This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at http://www.guardian.co.uk/technology/2013/feb/13/obama-cybersecurity-executive-order
The article has changed 3 times. There is an RSS feed of changes available.
Version 1 | Version 2 |
---|---|
Obama cybersecurity order welcomed as step forward by internet activists | Obama cybersecurity order welcomed as step forward by internet activists |
(7 months later) | |
President Barack Obama introduced a cybersecurity executive order in his state of the union address that offered a broad outline of how the government plans to deal with cyber threats. | President Barack Obama introduced a cybersecurity executive order in his state of the union address that offered a broad outline of how the government plans to deal with cyber threats. |
The eight-page document outlines a process that allows government agencies to work with private industry to combat cyber threats, while seemingly addressing concerns of citizen privacy. Past legislative attempts at cybersecurity have been criticized by groups who believe bills like Cispa violate privacy by allowing information-sharing between private industry and the government. | The eight-page document outlines a process that allows government agencies to work with private industry to combat cyber threats, while seemingly addressing concerns of citizen privacy. Past legislative attempts at cybersecurity have been criticized by groups who believe bills like Cispa violate privacy by allowing information-sharing between private industry and the government. |
Gregg Housh, an internet activist associated with the hacking collective Anonymous, told the Guardian that while the executive order is broad, "of everything we've seen so far, this is about the best we could hope for". | Gregg Housh, an internet activist associated with the hacking collective Anonymous, told the Guardian that while the executive order is broad, "of everything we've seen so far, this is about the best we could hope for". |
In the next four months, the attorney general, the secretary of homeland security and the director of national intelligence will start looking at specific ways to improve cybersecurity. The government is due to produce a preliminary cybersecurity framework draft later this year and have a final version ready a year from 12 February. | In the next four months, the attorney general, the secretary of homeland security and the director of national intelligence will start looking at specific ways to improve cybersecurity. The government is due to produce a preliminary cybersecurity framework draft later this year and have a final version ready a year from 12 February. |
"The biggest and most important thing to me right now is that while we have a basic framework here, and some of it is surprisingly positive looking, we don't know exactly what this is going to end up being," Housh said. | "The biggest and most important thing to me right now is that while we have a basic framework here, and some of it is surprisingly positive looking, we don't know exactly what this is going to end up being," Housh said. |
One thing Housh is concerned about is the way the government aims to protect citizen privacy and civil liberties. The order says the Department of Homeland Security is set to provide recommendations for how to minimize and mitigate privacy and civil liberties risks in a public report to be released February of next year. | One thing Housh is concerned about is the way the government aims to protect citizen privacy and civil liberties. The order says the Department of Homeland Security is set to provide recommendations for how to minimize and mitigate privacy and civil liberties risks in a public report to be released February of next year. |
"The very idea that the DHS will be policing itself is the thing that frightens me the most," Housh said. "The people who were tasked with actually protecting the privacy and civil liberties are the people who work for the DHS. It seems counter-intuitive to me that they are allowed to police themselves." | "The very idea that the DHS will be policing itself is the thing that frightens me the most," Housh said. "The people who were tasked with actually protecting the privacy and civil liberties are the people who work for the DHS. It seems counter-intuitive to me that they are allowed to police themselves." |
Housh has been following Anonymous since 2006, and was involved in their campaign against Scientology, though he says he has never taken part in any of their illegal acts. He called the government's tactics for dealing with the hacking collective and other other online hacktivists as "old-school". | Housh has been following Anonymous since 2006, and was involved in their campaign against Scientology, though he says he has never taken part in any of their illegal acts. He called the government's tactics for dealing with the hacking collective and other other online hacktivists as "old-school". |
"It seems no matter how many people they put behind bars, no matter how many people they arrest and ban from computers, somehow, government websites, the Fed and everything else are perfectly free game for people like Anonymous," Housh said. "So the very idea that you can take down a few people, scare everyone away, and that you've got the only really talented people is ludicrous. It's proven to be ludicrous." | "It seems no matter how many people they put behind bars, no matter how many people they arrest and ban from computers, somehow, government websites, the Fed and everything else are perfectly free game for people like Anonymous," Housh said. "So the very idea that you can take down a few people, scare everyone away, and that you've got the only really talented people is ludicrous. It's proven to be ludicrous." |
He said that form of dealing with hacking "is only pissing off more people and making more people want to join up". | He said that form of dealing with hacking "is only pissing off more people and making more people want to join up". |
Housh does think the executive order is an improvement on previous cybersecurity legislation, though. | Housh does think the executive order is an improvement on previous cybersecurity legislation, though. |
"Unlike Cispa, this is going to not give these people immunity for sharing tons and tons of information with the government, and I think that is one key difference," Housh said. | "Unlike Cispa, this is going to not give these people immunity for sharing tons and tons of information with the government, and I think that is one key difference," Housh said. |
His statement echoes those of other open-internet advocates, including the ACLU and Electronic Frontier Foundation, who are happy with the broad order because of how it addresses civilian privacy. | His statement echoes those of other open-internet advocates, including the ACLU and Electronic Frontier Foundation, who are happy with the broad order because of how it addresses civilian privacy. |
Michelle Richardson, a legislative counsel for the ACLU, said she hopes the order can fend off legislation like Cispa. "With all of the horrible things out there, we're really glad that they are focusing on those sort of programs instead." | Michelle Richardson, a legislative counsel for the ACLU, said she hopes the order can fend off legislation like Cispa. "With all of the horrible things out there, we're really glad that they are focusing on those sort of programs instead." |
Richardson called the order privacy neutral because it sets up the processes for the government to work with critical infrastructure to determine cybersecurity standards at a later date. | Richardson called the order privacy neutral because it sets up the processes for the government to work with critical infrastructure to determine cybersecurity standards at a later date. |
"The good news is: it really encourages information-sharing from the privacy-sharing from the government to the private sector, instead of the opposite direction, which is the scary part," Richardson said. "It's more problematic when it's about companies turning over their customers' records." | "The good news is: it really encourages information-sharing from the privacy-sharing from the government to the private sector, instead of the opposite direction, which is the scary part," Richardson said. "It's more problematic when it's about companies turning over their customers' records." |
The order does make room for the government to temporarily hire private-sector cyber threat experts to provide information to critical infrastructure owners on how to reduce and mitigate threats. | The order does make room for the government to temporarily hire private-sector cyber threat experts to provide information to critical infrastructure owners on how to reduce and mitigate threats. |
Amy Mushahwar, a counsel at Ballard Spahr with more than 15 years experience in cybersecurity, said that by calling for legislation, Obama displayed his recognition of industry's desire to have research and development and liability protection included. | Amy Mushahwar, a counsel at Ballard Spahr with more than 15 years experience in cybersecurity, said that by calling for legislation, Obama displayed his recognition of industry's desire to have research and development and liability protection included. |
"The executive branch anticipates that without some sort of liability protection, one-way information sharing is all you can expect from industry, until we do something about the potential liability of companies if they share cyber threats," Mushahwar said. | "The executive branch anticipates that without some sort of liability protection, one-way information sharing is all you can expect from industry, until we do something about the potential liability of companies if they share cyber threats," Mushahwar said. |
Our editors' picks for the day's top news and commentary delivered to your inbox each morning. |