Domain: house.gov
Stories and comments across the archive that link to house.gov.
Stories · 337
-
Congress is About To Ban the Government From Offering Free Online Tax Filing (propublica.org)
Just in time for Tax Day, the for-profit tax preparation industry is about to realize one of its long-sought goals. Congressional Democrats and Republicans are moving to permanently bar the IRS from creating a free electronic tax filing system. ProPublica reports: Last week, the House Ways and Means Committee, led by Rep. Richard Neal (D-Mass.), passed the Taxpayer First Act, a wide-ranging bill making several administrative changes to the IRS that is sponsored by Reps. John Lewis (D-Ga.) and Mike Kelly (R-Pa). In one of its provisions, the bill makes it illegal for the IRS to create its own online system of tax filing. Companies like Intuit, the maker of TurboTax, and H&R Block have lobbied for years to block the IRS from creating such a system. If the tax agency created its own program, which would be similar to programs other developed countries have, it would threaten the industry's profits.
"This could be a disaster. It could be the final nail in the coffin of the idea of the IRS ever being able to create its own program," said Mandi Matlock, a tax attorney who does work for the National Consumer Law Center. Experts have long argued that the IRS has failed to make filing taxes as easy and cheap as it could be. In addition to a free system of online tax preparation and filing, the agency could provide people with pre-filled tax forms containing the salary data the agency already has, as ProPublica first reported on in 2013. -
House Democrats Refuse To Weaken Net Neutrality Bill, Defeat GOP Amendments (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Democrats in the U.S. House of Representatives yesterday rejected Republican attempts to weaken a bill that would restore net neutrality rules. The House Commerce Committee yesterday approved the "Save the Internet Act" in a 30-22 party-line vote, potentially setting up a vote of the full House next week. The bill is short and simple -- it would fully reinstate the rules implemented by the Federal Communications Commission under then-Chairman Tom Wheeler in 2015, reversing the repeal led by FCC Chairman Ajit Pai in 2017.
Commerce Committee Republicans repeatedly introduced amendments that would weaken the bill but were consistently rebuffed by the committee's Democratic majority. "The Democrats beat back more than a dozen attempts from Republicans to gut the bill with amendments throughout the bill's markup that lasted 9.5 hours," The Hill reported yesterday. Republican amendments would have weakened the bill by doing the following: Exempt all 5G wireless services from net neutrality rules; Exempt all multi-gigabit broadband services from net neutrality rules; Exempt from net neutrality rules any ISP that builds broadband service in any part of the U.S. that doesn't yet have download speeds of at least 25Mbps and upload speeds of at least 3Mbps; Exempt from net neutrality rules any ISP that gets universal service funding from the FCC's Rural Health Care Program; Exempt ISPs that serve 250,000 or fewer subscribers from certain transparency rules that require public disclosure of network management practices; and Prevent the FCC from limiting the types of zero-rating (i.e., data cap exemptions) that ISPs can deploy. An additional Republican amendment "would have imposed net neutrality rules but declared that broadband is an information service, [preventing] the FCC from imposing any other type of common-carrier regulations on ISPs," reports Ars Technica. "The committee did approve a Democratic amendment to exempt ISPs with 100,000 or fewer subscribers from the transparency rules, but only for one year." -
House Democrats Refuse To Weaken Net Neutrality Bill, Defeat GOP Amendments (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Democrats in the U.S. House of Representatives yesterday rejected Republican attempts to weaken a bill that would restore net neutrality rules. The House Commerce Committee yesterday approved the "Save the Internet Act" in a 30-22 party-line vote, potentially setting up a vote of the full House next week. The bill is short and simple -- it would fully reinstate the rules implemented by the Federal Communications Commission under then-Chairman Tom Wheeler in 2015, reversing the repeal led by FCC Chairman Ajit Pai in 2017.
Commerce Committee Republicans repeatedly introduced amendments that would weaken the bill but were consistently rebuffed by the committee's Democratic majority. "The Democrats beat back more than a dozen attempts from Republicans to gut the bill with amendments throughout the bill's markup that lasted 9.5 hours," The Hill reported yesterday. Republican amendments would have weakened the bill by doing the following: Exempt all 5G wireless services from net neutrality rules; Exempt all multi-gigabit broadband services from net neutrality rules; Exempt from net neutrality rules any ISP that builds broadband service in any part of the U.S. that doesn't yet have download speeds of at least 25Mbps and upload speeds of at least 3Mbps; Exempt from net neutrality rules any ISP that gets universal service funding from the FCC's Rural Health Care Program; Exempt ISPs that serve 250,000 or fewer subscribers from certain transparency rules that require public disclosure of network management practices; and Prevent the FCC from limiting the types of zero-rating (i.e., data cap exemptions) that ISPs can deploy. An additional Republican amendment "would have imposed net neutrality rules but declared that broadband is an information service, [preventing] the FCC from imposing any other type of common-carrier regulations on ISPs," reports Ars Technica. "The committee did approve a Democratic amendment to exempt ISPs with 100,000 or fewer subscribers from the transparency rules, but only for one year." -
House Democrats Refuse To Weaken Net Neutrality Bill, Defeat GOP Amendments (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Democrats in the U.S. House of Representatives yesterday rejected Republican attempts to weaken a bill that would restore net neutrality rules. The House Commerce Committee yesterday approved the "Save the Internet Act" in a 30-22 party-line vote, potentially setting up a vote of the full House next week. The bill is short and simple -- it would fully reinstate the rules implemented by the Federal Communications Commission under then-Chairman Tom Wheeler in 2015, reversing the repeal led by FCC Chairman Ajit Pai in 2017.
