3 ms·
Finally, law enforcement starts to enfoce the law and protect people. For some reason, the Internet (and adjacent services) is treated as a fraud free-for-all.
by wolverine876 4y ago
Finally, law enforcement starts to enfoce the law and protect people. For some reason, the Internet (and adjacent services) is treated as a fraud free-for-all.
When there's a ransomware attack or data exfiltration, nobody says, 'where's the FBI?'. We just accept that the Internet is criminal and lawless. Maybe enforcement against crypto fraud was the first step.
- kube-system 4y agoThe FBI is frequently involved in responding to ransomware and espionage attacks. https://www.fbi.gov/how-we-can-help-you/safety-resources/scams-and-safety/common-scams-and-crimes/ransomware#How-to%20Respond%20and%20Report https://www.fbi.gov/how-we-can-help-you/safety-resources/sca... For example, they counter-hacked the Hive ransomware group earlier this year. And gave the decryption keys to the victims. https://www.justice.gov/opa/pr/us-department-justice-disrupts-hive-ransomware-variant https://www.justice.gov/opa/pr/us-department-justice-disrupt...
- wolverine876 4y agoThey do take some actions, but take no responsibility for actually delivering security for the public. They try.
- kube-system 4y agoAll police services in the US are provided on a best effort basis. That’s why private security companies exist.
- wolverine876 4y agoWhat is that based on? Police have a responsibility to provide security and rule of law to residents.
- kube-system 4y agoUnder public duty doctrine, police have a responsibility to the public as a whole but not any one person in particular (unless specially arranged).
- vuln 4y ago> When there's a ransomware attack or data exfiltration, nobody says, 'where's the FBI?'. Every IRP (Incident Response Plan) that I have seen had contact information for the local FBI office and typically the names and emails of a couple of agents. While the security folks or leadership had already at least had an intro convo. Now this is typically large companies, mom and pop diner that uses a few work stations would probably call their _IT_ guy who would probably wipe and reinstall. Multiple tens of TTX (Table Top Exercises) direct and or lead the security team / participants to report to local authorities, typically FBI.
- wolverine876 4y agoI'm not saying there's no FBI involvement; I'm saying they don't delivery security and for some reason nobody expects them to do so. If there is a rash of bank robberies or terrorist activity we expect performance from the FBI. If there is rash of criminal activity on the Internet, we expect the FBI to help out but don't expect actual security. The FBI or DOJ need an electronic infrastructure enforcement division (I despise the sci-fi term 'cyber').
- vuln 4y agoHow would that work exactly? How would the FBI protect infrastructure and which infrastructure? Should it be at the ISP? Should the FBI give every business a black box and say "put this between the internet and your network, we'll monitor and defend against cyber criminals" but if the company did that they would be giving the FBI all of their inbound and outbound traffic.I guess you could use the _nothing to hide_ argument but that's ridiculous. If we put the onus of security on the FBI/Government that just means a larger government and less rights. Take the PATRIOT Act for example.