3 ms·
Setting aside any hatred for the government and mistrust, how does Company A share information with Company B (or the FBI) about how a hacker got into their net
by Laaw 11y ago
Setting aside any hatred for the government and mistrust, how does Company A share information with Company B (or the FBI) about how a hacker got into their networks?
Is the concern that Google is going to hand over your browser history under the guise of CISA?
- tptacek 11y agoThe law doesn't define how information is to be shared; it merely makes it lawful for the sharing to happen, so long as it meets the conditions in the statute. This is pretty typical for bills in US Federal Law: Congress enacts a relatively broad statute that establishes principles relied upon in a later "rulemaking" process; the statute will delegate to specific agencies the privilege of making those rules.
- Laaw 11y agoIf this law isn't enacted, then it will continue to be illegal for Company A to share breach details with the government, or with each other. Is this necessary to slow down the rate and severity of breaches? If so, what should this law look like?
- tptacek 11y agoI don't think the harm outweighs the limited good in this situation. I'm negative on CISA. I was neutral on CISPA, which didn't have the law enforcement investigative enhancements CISA has. But I still don't think it's a big deal either way. Like, don't donate money to prevent it from passing if this is the only donation you can make this year.
- unethical_ban 11y agoMailing lists and phone calls are a big part of it.