6 ms·

The good or bad of this delends critically on what kind of information is being shared.

• tptacek 11y ago
  Of course, but then, the bill recognizes that up front too. Here's what the bill says you can share, lightly edited: Data about malicious reconnaissance and recon anomalies, vulnerabilities and exploit code, anomaly events that describe exploit attempts, privilege escalation attempts that bypass security features for post-auth users, malware C&C, documentation of the data exfiltrated by attackers in breaches, and, finally, anything at all related to cyber attacks iff you were already lawfully allowed to share it. That's it. https://www.govtrack.us/congress/bills/114/s754/text https://www.govtrack.us/congress/bills/114/s754/text