Friday, August 23, 2019

More Good Than Bad

Here's an article from Foreign Policy magazine that's better than the usual take on computer security problems. The writer commits the common error of tracing computer warfare oversight mistakes primarily to recent US Presidential administrations (when protocol vulnerabilities in TCP/IP date from about the time Stevie Wonder released "Livin' For The City" - RFC 675, Specification of Internet Transmission Control Program, December 1974). There's enough blame to go around. But what's properly covered by the article is considerable: the author points out the need for a "digital Geneva Convention" agreement so we'll have a guideline that identifies hostile action in a network context. That would help protect penetration testers and other cybersecurity researchers from unfair prosecution.

She even apparently coins a new and useful definition: "Cyberwar is the continuation of kinetic war by plausibly deniable means". Tarah Wheeler's article also confirms some of my own gripes of the past few years.

I'd prefer that it didn't.