Commerce Committee Republicans repeatedly introduced amendments that would weaken the bill but were consistently rebuffed by the committee's Democratic majority. "The Democrats beat back more than a dozen attempts from Republicans to gut the bill with amendments throughout the bill's markup that lasted 9.5 hours," The Hill reported yesterday. Republican amendments would have weakened the bill by doing the following: Exempt all 5G wireless services from net neutrality rules; Exempt all multi-gigabit broadband services from net neutrality rules; Exempt from net neutrality rules any ISP that builds broadband service in any part of the U.S. that doesn't yet have download speeds of at least 25Mbps and upload speeds of at least 3Mbps; Exempt from net neutrality rules any ISP that gets universal service funding from the FCC's Rural Health Care Program; Exempt ISPs that serve 250,000 or fewer subscribers from certain transparency rules that require public disclosure of network management practices; and Prevent the FCC from limiting the types of zero-rating (i.e., data cap exemptions) that ISPs can deploy. An additional Republican amendment "would have imposed net neutrality rules but declared that broadband is an information service, [preventing] the FCC from imposing any other type of common-carrier regulations on ISPs," reports Ars Technica. "The committee did approve a Democratic amendment to exempt ISPs with 100,000 or fewer subscribers from the transparency rules, but only for one year." -
MIT Cuts Funding Ties With Huawei, ZTE Citing US National Security Concerns (scmp.com)
Following similar moves by Stanford, University of California Berkeley and University of Minnesota, Massachusetts Institute of Technology announced that it is cutting ties with Huawei and ZTE, citing U.S. national security concerns. "At this time, based on this enhanced review, MIT is not accepting new engagements or renewing existing ones with Huawei and ZTE or their respective subsidiaries due to federal investigations regarding violations of sanction restrictions," Richard Lester, MIT's associate provost, and Maria Zuber, the school's vice-president for research, said in a letter to faculty on Wednesday. The South China Morning Post reports: MIT's move is part of a broader effort to strengthen its vetting of research partners, which may affect relationships with other entities in mainland China, Hong Kong, Russia and Saudi Arabia. "Most recently we have determined that engagements with certain countries -- currently China [including Hong Kong], Russia and Saudi Arabia -- merit additional faculty and administrative review beyond the usual evaluations that all international projects receive," the letter said.
The Protect Our Universities Act, introduced last month by Representative Jim Banks, an Indiana Republican, would establish a task force, led by the U.S. Department of Education, to maintain a list of "sensitive" research projects, including those financed by the defense and energy departments and U.S. intelligence agencies. The proposed body would monitor foreign student participation in those projects. Students with past or current Chinese citizenship would not be allowed access to the projects without a waiver from the director of national intelligence. The Act also calls for the intelligence director to create a list of foreign entities that "pose a threat of espionage with respect to sensitive research," and stipulates that Huawei and ZTE be included. -
Bill That Would Restore Net Neutrality Moves Forward Despite Telecom's Best Efforts To Kill It (vice.com)
An anonymous reader quotes a report from Motherboard: Last month, Democrats introduced a simple three page bill that would do one thing: restore FCC net neutrality rules and the agency's authority over ISPs, both stripped away by a hugely-controversial decision by the agency in late 2017. Tuesday morning, the Save the Internet Act passed through a key House committee vote and markup session -- despite some last-minute efforts by big telecom to weaken the bill.
"Net neutrality is coming back with a vengeance," said Evan Greer, deputy director of consumer group Fight for the Future said in a statement. "Politicians are slowly learning that they can't get away with shilling for big telecom anymore," Greer said. "We're harnessing the power of the Internet to save it, and any lawmaker who stands in our way will soon face the wrath of their constituents, who overwhelmingly want lawmakers to restore these basic protections." Greer told Motherboard that several last minute amendments were introduced by lawmakers during the markup period in an attempt to water down the bill, but all were pulled in the wake of widespread public interest in the hearing. "It seems like the GOP retreated a bit given after the huge swell of public support," said Greer, who told Motherboard that 300,000 people watched the organization's livestream of the markup process. That attention "really emboldened the Democrats and shored up the ones that were wobbling," Greer said. -
Bill That Would Restore Net Neutrality Moves Forward Despite Telecom's Best Efforts To Kill It (vice.com)
An anonymous reader quotes a report from Motherboard: Last month, Democrats introduced a simple three page bill that would do one thing: restore FCC net neutrality rules and the agency's authority over ISPs, both stripped away by a hugely-controversial decision by the agency in late 2017. Tuesday morning, the Save the Internet Act passed through a key House committee vote and markup session -- despite some last-minute efforts by big telecom to weaken the bill.
"Net neutrality is coming back with a vengeance," said Evan Greer, deputy director of consumer group Fight for the Future said in a statement. "Politicians are slowly learning that they can't get away with shilling for big telecom anymore," Greer said. "We're harnessing the power of the Internet to save it, and any lawmaker who stands in our way will soon face the wrath of their constituents, who overwhelmingly want lawmakers to restore these basic protections." Greer told Motherboard that several last minute amendments were introduced by lawmakers during the markup period in an attempt to water down the bill, but all were pulled in the wake of widespread public interest in the hearing. "It seems like the GOP retreated a bit given after the huge swell of public support," said Greer, who told Motherboard that 300,000 people watched the organization's livestream of the markup process. That attention "really emboldened the Democrats and shored up the ones that were wobbling," Greer said. -
Amazon Removes Anti-Vaccine Movies After CNN Inquiry (cnn.com)
"Amazon has apparently started removing anti-vaccine documentaries from its Amazon Prime Video streaming service," reports CNN: The move came days after a CNN Business report highlighted the anti-vaccine content available on the site, and hours after Rep. Adam Schiff wrote an open letter to Amazon CEO Jeff Bezos, saying he is concerned "that Amazon is surfacing and recommending" anti-vaccination books and movies....
Amazon did not respond to questions about why the films are no longer available on Prime Video.
However, while some anti-vaccine videos are gone from the Prime streaming service, a number of anti-vaccine books were still available for purchase on Amazon.com when CNN Business reviewed search results on Friday afternoon, and some were still being offered for free to Kindle Unlimited subscribers... Amazon also had not removed some anti-vaccine books that CNN Business had previously reported on, which users searching the site could mistake for offering neutral information accepted by the public health community. -
House Opens Inquiry Into Proposed US Nuclear Venture In Saudi Arabia (nytimes.com)
An anonymous reader quotes a report from The New York Times: President Trump's former national security adviser and other White House officials pushed a venture to bring nuclear power plants to Saudi Arabia over repeated legal and ethical warnings that potential conflicts of interest around the plan could put American security at risk, concluded a new report from House Democrats released on Tuesday. The 24-page report from the House Oversight and Reform Committee outlined actions taken in the early weeks of the Trump administration to secure government backing to have American companies build dozens of nuclear power plants across Saudi Arabia, potentially at the risk of spreading nuclear weapons technology. But House Democrats said there was evidence that as recently as last week, the White House was still considering the proposal.
