Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

You're aware this vote was in the house, right? So you've provided exactly zero out of "many" dems who voted against this bill because they wanted to do way worse.

What's your opinion of the republicans who voted yes for this bill? It must be worse than voting no, right? Or is this just a partisan issue?

I've no doubt that there have been democrats on the wrong side of these issues at various points. Chris Dodd was a democrat. But don't tell me a "no" vote is actually worse than a "yes" vote on this bill. The only way you can contort yourself into that position is putting partisan loyalty ahead of critical thinking.



view as:

I don't understand what you're trying to say here. The Administration has publicly stated that CISPA doesn't go far enough to protect critical information systems. The Administration supported the Rockefeller Senate Cybersecurity bill; the Republicans opposed it.

I have a generally low opinion of this bill, and of the Senate Cybersecurity bill. I think what's needed is liability, not do-nothing "sharing" or top-down Raytheon audits.

You can safely assume that I've actually read the bill (what I believe to be the final version, including the Amendments that survived) before commenting on it.


I'm sure the administration, in between threats to veto CISPA, said that it was also ineffective and you could construe that to mean they really want something way more invasive than this. I wouldn't, but you could.

So if you have a low opinion of this bill, how come the only people you came into this thread cursing are the people who voted against it?

Also, you actually read the bill? How many pages was it? Did you read all of the laws it references and amends as well? You're more versed on this matter than probably 95% of the congressmen who voted on it.


Question 1: I'm not cursing the Democrats. I'm warning you: you will like their vision of how to secure "cyberspace" less than you will like CISPA. Go read the Rockefeller bill. I am not shilling for CISPA; I think CISPA is silly.

Question 2: Yes, I have read CISPA.

Question 3: CISPA is very short.

Question 4: Yes, I read all 4 of the amendments that survived the vote. CISPA doesn't specifically reference any other law, but I happen to be familiar with the ECPA and HIPAA too, for professional reasons.

I agree that I'm better versed on this matter than virtually everyone who voted for or against it, but that is faint praise indeed.


Well, I'll back off and call it a night, it was just supremely irritating, after seeing something like this passed, that the top comment on hacker news is saying the real bad guys are the ones who voted against it. I'll take you at your word that that wasn't your intention.

I feel your pain: the truth is often supremely irritating.

And the contrarian always feels wise.

The truth is that the democrats voted against this and Obama publicly threatened to veto it. But you're wise in your cynicism that "they're all the same" and this is a trick to lull us into something worse.


I don't understand why you're so eager to ignore the policy that the Obama administration supports. I am, for what it's worth, an Obama fanboy. But it does not surprise me that Constitutional scholar or not, single-payer health care supporter or not, our Administration does not know how to "secure cyberspace", and actually has terrible and counterproductive ideas on how to do it.

The White House said in the message where they signalled the veto! that part of their issue with the bill was that it didn't go far enough. Did you read that message? The whole thing? No? Why are you upset at me for reading it?


I already addressed that message. Words are cheap, especially when pre-empting the accusation of "soft on security". Votes are action.

Please don't assume that CISPA is the first time this administration has said something about cybersecurity. If you want background for what tptacek is talking about, you can start with the administration's cybersecurity legislative proposal from about this time last year.

http://www.whitehouse.gov/the-press-office/2011/05/12/fact-s...

A few select excerpts to illustrate the point:

> Organizations that suffer a cyber intrusion often ask the Federal Government for assistance with fixing the damage and for advice on building better defenses. For example, organizations sometimes ask DHS to help review their computer logs to see when a hacker broke in. However the lack of a clear statutory framework describing DHS’s authorities has sometimes slowed the ability of DHS to help the requesting organization. The Administration proposal will enable DHS to quickly help a private-sector company, state, or local government when that organization asks for its help.

Companies can share info including server logs with DHS.

> Businesses, states, and local governments sometimes identify new types of computer viruses or other cyber threats or incidents, but they are uncertain about whether they can share this information with the Federal Government. The Administration proposal makes clear that these entities can share information about cyber threats or incidents with DHS. To fully address these entities’ concerns, it provides them with immunity when sharing cybersecurity information with DHS. At the same time, the proposal mandates robust privacy oversight to ensure that the voluntarily shared information does not impinge on individual privacy and civil liberties.

Companies can share data with DHS and get immunity. Sound familiar?

> The Administration proposal requires DHS to work with industry to identify the core critical-infrastructure operators and to prioritize the most important cyber threats and vulnerabilities for those operators. Critical infrastructure operators would develop their own frameworks for addressing cyber threats. Then, each critical-infrastructure operator would have a third-party, commercial auditor assess its cybersecurity risk mitigation plans.

This is where tptacek sees (probably rightly) a giant windfall for the Raytheon type companies.


Legal | privacy