Group Actions
Engagement
  • Author Author: Catwell
  • Date Created: Date Created
  • Views 3823 views
  • Likes 2 likes
  • Comments 13 comments
Related
Recommended

Support for end-to-end encryption grows; regulations for hacking software at a stand stil

Catwell

image

Even security officials aren't happy with the way cyberattacks are handled. Three former security officials support end-to-end encryption; regulations for hacking software will be redrafted. (image NSA HQ!)

 

Every week, a new cyber attack or wave of hacking scandals. Ashley Madison scandal, anyone? Though everyone from the government to professional hackers are trying to come up with new ways to prevent these attacks, there hasn't been one happy solution. A lot of issues stem from encryption keys and who can get their hands on them. Now, three former US national security officials have spoken out about why end-to-end encryption is the way to go.

 

Mike McConnell, a former director of the National Security Agency and director of national intelligence, Michael Chertoff, former homeland security secretary, and William Lynn, a former deputy defense secretary, argued that more US technology companies should be using end-to-end encryption of data so only the sender and the intended recipient have the decryption keys. This way the plain text of messages will not be available to companies offering products and services to the government. The trio doesn't believe the government should have “backdoor access” or duplicate decryption keys saying it only increases the risk of cyberattack. Currently, the argument for backdoor access is it allows the government to catch criminals communicating online, but three argue against this saying “This could lead to a perverse outcome in which law-abiding organizations and individuals lack protected communications but malicious actors have them.”

 

Is this the best solution to security? Not all attempts to regulate cyberattacks are well thought out. Recently, it was revealed that the US government will re-write regulations to restrict the export of software used to break into computers and smartphones. A draft of these regulations was published back in May and stated how the Department of Commerce wanted to restrict the development and testing of exploits, zero-days, and other invasion software. But after it was posted it soon received many comments and complaints, many of them from  security professionals who learned it would severely limit and may even criminalize research into surveillance software. Even those who supported the initial idea criticized the draft for being too clumsy and confusing. Google even called the rules “dangerously broad and vague.”

 

Some draft of the regulation is needed for the latest iteration of the Wassenaar agreement among 41 countries, which limits the shipping of “dual-use” technologies used for peaceful and military purposes. Despite all the negative feedback the Commerce Department took in stride and assured that “All of those comments will be carefully reviewed and distilled, and the authorities will determine how the regulations should be changed. A second iteration of this regulation will be promulgated, and you can infer from that that the first one will be withdrawn.” As of right now with the various data breaches and hacking schemes, it looks kind of bleak when it comes to preventing cyberattacks.

 

C

See more news at:

http://twitter.com/Cabe_Atwell

Parents

  • It is very unfortunate that acceptable encryption was not part of the initial net requirements.

     

    I hate to think about the millions of hours that have been lost to hacking, scamming, spam and all of the other useless network issues we face everyday.

     

    I am at a total loss, everyone in the industry knows how we can solve this problem, but nobody wants to take the blame or limit access to make it happen.

     

    DAB

  • in reply to DAB

    The internet started as a set of four universities sharing links and grew from there. It was never meant for today's usage! In fact universities have gone to internet 2. image

    C

  • in reply to clem57

    Hi Clem, im not sure your completly correct on that

     

    Some labs across the world sarted a network to share resources, the US military funded and initiated the first "Internet" called Arpanet which then quickly grew into the Internet

     

    this is a quite from Wikipedia

    The US Department of Defense awarded contracts as early as the 1960s for packet network systems, including the development of the ARPANET (which would become the first network to use the Internet Protocol.)

    the full description can be found here: https://en.wikipedia.org/wiki/History_of_the_Internet which seems to be fairly accurate from what I remember


    When you refer to Internet 2. Are you really refering to https://en.wikipedia.org/wiki/Internet2 or IPV6 which extends the addressing range massivly. The Internet2 seems to be more about a massive increase in speed compared to the current Internet that the public uses but still based on the same protocols etc and the rate commercial and domestic bandwidth is growing, it will soon be up to that same speeds?


    dont get me wrong though, Internet2 looks like a great thing

Comment
  • in reply to clem57

    Hi Clem, im not sure your completly correct on that

     

    Some labs across the world sarted a network to share resources, the US military funded and initiated the first "Internet" called Arpanet which then quickly grew into the Internet

     

    this is a quite from Wikipedia

    The US Department of Defense awarded contracts as early as the 1960s for packet network systems, including the development of the ARPANET (which would become the first network to use the Internet Protocol.)

    the full description can be found here: https://en.wikipedia.org/wiki/History_of_the_Internet which seems to be fairly accurate from what I remember


    When you refer to Internet 2. Are you really refering to https://en.wikipedia.org/wiki/Internet2 or IPV6 which extends the addressing range massivly. The Internet2 seems to be more about a massive increase in speed compared to the current Internet that the public uses but still based on the same protocols etc and the rate commercial and domestic bandwidth is growing, it will soon be up to that same speeds?


    dont get me wrong though, Internet2 looks like a great thing

Children