Claims presented by whistle-blowers and White House documents obtained by the committee show that the company backing the nuclear plan, IP3 International, and its allies in the White House were working so closely that the company sent a draft memo to the former national security adviser, Michael T. Flynn, to circulate just days after the inauguration. Mr. Flynn had worked on the plan for IP3 during the Trump campaign and transition, the Democrats said, and continued to advocate for it in the White House. Even after Mr. Flynn left the White House in February 2017, officials on the National Security Council pushed ahead, the Democrats said, ignoring advice from the N.S.C.'s ethics counsel and other lawyers to cease all work on the plan because of potentially illegal conflicts. At a March 2017 meeting, a National Security Council aide tried to revive the IP3 plan "so that Jared Kushner can present it to the President for approval," the Democratic report said, a reference to Mr. Trump's son-in-law and top adviser. The draft memo also referenced another close Trump associate, Thomas J. Barrack, who served as chairman of the president's inaugural committee. It said that Mr. Trump had appointed Mr. Barrack as a special representative to implement the plan, which it called "the Middle East Marshall Plan." The memo also directed agencies to support Mr. Barrack's efforts. -
NCTA Asks For Net Neutrality Law Allowing Paid Prioritization (arstechnica.com)
DarkRookie2 shares a report from Ars Technica: Cable industry chief lobbyist Michael Powell today asked Congress for a net neutrality law that would ban blocking and throttling but allow Internet providers to charge for prioritization under certain circumstances. Powell -- a Republican who was FCC chairman from 2001 to 2005 and is now CEO of cable lobby group NCTA -- spoke to lawmakers today at a Communications and Technology subcommittee hearing on net neutrality. Powell said there is "common ground around the basic tenets of net neutrality rules: There should be no blocking or throttling of lawful content. There should be no paid prioritization that creates fast lanes and slow lanes, absent public benefit. And, there should be transparency to consumers over network practices."
Despite Powell's claim of "common ground," his statement on paid prioritization illustrates a divide between the broadband industry and proponents of net neutrality rules. Obama-era Federal Communications Commission rules banned paid prioritization as well as blocking and throttling, while Trump's FCC overturned the ban on all three practices. Net neutrality advocates are trying to restore those rules in full in a court case against the FCC, and any net neutrality law proposed by Democrats in Congress would likely mirror the Obama-era FCC rules. Republican lawmakers are preparing legislation that would impose weaker rules. The report notes that Powell's proposal for paid prioritization is full of caveats: "There should be no paid prioritization that creates fast lanes and slow lanes, absent public benefit." "His testimony to Congress didn't explain how ISPs can charge online services for prioritization without dividing Internet access into fast lanes and slow lanes, and his statement seems to indicate that slow lanes would be allowed as long as the paid prioritization creates some 'public benefit,'" reports Ars. "How 'public benefit' would be defined or who would determine which paid priority schemes benefit the public are not clear." -
House Democrats Tell Ajit Pai: Stop Screwing Over the Public (arstechnica.com)
slack_justyb shares a report from Ars Technica: The House Commerce Committee is "reassuming its traditional role of oversight to ensure the agency is acting in the best interest of the public and consistent with its legislative authority," Commerce Committee Chairman Frank Pallone, Jr. (D-N.J.) and Communications and Technology Subcommittee Chairman Mike Doyle (D-Penn.) said in an announcement yesterday. Pallone, Jr. and Doyle wrote a letter to Pai, saying that he has made the FCC too secretive and has repeatedly advanced the interests of corporations over consumers. They wrote: "Not only have you have failed on numerous occasions to provide Democratic members of this committee with responses to their inquiries, you have also repeatedly denied or delayed responding to legitimate information requests from the public about agency operations. These actions have denied the public of a full and fair understanding of how the FCC under your leadership has arrived at public policy decisions that impact Americans every day in communities across the country. Under your leadership, the FCC has failed repeatedly to act in the public interest and placed the interest of corporations over consumers. The FCC should be working to advance the goals of public safety, consumer protection, affordable access, and connectivity across the United States. To that end, it is incumbent upon the Committee's leadership and its members to oversee the activities of the FCC."
On Thursday this week, the Communications Subcommittee will hold a hearing about the impact of Pai's net neutrality repeal on consumers, small businesses, and free speech. Witnesses who have been invited to testify at the hearing include former FCC Chairman Tom Wheeler, cable industry chief lobbyist Michael Powell (who is also a former FCC chairman), and representatives of Mozilla, Free Press, and Eastern Oregon Telecom. -
House Democrats Tell Ajit Pai: Stop Screwing Over the Public (arstechnica.com)
slack_justyb shares a report from Ars Technica: The House Commerce Committee is "reassuming its traditional role of oversight to ensure the agency is acting in the best interest of the public and consistent with its legislative authority," Commerce Committee Chairman Frank Pallone, Jr. (D-N.J.) and Communications and Technology Subcommittee Chairman Mike Doyle (D-Penn.) said in an announcement yesterday. Pallone, Jr. and Doyle wrote a letter to Pai, saying that he has made the FCC too secretive and has repeatedly advanced the interests of corporations over consumers. They wrote: "Not only have you have failed on numerous occasions to provide Democratic members of this committee with responses to their inquiries, you have also repeatedly denied or delayed responding to legitimate information requests from the public about agency operations. These actions have denied the public of a full and fair understanding of how the FCC under your leadership has arrived at public policy decisions that impact Americans every day in communities across the country. Under your leadership, the FCC has failed repeatedly to act in the public interest and placed the interest of corporations over consumers. The FCC should be working to advance the goals of public safety, consumer protection, affordable access, and connectivity across the United States. To that end, it is incumbent upon the Committee's leadership and its members to oversee the activities of the FCC."
On Thursday this week, the Communications Subcommittee will hold a hearing about the impact of Pai's net neutrality repeal on consumers, small businesses, and free speech. Witnesses who have been invited to testify at the hearing include former FCC Chairman Tom Wheeler, cable industry chief lobbyist Michael Powell (who is also a former FCC chairman), and representatives of Mozilla, Free Press, and Eastern Oregon Telecom. -
House Democrats Tell Ajit Pai: Stop Screwing Over the Public (arstechnica.com)
slack_justyb shares a report from Ars Technica: The House Commerce Committee is "reassuming its traditional role of oversight to ensure the agency is acting in the best interest of the public and consistent with its legislative authority," Commerce Committee Chairman Frank Pallone, Jr. (D-N.J.) and Communications and Technology Subcommittee Chairman Mike Doyle (D-Penn.) said in an announcement yesterday. Pallone, Jr. and Doyle wrote a letter to Pai, saying that he has made the FCC too secretive and has repeatedly advanced the interests of corporations over consumers. They wrote: "Not only have you have failed on numerous occasions to provide Democratic members of this committee with responses to their inquiries, you have also repeatedly denied or delayed responding to legitimate information requests from the public about agency operations. These actions have denied the public of a full and fair understanding of how the FCC under your leadership has arrived at public policy decisions that impact Americans every day in communities across the country. Under your leadership, the FCC has failed repeatedly to act in the public interest and placed the interest of corporations over consumers. The FCC should be working to advance the goals of public safety, consumer protection, affordable access, and connectivity across the United States. To that end, it is incumbent upon the Committee's leadership and its members to oversee the activities of the FCC."
