3 ms·

First, thanks for this post, which helped bring me down from righteous indignation to just righteous anger. However, I'd like to have a few things clarified. I'

First, thanks for this post, which helped bring me down from righteous indignation to just righteous anger. However, I'd like to have a few things clarified. I'm not worried about IP anymore, or RIAA influence on this, but I am concerned with privacy implications. You seem to claim the definition of "information" is narrow, but I would disagree given the language in the bill: > or any information stored on, processed on, or transiting such a system or network This would imply the following: a) Any system that is "attacked" (under the slightly broad definition provided) may share ALL of its data. This means everything I've done on that website, including both logs and content. Given that an entity like Facebook is "attacked" multiple times per day, now the government can obtain all of my data without a warrant. b) Any network that has been "attacked" (under broad definition) may be wiretapped without a warrant and all information transmitted to the government. What language in the bill will reasonably limit these two scenarios? Given the progress of our government in reducing individual liberty over the past 12 years, can you not see potential danger in the existing language? My warning bells are going off, because it seems like an underhanded way to strengthen provisions that allow my "secure papers" to be obtained without warrant.

tptacek 14y ago
No, I think you've misread the bill. CISPA allows for the sharing of "cyber threat information", which is defined in the "Definitions" section as: * Information * DIRECTLY PERTAINING TO (i) a vulnerability (ii) a threat to integrity, confidentiality, availability (iii) efforts to deny access, degrade, disrupt, destroy (iv) efforts to gain unauthorized access (All this subject to the "Exclusion", detailed upthread, of ToS violations).
- drharris 14y ago
  (ii) says this: a threat to the integrity, confidentiality, or availability of a system or network of a government or private entity or any information stored on, processed on, or transiting such a system or network; It's the last half of this I'm most concerned with.

tptacek 14y ago

No, I think you've misread the bill. CISPA allows for the sharing of "cyber threat information", which is defined in the "Definitions" section as: * Information * DIRECTLY PERTAINING TO (i) a vulnerability (ii) a threat to integrity, confidentiality, availability (iii) efforts to deny access, degrade, disrupt, destroy (iv) efforts to gain unauthorized access (All this subject to the "Exclusion", detailed upthread, of ToS violations).

drharris 14y ago
(ii) says this: a threat to the integrity, confidentiality, or availability of a system or network of a government or private entity or any information stored on, processed on, or transiting such a system or network; It's the last half of this I'm most concerned with.