tech sector", are you referring to:
        - management of cyber-security businesses who stand to gain customers by this?
        - academic and professional security experts who might well disdain attempts to hide breaches rather than fix the problem?
        - CTOs and other IT executives of big corporations whose systems have more holes than a cheese grater and fear getting caught?
        - polled programmers and admins and QA analysts, who might either get a bunch of jobs fixing the problem or might lose a bunch of jobs for causing it?
        - software vendors like Microsoft, Google, and Oracle, who might stand to gain if this forces people to upgrade their software?

        I could keep going, but I doubt the "tech sector" is a homogenous group on this issue with so many interests tugging both ways.

        --
        The only thing that stops a bad guy with a compiler is a good guy with a compiler.
  • (Score: 0) by Anonymous Coward on Friday December 05 2014, @12:06PM

    by Anonymous Coward on Friday December 05 2014, @12:06PM (#122896)
  • (Score: 0) by Anonymous Coward on Friday December 05 2014, @01:49PM

    by Anonymous Coward on Friday December 05 2014, @01:49PM (#122910)

    Yeah, like I wanna do that.

  • (Score: 2) by Open4D on Friday December 05 2014, @02:11PM

    by Open4D (371) on Friday December 05 2014, @02:11PM (#122917) Journal

    All government agencies would also be required to tell Homeland Security about any cyberattack.

    I'm in favour of mandatory reporting of this kind of thing, though I'm thinking more along the lines of corporations rather than government agencies. (With the latter, I would have hoped that a law wouldn't be neccessary.)

    • (Score: 1) by SecurityGuy on Friday December 05 2014, @03:02PM

      by SecurityGuy (1453) on Friday December 05 2014, @03:02PM (#122932)

      Be careful to define "cyberattack", though, or you'll have legions of people spending hours filling out paperwork about every script kiddie port scan.

      • (Score: 2) by Leebert on Saturday December 06 2014, @12:10AM

        by Leebert (3511) on Saturday December 06 2014, @12:10AM (#123057)

        If you think that's funny and not sad, you clearly don't work in government infosec. Because I've seen exactly that.

        • (Score: 1) by SecurityGuy on Tuesday December 09 2014, @05:39PM

          by SecurityGuy (1453) on Tuesday December 09 2014, @05:39PM (#124285)

          You might note that nowhere did I say it was funny. I wasn't kidding.

  • (Score: 5, Insightful) by Nerdfest on Friday December 05 2014, @03:53PM

    by Nerdfest (80) on Friday December 05 2014, @03:53PM (#122946)

    he bill would also give legal protection to private companies that share information with the federal government

    This is the part that would worry me. Companies should be forbidden by law from sharing customer information with the government without receiving a warrant.

  • (Score: 0) by Anonymous Coward on Friday December 05 2014, @06:33PM

    by Anonymous Coward on Friday December 05 2014, @06:33PM (#122988)

    Que in the Dog.

    We can now have him run a new Cyber Security company and start to bash heads.
    Might run for a couple of seasons at least.

    • (Score: 0) by Anonymous Coward on Friday December 05 2014, @07:34PM

      by Anonymous Coward on Friday December 05 2014, @07:34PM (#123004)

      i know you're joking but that is a very good point about the actual danger here, because private sec like private military don't really have to follow the same rules as the gov sector.