On Thursday this week, the Communications Subcommittee will hold a hearing about the impact of Pai's net neutrality repeal on consumers, small businesses, and free speech. Witnesses who have been invited to testify at the hearing include former FCC Chairman Tom Wheeler, cable industry chief lobbyist Michael Powell (who is also a former FCC chairman), and representatives of Mozilla, Free Press, and Eastern Oregon Telecom. -
FCC Accused of Colluding With Big Cable To Game 5G Legal Challenge (theregister.co.uk)
An anonymous reader shares an excerpt from a report via The Register: U.S. telecoms regulator the FCC has been accused of colluding with companies it is supposed to oversee in order to protect a controversial decision over new 5G networks. Chair of the House Commerce chair, Frank Pallone, has sent a letter to FCC chair Ajit Pai asking for copies of communications between the FCC and the big telcos regarding legal challenges to the regulator's 5G order, which forces local governments to charge a flat fee for installing new base stations. In the letter [PDF], Pallone strongly implies that the committee has heard from a whistleblower.
"It has come to our attention that certain individuals at the FCC may have urged companies to challenge the order the Commission adopted in order to game the judicial lottery procedure and intimated the agency would look unfavorably towards entities that were not helpful," it reads. In effect, the letter alleges that FCC staff -- almost certainly from Pai's office -- put pressure on the big telcos to challenge an order that is designed to benefit them as a way of gaming the judicial system so the case didn't end up in a court likely to overturn it. -
Net Neutrality Bill 38 Votes Short In Congress, and Time Has Almost Run Out (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Legislation to restore net neutrality rules now has 180 supporters in the U.S. House of Representatives, but that's 38 votes short of the amount needed before the end of the month. The Congressional Review Act (CRA) resolution, already approved by the Senate, would reverse the Federal Communications Commission's repeal of net neutrality rules. But 218 signatures from U.S. representatives (a majority) are needed to force a full vote in the House before Congress adjourns at the end of the year.
Net neutrality advocates previously said they needed 218 signatures by December 10 to force a vote. But an extension of Congress' session provided a little more time. "[Now that the Congressional session has officially been extended, members of Congress could be in town as late as December 21st," net neutrality advocacy group Fight for the Future wrote yesterday. "This means we have until the end of the year to get as many lawmakers as possible signed on to restore net neutrality." A discharge petition that would force a vote on the CRA resolution gained three new supports in the past two weeks, but even if all Democrats were on board it still wouldn't be enough to force a vote. Republicans have a 236-197 House majority, and only one House Republican has signed the petition. -
Google's CEO Thinks Android Users Know How Much Their Phones Are Tracking Them (techcrunch.com)
An anonymous reader quotes a report from TechCrunch: Google CEO Sundar Pichai thinks Android users have a good understanding of the volume of data Google collects on them, when they agree to use the Android mobile operating system. The exec, who is testifying today in front of the House Judiciary committee for a hearing entitled "Transparency & Accountability: Examining Google and its Data Collection, Use and Filtering Practices," claimed that users are in control of the information Google has on them. "For Google services, you have a choice of what information is collected, and we make it transparent," Pichai said in response to questioning from Chairman of the House Judiciary Committee Rep. Bob Goodlatte (R-VA).
Google's defense on the data collection front is similar to Facebook's -- that is, Pichai responded that Google provides tools that put users in control. But do they actually use them? "It's really important for us that average users are able to understand it," said Pichai, stating that users do understand the user agreement for Android OS. "We actually ... remind users to do a privacy checkup, and we make it very obvious every month. In fact, in the last 28 days, 160 million users went to their My Account settings, where they can clearly see what information we have -- we actually show it back to them. We give clear toggles, by category, where they can decide whether that information is collected, stored, or -- more importantly -- if they decide to stop using it, we work hard to make it possible for users to take their data with them," he said. When asked if Google could improve its user dashboard and tools to better teach people how to protect their privacy, including turning off data collection and location tracking, Pichai said "there's complexity," but it is "something I do think we can do better." He continued: "We want to simplify it, and make it easier for average users to navigate these settings. It's something we are working on." -
House Panel Issues Scathing Report On 'Entirely Preventable' Equifax Data Breach (thehill.com)
An anonymous reader quotes a report from The Hill: The Equifax data breach, one of the largest in U.S. history, was "entirely preventable," according to a new House committee investigation. The House Oversight and Government Reform Committee, following a 14-month probe, released a scathing report Monday saying the consumer credit reporting agency aggressively collected data on millions of consumers and businesses while failing to take key steps to secure such information. "In 2005, former Equifax Chief Executive Officer (CEO) Richard Smith embarked on an aggressive growth strategy, leading to the acquisition of multiple companies, information technology (IT) systems, and data," according to the 96-page report authored by Republicans. "Equifax, however, failed to implement an adequate security program to protect this sensitive data. As a result, Equifax allowed one of the largest data breaches in U.S. history. Such a breach was entirely preventable."
