3 ms·
> I've been informed since I started reading and discussing CISPA that a primary purpose of this bill is actually the opposite of what people are worried about:
by Natsu 15y ago
> I've been informed since I started reading and discussing CISPA that a primary purpose of this bill is actually the opposite of what people are worried about: that instead of getting private companies to share with the government, CISPA exists largely to provide a legal framework for the government to share information with private companies, so that when government systems are hit with new (say) Microsoft Office malware and "spear phishing" attacks, they can notify stakeholders in private industry.
I honestly wouldn't have a problem with that (who would?), but I have to wonder exactly what sort of legal problems they were having in doing this and why they couldn't create private agreements allowing that?
- tptacek 15y agoIt's possible (I don't know) that there's no way to get sensitive information about computer network attacks out of DHS, DOJ, CIA and NSA without some kind of legislative provision, especially if the government wants to be choosy about who gets it; all this stuff covers "selective disclosure", which, like it or not, is the only kind of disclosure there is going to be for a lot of these attacks.