4 ms·

> What changed the calculus in 2023 isn’t clear. Well, the calculus didn't change in 2023 if the report was only released a month or so ago. And in fact, in Ma

> What changed the calculus in 2023 isn’t clear. Well, the calculus didn't change in 2023 if the report was only released a month or so ago. And in fact, in May 2024: DHS, CISA Announce Membership Changes to the Cyber Safety Review Board https://www.dhs.gov/archive/news/2024/05/06/dhs-cisa-announce-membership-changes-cyber-safety-review-board https://www.dhs.gov/archive/news/2024/05/06/dhs-cisa-announc... So some new people came in and decided that more public information was better. > On January 21, 2025, it was reported that the Trump administration fired all members of the CSRB. Ah, well, never mind then

deleted 2y ago
[deleted]
neuronexmachina 2y ago
Yep. From the article: > This lack of transparency could become a greater issue under the Trump administration, which has vowed to ramp up the government's cyber offensive operations, suggesting that the government demand for zero-day vulnerabilities may increase over the next four years. If this occurs, the government’s previous statements that the VEP favors disclosure and defense over withholding and offense may no longer be true. ... > “The VEP and that number of 90 percent was one of the few places where the president and the White House could set the dial on how much they liked defense vs offense,” says Jason Healey, senior research scholar at Columbia University’s School of International and Public Affairs and former senior cybersecurity strategist for CISA. “[The Trump administration] could say we’re disclosing too [many vulnerabilities]. If the default [in the past] was to disclose unless there is a reason to keep, I could easily imagine the default is going to be to keep unless there is a reason to disclose.”
dylan604 2y ago
Were these the same people that declared the 2020 election as being the safest ever? I can't imagine why that would grate Trump

deleted 2y ago

[deleted]

neuronexmachina 2y ago

Yep. From the article: > This lack of transparency could become a greater issue under the Trump administration, which has vowed to ramp up the government's cyber offensive operations, suggesting that the government demand for zero-day vulnerabilities may increase over the next four years. If this occurs, the government’s previous statements that the VEP favors disclosure and defense over withholding and offense may no longer be true. ... > “The VEP and that number of 90 percent was one of the few places where the president and the White House could set the dial on how much they liked defense vs offense,” says Jason Healey, senior research scholar at Columbia University’s School of International and Public Affairs and former senior cybersecurity strategist for CISA. “[The Trump administration] could say we’re disclosing too [many vulnerabilities]. If the default [in the past] was to disclose unless there is a reason to keep, I could easily imagine the default is going to be to keep unless there is a reason to disclose.”

dylan604 2y ago

Were these the same people that declared the 2020 election as being the safest ever? I can't imagine why that would grate Trump