The report blames the breach on a series of failures on the part of the company, including a culture of complacency, the lack of a clear IT management operations structure, outdated technology systems and a lack of preparedness to support affected consumers. "A culture of cybersecurity complacency at Equifax led to the successful exfiltration of the personal information of approximately 148 million individuals," the committee staff wrote. "Equifax's failure to patch a known critical vulnerability left its systems at risk for 145 days. The company's failure to implement basic security protocols, including file integrity monitoring and network segmentation, allowed the attackers to access and remove large amounts of data." The Oversight staff found that the company not only lacked a clear management structure within its IT operations, which hindered it from addressing security matters in a timely manner, but it also was unprepared to identify and notify consumers affected by the breach. The report said the company could have detected the activity but did not have "file integrity monitoring enabled" on this system, known as ACIS, at the time of the attack. -
US Lawmakers Say AI Deepfakes 'Have the Potential To Disrupt Every Facet of Our Society' (theverge.com)
Yesterday, several lawmakers sent a letter to the Director of National Intelligence, Dan Coats, asking him to assess the threat posed to national security by deepfakes -- a new type of AI-assisted video editing that creates realistic results with minimal effort. The Verge reports: The letter says "hyper-realistic digital forgeries" showing "convincing depictions of individuals doing or saying things they never did" could be used for blackmail and misinformation. "As deep fake technology becomes more advanced and more accessible, it could pose a threat to United States public discourse and national security," say the letter's signatories, House representatives Adam Schiff (D-CA), Stephanie Murphy (D-FL), and Carlos Curbelo (R-FL). The trio want the intelligence community to produce a report that includes descriptions of when "confirmed or suspected" deepfakes have been produced by foreign individuals (there are no current examples of this), and to suggest potential countermeasures. In a press statement, Curbelo said: "Deep fakes have the potential to disrupt every facet of our society and trigger dangerous international and domestic consequences [...] As with any threat, our Intelligence Community must be prepared to combat deep fakes, be vigilant against them, and stand ready to protect our nation and the American people." -
Auto, Tech Industries Urge Congress To Pass Self-Driving Legislation (axios.com)
John Bozzella, president and CEO of Global Automakers (a trade association and lobby group of automobile manufacturers), said at an Axios event Thursday that it's "critically important" that Congress pass federal legislation on autonomous vehicles. A year ago, the House approved the Self Drive Act, but it has yet to be passed by the Senate. Axios adds: This delay is set against a growing fear in Washington, Silicon Valley and the auto industry that the U.S. will fall dangerously behind in autonomous vehicle standards and policies while China and Europe leap ahead. "My fear is we fall behind with the rest of the world," said, Congressman Robert Latta (R-Ohio), chairman of the Digital Commerce and Consumer Protection subcommittee. As breakthroughs are happening on the mechanical, computer and engineering levels with regard to autonomous vehicles, "time is running out" on moving policy forward, he added. -
Facing 'Net Neutrality' Criticism, Verizon Suddenly Lifts Data Caps On All Public Safety Workers (siliconvalley.com)
An anonymous reader writes: Verizon testified Friday before a California State Assembly committee about why its "throttling" of county firefighters was completely unrelated to net neutrality. Then they surprised everyone by announcing that they were lifting all data caps on public safety workers with unlimited data plans, including federal justice agencies like the FBI, CIA and Secret Service.
Verizon claimed this was completely unrelated to the fact that 13 California Congressmen are now demanding that the FTC investigate Verizon's throttling of firefighters battling California's 290,692-acre wildfire. "It is unacceptable for communications providers to deceive their customers," the Congressmen wrote, "but when the consumer in question is a government entity tasked with fire and emergency services, we can't afford to wait a moment longer."
Meanwhile, the California Professional Firefighters, which represents more than 30,000 firefighters and emergency personnel, came out in support of a strict new California law that restores net neutrality provisions, saying their group had "come to conclude that if net neutrality is not restored, the effect could be disastrous to the public's safety."
One county fire chief even testified this was the third time in eight months they've been throttled by Verizon. -
US Military Told To Move From 'Expendable' To 'Reusable' Rockets (arstechnica.com)
schwit1 shares a report from Ars Technica: The conference report from the U.S. House and Senate calls for the Evolved Expendable Launch Vehicle program of the Department of Defense, commonly known as the EELV program, to be named the "National Security Space Launch program" as of March 1, 2019. No longer will the military rely solely on expendable rockets. Moreover, the report says the U.S. Air Force must consider both expendable and reusable launch vehicles as part of its solicitation for military launch contracts. And in the event that a contract is solicited for a mission that a reusable launch vehicle is not eligible to compete for, the Air Force should report back to Congress with the reason why. The U.S. House has already agreed to the conference report, and it should be taken up in the Senate next week. After that, it will need the president's signature to become law. [...] It is quite a change from the state of play just 13 years ago, when ULA was dominant and SpaceX was roundly dismissed by the courts and the broader aerospace community. -
GOP Congressman Introduces Bill To Reinstate Net Neutrality Rules (theverge.com)
Rep. Mike Coffman (R-CO) today announced his support for a bill that would institute the basic outlines of the FCC's 2015 Open Internet order, which banned the throttling and blocking of content as well as harmful paid prioritization practices. He is also the first Republican to sign on to the Democrat-led discharge petition, which aims to force a vote on the House floor to roll back the FCC's December decision to repeal net neutrality. The Verge reports: The 21st Century Internet Act aims to restructure the current framework by which the internet has been governed since the '90s. Coffman's bill moves past this argument by amending the 1934 Telecommunications Act and adding the new Title VIII. This new classification would "permanently codify into law the 'four corners' of net neutrality" by banning providers from controlling traffic quality and speed and forbidding them from participating in paid prioritization programs or charging access fees from edge providers.
On top of providing stable ground for net neutrality rules to be upheld in the future, the legislation also makes it illegal for providers to participate in "unfair or deceptive acts or practices." It directs the FCC to investigate claims of anticompetitive behavior on behalf of consumers after receiving their complaints. Transparency requirements are heightened for providers as well, as companies must publicly disclose information regarding their network practices to allow consumers to "make informed choices regarding use of such services." -
Facebook Acknowledges It Shared User Data With Dozens of Companies (cnet.com)
An anonymous reader quotes a report from CNET: Facebook has admitted providing dozens of tech companies with special access to user data after publicly saying it restricted such access in 2015. Facebook continued sharing information with 61 hardware and software makers after it said it discontinued the practice in May 2015, the social networking giant acknowledged in 747 pages of documents delivered to Congress late Friday. The documents were in response to hundreds of questions posed to Facebook CEO Mark Zuckerberg by members of Congress in April.
