5 ms·

Did Bruce Schneier call for regulations that should prevent ddos attacks? What kind of regulation/law does he propose? In other articles Schneier called to sol

Did Bruce Schneier call for regulations that should prevent ddos attacks? What kind of regulation/law does he propose? In other articles Schneier called to solve other problems by regulation - for example to limit data retention by internet companies. are laws the answer? Is these no way to solve security related problems be better technology? Will microkernel os solve embeded device security or will it be regulation?

porkloin 10y ago
Correct me if I'm wrong, but I believe he's calling for a specific organ of government to take on regulation of the internet and connected devices in a general sense, not calling for some specific regulation or law. I suspect what he's getting at is having some set of "safety standards" to be put in place, especially for IoT tech. The whole quote of >Our computers are secure for a bunch of reasons. The engineers at Google, Apple, Microsoft spent a lot of time on this. But that doesn’t happen for these cheaper devices. … These devices are a lower price margin, they’re offshore, there’s no teams. And a lot of them cannot be patched. sums up that point pretty well. I honestly don't know how you would really enforce something like this, but the proposal seems to be less about the specifics of regulation and more about the need for new regulation. The FCC really isn't equipped to handle this kind of thing.
- MichaelMoser123 10y ago
  % honestly don't know how you would really enforce something like this Probably like with automotive code - they don't have code audits but have mandated test scenarios. The problem is that you need large organizations to work these out i guess Schneier has a point, if consumers do not demand secure systems then it can only be done through regulation. that would be a very German approach - they have strong consumer advocacy organisations like Stiftung Warentest and the Adac, these then push for more consumer protecting regulation. [1] Once upon a time these requirements were also used as protectionist barriers. In our days that would mean: you did not bother to update your toolchain and have no firmware updates for this smart light bulb of yours? gone is your import license. [1] http://americastradepolicy.com/german-customer-protection-or-protectionism/#.WDaqd7J96M8 http://americastradepolicy.com/german-customer-protection-or...

porkloin 10y ago

Correct me if I'm wrong, but I believe he's calling for a specific organ of government to take on regulation of the internet and connected devices in a general sense, not calling for some specific regulation or law. I suspect what he's getting at is having some set of "safety standards" to be put in place, especially for IoT tech. The whole quote of >Our computers are secure for a bunch of reasons. The engineers at Google, Apple, Microsoft spent a lot of time on this. But that doesn’t happen for these cheaper devices. … These devices are a lower price margin, they’re offshore, there’s no teams. And a lot of them cannot be patched. sums up that point pretty well. I honestly don't know how you would really enforce something like this, but the proposal seems to be less about the specifics of regulation and more about the need for new regulation. The FCC really isn't equipped to handle this kind of thing.

MichaelMoser123 10y ago
% honestly don't know how you would really enforce something like this Probably like with automotive code - they don't have code audits but have mandated test scenarios. The problem is that you need large organizations to work these out i guess Schneier has a point, if consumers do not demand secure systems then it can only be done through regulation. that would be a very German approach - they have strong consumer advocacy organisations like Stiftung Warentest and the Adac, these then push for more consumer protecting regulation. [1] Once upon a time these requirements were also used as protectionist barriers. In our days that would mean: you did not bother to update your toolchain and have no firmware updates for this smart light bulb of yours? gone is your import license. [1] http://americastradepolicy.com/german-customer-protection-or-protectionism/#.WDaqd7J96M8 http://americastradepolicy.com/german-customer-protection-or...