Live data from Hacker News

Senators Offer to Let NSA Hunt Cyber Actors Inside the US

defenseone.com

1–10 of 44 posts

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#3
post #2

Site not loading. Any compelling reason to divest this responsibility from the FBI? I assume weakening legal protections?

Not defending or supporting, just quoting-

> Nakasone told senators that the U.S. was unable to keep up with the threat in large part because laws prevent NSA and Cyber Command from adequately observing adversaries operating on U.S. networks. “They’re no longer just launching their attacks from different parts of the world. They understand that they come into the United States, use our infrastructure, and there’s a blind spot for us not being able to see them.”

It seems like the gist is, FBI focuses on internal only threats, NSA focuses on threats from outsiders, but if you want to track threats on a global information network properly, you need someone whose purview covers both.

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#5

Here’s a novel idea: how about the NSA used its powers to defend Americans instead of hoarding zero days and spying on them? Things like working with companies and institutions to ensure they have proper security and encryption.

That alone wouldn’t be enough; why does this have to be XOR?

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#6
The FBI has the responsibility to handle counter-intelligence domestically. At a minimum, the FBI should be the lead agency, and make the decisions, when trying to track espionage operations inside the country.

The "Five Guys" committee that President Obama authorized, reported back with findings and recommendations. One of them, which that committee felt was the most important one, was to split NSA and US Cyber Command apart. They felt it was dangerous to have one person in charge of both communications security, and in command of their own Army, Navy, and Air Force.

Giving them more authority, especially authority that is already vested in a different agency, is a Yuge mistake.

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#7
post #5

Here’s a novel idea: how about the NSA used its powers to defend Americans instead of hoarding zero days and spying on them? Things like working with companies and institutions to ensure they have proper security and encryption.

That alone wouldn’t be enough; why does this have to be XOR?

It has to be exclusive because the two goals directly conflict with one another.

Thus, one of the most common good-government proposals that gets floated in this area is to divide the NSA in two, one group devoted solely to offense, and one devoted solely to defense. At that point, at least you can know whether one group did something wrong. The job of the offense group is to find vulnerabilities, hoard them, and use them to attack people. But the job of the defense group is to find vulnerabilities, publicize them, and make sure they get fixed.

Currently we have the offense group, but they like to pretend to be the defense group for PR reasons. This is not a great situation.

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#8
post #5

Earlier quoted context omitted.

That alone wouldn’t be enough; why does this have to be XOR?

It has to be exclusive because the two goals directly conflict with one another. Thus, one of the most common good-government proposals that gets floated in this area is to divide the NSA in two, one group devoted solely to offense, and one devoted solely to defense. At that point, at least you can know whether one group did something wrong. The job of the offense group is to find vulnerabilities, hoard them, and use…

Why is cyber warfare any different from other military efforts? I've never heard of this split of defense and offense in other military realms.

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#9

Earlier quoted context omitted.

It has to be exclusive because the two goals directly conflict with one another. Thus, one of the most common good-government proposals that gets floated in this area is to divide the NSA in two, one group devoted solely to offense, and one devoted solely to defense. At that point, at least you can know whether one group did something wrong. The job of the offense group is to find vulnerabilities, hoard them, and use…

Why is cyber warfare any different from other military efforts? I've never heard of this split of defense and offense in other military realms.

Everyone uses the same communications technology. Your email and Turkish email are the same, an attack on one is an attack on the other, and a defense of one is a defense of the other. This isn't World War II where German communications are encrypted on Engima machines while American communications are encrypted by translation into Navajo.

Your tanks are quite different from Turkish tanks: Turkish tanks are located in Turkey. You can bomb Turkey as much as you want without compromising a single American tank.

Re: Senators Offer to Let NSA Hunt Cyber Actors Inside the US

#10
post #3
post #2

Site not loading. Any compelling reason to divest this responsibility from the FBI? I assume weakening legal protections?

Not defending or supporting, just quoting- > Nakasone told senators that the U.S. was unable to keep up with the threat in large part because laws prevent NSA and Cyber Command from adequately observing adversaries operating on U.S. networks. “They’re no longer just launching their attacks from different parts of the world. They understand that they come into the United States, use our infrastructure, and there’s a b…

It seems (to me) like an excuse to skip due process and otherwise circumvent law.

> “What I am identifying right now is our adversaries understand that they can come into the United States and rapidly utilize an internet service provider, come up and do their activities, and take that down before a warrant can be issued, before we can have surveillance by a civilian authority here in the United States.”

Post reply on HN