Facebook said it granted a special "one-time" six-month extension to companies that ranged from AOL to package-delivery service United Parcel Service to dating app Hinge so they could come into compliance with the social network's new privacy policy and create their own versions of Facebook for their devices. Data shared without users' knowledge included friends' names, genders and birth dates. Facebook's documents also said it had discovered that five other companies "theoretically could have accessed limited friends' data" as a result of a beta test. Facebook said in the documents it has ended 38 of the partnerships and plans to discontinue seven more by the end of July. -
Bill To Save Net Neutrality Is 46 Votes Short In US House (arstechnica.com)
Congressional Democrats seeking to reinstate net neutrality rules are still 46 votes short of getting the measure through the House of Representatives. Ars Technica reports: The U.S. Senate voted last month to reverse the Federal Communications Commission's repeal of net neutrality rules, with all members of the Democratic caucus and three Republicans voting in favor of net neutrality. A discharge petition needs 218 signatures to force a House vote on the same net neutrality bill, and 218 votes would also be enough to pass the measure. So far, the petition has signatures from 172 representatives, all Democrats. That number hasn't changed in two weeks. The outlook looks grim as Republicans have a 235-193 majority in the House. If you're curious to see which representatives haven't signed the petition, you can view this page maintained by net neutrality group Fight for the Future. -
Bill To Save Net Neutrality Is 46 Votes Short In US House (arstechnica.com)
Congressional Democrats seeking to reinstate net neutrality rules are still 46 votes short of getting the measure through the House of Representatives. Ars Technica reports: The U.S. Senate voted last month to reverse the Federal Communications Commission's repeal of net neutrality rules, with all members of the Democratic caucus and three Republicans voting in favor of net neutrality. A discharge petition needs 218 signatures to force a House vote on the same net neutrality bill, and 218 votes would also be enough to pass the measure. So far, the petition has signatures from 172 representatives, all Democrats. That number hasn't changed in two weeks. The outlook looks grim as Republicans have a 235-193 majority in the House. If you're curious to see which representatives haven't signed the petition, you can view this page maintained by net neutrality group Fight for the Future. -
Russian Fake News Ecosystem Targets Syrian Human Rights Workers (securityledger.com)
chicksdaddy shares a report from The Security Ledger: Kremlin linked news sites like RT and Sputnik figure prominently in an online disinformation campaign portraying Syrian humanitarian workers ("White Helmets") as terrorists and crisis actors, according to an analysis (PDF) by researchers at University of Washington and Harvard. An online "echosystem" of propaganda websites including Russia backed news outlets Sputnik and RT is attacking the credibility of humanitarian workers on the ground in rebel occupied Syria, according to a new analysis by researchers at The University of Washington and Harvard University. Online rumors circulated through so called "alternative" media sites have attacked the Syrian Civil Defense (aka "White Helmets") as "crisis actors" and Western agents working on behalf of the U.S. and NATO. Statistical analysis of the online rumors reveal a tight network of websites sharing nearly identical content via Twitter and other social media platforms, wrote Kate Starbird. Starbird is an Assistant Professor of Human Centered Design & Engineering at University of Washington and a leading expert on so-called "crisis informatics."
In activity reminiscent of the disinformation campaigns that roiled the U.S. Presidential election in 2016, articles by what Starbird describes as "a few prominent journalists and bloggers" writing for self described "alternative" news sites like 21stCenturyWire, GlobalResearch, MintPressNews, and ActivistPost are picked up by other, smaller and more niche websites including both left- and right-leaning partisan news sites, "clickbait sites," and conspiracy theory websites. Government funded media outlets from Syria, Iran, Hezbollah and Russia figure prominently in the Syrian disinformation campaign, Starbird's team found. In particular, "Russian government-funded media outlets (i.e. SputnikNews and RT) play a prominent and multi-faceted role within this ecosystem," she wrote. -
US Spending Bill Contains CLOUD Act, a Win For Tech and Law Enforcement (axios.com)
The 2,232 page spending bill released Wednesday by House and Senate leaders includes the Clarifying Lawful Overseas Use of Data [CLOUD] Act, which provides a legal framework for law enforcement to request data from overseas servers. The CLOUD Act currently sits high atop the wish list of tech firms, law enforcement and even foreign nations. Axios reports: The Supreme Court is currently mulling a case determining whether the Department of Justice had the right to force Microsoft to produce client emails stored on a server in Ireland without permission from Ireland's government. Microsoft fears the DOJ will force it to violate the laws of Ireland. The DOJ hopes to avoid the often years long process of abiding by treaties dealing with evidence. But both have publicly urged lawmakers to render the pending decision moot by passing the CLOUD act, a way to streamline the treaty process for requesting digital data.
The CLOUD Act provides a framework for reciprocal treaties for nations to request data from computers located within each other's borders. It also provides a mechanism for a Microsoft to take a law enforcement demand to court if it would force them to violate another country's rules. But when neither apply, law enforcement will be able to demand files in accordance with U.S. law. -
House Democrats' Counter-Memo Released, Alleging Major Factual Inaccuracies (vox.com)
Long-time Slashdot reader Rei writes: Three weeks ago, on a party-line vote, the U.S. House Intelligence Committee voted to release a memo from committee chair and Trump transition team member Devin Nunes. The "Nunes Memo" alleged missteps by the FBI in seeking a FISA warrant against Trump aide Carter Page; a corresponding Democratic rebuttal memo was first blocked from simultaneous release by the committee, and subsequently the White House. Tonight, it has finally been released.
Among its many counterclaims: the Steele Dossier, only received in September, did not initiate surveilance of Page which began in July; the Steele dossier was only one, minor component of the FISA application, and only concerning Page's Moscow meetings; Steele's funding source and termination was disclosed in the application; and a number of other "distortions and misrepresentations that are contradicted by the underlying classified documents". Perhaps most seriously, it accuses Nunes of having never read the FISA application which his memo criticized.
Vox argues the memo proves that no one was misled when the surveillance was authorized. "The FBI clearly states right there in the FISA application that they believe Steele was hired to find dirt on Trump... After the Schiff memo was released on Saturday, House Republicans released a document rebutting its core claims. Their response to this damning citation is -- and I am not making this up -- that the vital line in which the FBI discloses the information about Steele was 'buried in a footnote.'" -
House Democrats' Counter-Memo Released, Alleging Major Factual Inaccuracies (vox.com)
Long-time Slashdot reader Rei writes: Three weeks ago, on a party-line vote, the U.S. House Intelligence Committee voted to release a memo from committee chair and Trump transition team member Devin Nunes. The "Nunes Memo" alleged missteps by the FBI in seeking a FISA warrant against Trump aide Carter Page; a corresponding Democratic rebuttal memo was first blocked from simultaneous release by the committee, and subsequently the White House. Tonight, it has finally been released.
Among its many counterclaims: the Steele Dossier, only received in September, did not initiate surveilance of Page which began in July; the Steele dossier was only one, minor component of the FISA application, and only concerning Page's Moscow meetings; Steele's funding source and termination was disclosed in the application; and a number of other "distortions and misrepresentations that are contradicted by the underlying classified documents". Perhaps most seriously, it accuses Nunes of having never read the FISA application which his memo criticized.
Vox argues the memo proves that no one was misled when the surveillance was authorized. "The FBI clearly states right there in the FISA application that they believe Steele was hired to find dirt on Trump... After the Schiff memo was released on Saturday, House Republicans released a document rebutting its core claims. Their response to this damning citation is -- and I am not making this up -- that the vital line in which the FBI discloses the information about Steele was 'buried in a footnote.'" -
GOP Memo Criticizing FBI Surveillance is Released (washingtonpost.com)
The controversial four-page memo created by Republican staffers on the House Intelligence Committee alleging abuse of surveillance authority by the Justice Department and FBI has been released Friday after being declassified by the president. The memo is unredacted. (Alternative link for the memo.) The Washington Post: The four-page, newly declassified memo written by the Republican staffers for the House Intelligence Committee said the findings "raise concerns with the legitimacy and legality of certain (Justice Department) and FBI interactions with the Foreign Intelligence Surveillance Court (FISC) calling it "a troubling breakdown of legal processes established to protect the American people from abuses related to the FISA process."
The memo accuses former officials who approved the surveillance applications -- a group that includes former FBI Director James B. Comey, his former deputy Andrew McCabe, former deputy attorney general Sally Yates and current Deputy Attorney General Rod J. Rosenstein -- of signing off on court surveillance requests that omitted key facts about the political motivations of the person supplying some of the information, Christopher Steele, a former intelligence officer in Britain. The memo says Steele "was suspended and then terminated as an FBI source for what the FBI defines as the most serious of violations -- an unauthorized disclosure to the media of his relationship with the FBI." The FBI Agents Association on Friday said that agents "have not, and will not, allow partisan politics to distract us from our solemn commitment to our mission." The full statement: The men and women of the FBI put their lives on the line every day in the fight against terrorists and criminals because of their dedication to our country and the Constitution. The American people should know that they continue to be well-served by the world's preeminent law enforcement agency. FBI Special Agents have not, and will not, allow partisan politics to distract us from our solemn commitment to our mission. -
Republican Tax Plan Kills Electric Vehicle Credit (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: The nascent market for electric cars will suffer a big setback if the Republican tax plan released on Thursday enters into law. Among the changes to the current tax code would be an end to the Plug-In Electric Drive Vehicle Credit. That's the tax incentive that currently means up to $7,500 back from the IRS when you purchase a new battery or plug-in hybrid electric vehicle. Since the start of 2010, the EV tax credit has been $2,500 for a plug-in vehicle with at least 5kWh battery capacity. Every extra kWh nets another $417 up to a maximum of $7,500, although you would need at least that amount in income tax liability -- the IRS won't cut you a check to make up the full amount. It was never meant to be permanent; once an automaker sells 200,000 qualifying vehicles (starting from January 1, 2010) its eligibility is phased out over a matter of months. But in the almost seven years since, no one has reached that limit yet. Tesla will almost certainly be first, with General Motors not far behind; between them, they've sold a lot of Model Ses and Chevrolet Volts. If this tax plan is enacted, it will surely mean pain for both companies, as well as anyone else hoping to sell a lot of EVs here in the U.S. The data is pretty clear -- tax incentives sell electric cars, and the market for EVs can dry up very fast when they're abolished, as Georgia's recent experience shows. -
Congress Opens Probe Into FBI's Handling of Clinton Email Investigation (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Two House committees announced Tuesday that they would conduct a joint probe into the FBI's handling of the Clinton e-mail investigation. The Clinton investigation concluded with no charges being levied against the former secretary of state who was running for president under the Democratic ticket. House Oversight and Government Reform Committee Chairman Trey Gowdy (R-S.C.) and House Judiciary Committee Chairman Bob Goodlatte (R-Va.) said in a joint statement that they are unsatisfied with how the probe into Clinton's private e-mail server concluded. Among other things, the chairmen want to know why the bureau publicly said it was investigating Clinton while keeping silent that it was looking into President Donald Trump's campaign associates and their connections to Russia.
"Our justice system is represented by a blind-folded woman holding a set of scales. Those scales do not tip to the right or the left; they do not recognize wealth, power, or social status," Goodlatte and Gowdy said in a joint statement. "The impartiality of our justice system is the bedrock of our republic, and our fellow citizens must have confidence in its objectivity, independence, and evenhandedness. The law is the most equalizing force in this country. No entity or individual is exempt from oversight." -
Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com)
Equifax's recently departed CEO is blaming the largest data breach in history on a single person who failed to deploy a patch. TechCrunch reports: Hackers exposed the Social Security numbers, drivers licenses and other sensitive info of 143 million Americans earlier this summer by exploiting a vulnerability in Apache's Struts software, according to testimony heard today from former CEO Richard Smith. However, a patch for that vulnerability had been available for months before the breach occurred. Now several top Equifax execs are being taken to task for failing to protect the information of millions of U.S. citizens. In a live stream before the Digital Commerce and Consumer Protection subcommittee of the House Energy and Commerce committee, Smith testified the Struts vulnerability had been discussed when it was first announced by CERT on March 8th.
Smith said when he started with Equifax 12 years ago there was no one in cybersecurity. The company has poured a quarter of a billion dollars into cybersecurity in the last three years and today boasts a 225 person team. However, Smith had an interesting explainer for how this easy fix slipped by 225 people's notice -- one person didn't do their job. "The human error was that the individual who's responsible for communicating in the organization to apply the patch, did not," Smith, who did not name this individual, told the committee. -
Democrats Ask FEC To Create New Rules To Keep Foreign Influence Off Social Media Ads (thehill.com)
Cristina Marcos reports via The Hill: Democratic lawmakers on Wednesday asked the Federal Election Commission (FEC) to establish new guidelines for online advertising platforms that would prevent foreign spending to influence U.S. elections. The move comes after Facebook provided information to Congress and special counsel Robert Mueller, who is leading the FBI's investigation into Russia's election interference, about Russian ad purchases during the 2016 campaign.
"The recent revelations that foreign nationals with suspected ties to the Russian government sought to influence the 2016 election through social media advertisements are deeply concerning and demand a response," 20 House and Senate Democrats wrote in the letter. "We are fast approaching the 2018 election cycle. As such, it is imperative the Federal Election Commission begin this effort in earnest," they wrote. CNN, which first reported on the Democrats' letter, cited Facebook sources saying they expect Congress may try to require disclaimers on online political ads in the future, similar to political television ads. The Democratic lawmakers suggested that any FEC guidance address how foreign actors can use corporate or nonprofit designations to avoid disclosing political spending; what advertisement platforms can do to prevent foreign campaign activity; and possible changes to disclosure standards for political advertisements. -
Government Officials Begin Investigating Equifax Breach (thehill.com)
An anonymous reader quotes the Hill: The massive breach of credit rating firm Equifax is attracting scrutiny from government officials across the country. Lawmakers from both parties have expressed concern over the hack, which could have left vulnerable sensitive personal information for as many as 143 million people. The New York, Pennsylvania and Illinois attorneys general have announced formal investigations into the hack...
The Senate Commerce Committee announced on Thursday that it sent a letter to Equifax seeking answers about the extent of the breach and what Equifax is doing to mitigate its impact. In the House, Financial Services Committee Chairman Jeb Hensarling (R-Texas) said that his committee would hold a hearing on the hacks at a to-be-determined date. Hensarling noted in a statement that such breaches are becoming "too common" and that consumers "deserve answers." House Energy and Commerce Committee Chairman Greg Walden (R-Ore.) said that his committee would hold a separate hearing on the matter as well. -
Government Officials Begin Investigating Equifax Breach (thehill.com)
An anonymous reader quotes the Hill: The massive breach of credit rating firm Equifax is attracting scrutiny from government officials across the country. Lawmakers from both parties have expressed concern over the hack, which could have left vulnerable sensitive personal information for as many as 143 million people. The New York, Pennsylvania and Illinois attorneys general have announced formal investigations into the hack...
The Senate Commerce Committee announced on Thursday that it sent a letter to Equifax seeking answers about the extent of the breach and what Equifax is doing to mitigate its impact. In the House, Financial Services Committee Chairman Jeb Hensarling (R-Texas) said that his committee would hold a hearing on the hacks at a to-be-determined date. Hensarling noted in a statement that such breaches are becoming "too common" and that consumers "deserve answers." House Energy and Commerce Committee Chairman Greg Walden (R-Ore.) said that his committee would hold a separate hearing on the matter as well. -
Net Neutrality Rollback Faces New Criticism From US Congress -- And 16 Million Comments (techcrunch.com)
An anonymous reader quotes TechCrunch's newest update on the FCC's attempt to gut net neutrality protections: 10 Representatives who helped craft the law governing the FCC itself have submitted an official comment on the proposal ruthlessly dismantling it... The FCC is well within its rights to interpret the law, and it doesn't have to listen to contrary comments from the likes of you and me. It does, however, have to listen to Congress -- "congressional intent" is a huge factor in determining whether an interpretation of the law is reasonable. And in the comment they've just filed, Representatives Pallon, Doyle et al. make it very clear that their intent was and remains very different from how the FCC has chosen to represent it.
"The law directs the FCC to look at ISP services as distinct from those services that ride over the networks. The FCC's proposal contravenes our intent... While some may argue that this distinction should be abandoned because of changes in today's market, that choice is not the FCC's to make. The decision remains squarely with those of us in Congress -- and we have repeatedly chosen to leave the law as it is."
In another letter Thursday, 15 Congressmen asked FCC Chairman Ajit Pai to extend the time period for comments. They note the proposed changes have received more than 16 million comments, more than four times the number of comments on any previous FCC item. The Hill reports that the previous record was 4 million comments -- during the FCC's last net neutrality proceeding in 2014 -- and "the lawmakers also noted that the comment period for approving net neutrality in 2014 was 60 days. Pai has only allowed a 30-day comment period for his plan to rollback the rules." -
FCC Says Its Specific Plan To Stop DDoS Attacks Must Remain Secret (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: FCC Chairman Ajit Pai and Democratic lawmakers have been exchanging letters about a May 8 incident in which the public comments website was disrupted while many people were trying to file comments on Pai's plan to dismantle net neutrality rules. The FCC says it was hit by DDoS attacks. The commission hasn't revealed much about what it's doing to prevent future attacks, but it said in a letter last month that it was researching "additional solutions" to protect the comment system. Democratic Leaders of the House Commerce and Oversight committees then asked Pai what those additional solutions are, but they didn't get much detail in return.
"Given the ongoing nature of the threats to disrupt the Commission's electronic comment ling system, it would undermine our system's security to provide a specific roadmap of the additional solutions to which we have referred," the FCC chief information officer wrote. "However, we can state that the FCC's IT staff has worked with commercial cloud providers to implement Internetbased solutions to limit the amount of disruptive bot-related activity if another bot-driven event occurs." The CIO's answers to lawmakers' questions were sent along with a letter from Pai to Reps. Frank Pallone, Jr. (D-N.J.), Elijah Cummings (D-Md.), Mike Doyle (D-Penn.), DeGette (D-Colo.), Robin Kelly (D-Ill.), and Gerald Connolly (D-Va.). The letter is dated July 21, and it was posted to the FCC's website on July 28. -
The US Congress Is Investigating Government Use Of Kaspersky Software (reuters.com)
An anonymous reader quotes Reuters: A U.S. congressional panel this week asked 22 government agencies to share documents on Moscow-based cyber firm Kaspersky Lab, saying its products could be used to carry out "nefarious activities against the United States," according to letters seen by Reuters. The requests made on Thursday by the U.S. House of Representatives Committee on Science, Space and Technology are the latest blow to the antivirus company, which has been countering accusations by U.S. officials that it may be vulnerable to Russian government influence... The committee "is concerned that Kaspersky Lab is susceptible to manipulation by the Russian government, and that its products could be used as a tool for espionage, sabotage, or other nefarious activities against the United States," wrote the panel's Republican chairman, Lamar Smith, in the letters... A committee aide told Reuters the survey was a "first step" designed to canvas the U.S. government and that more action may follow depending on the results.
Agencies contacted include both the Deparatment of Homeland Security and NASA. The committee wants to see internal risk assessments, plus a list of all systems using Kaspersky products and the names of government contractors using the software. -
US Defense Budget May Help Fund 'Hacking For Defense' Classes At Universities (ieee.org)
According to an instructor at Stanford, eight universities in addition to Stanford will offer a Hacking for Defense class this year: Boise State, Columbia, Georgetown, James Madison, the University of California at San Diego, the University of Pittsburgh, the University of Southern California, and the University of Southern Mississippi. IEEE Spectrum reports: The class has spun out Hacking for Diplomacy, Hacking for Energy, and other targeted classes that use the same methodology. The snowballing effort is now poised to get a big push. This month, the U.S. House of Representatives passed an amendment originated by Rep. Dan Lipinski (D-Ill.) to support development of curriculum, best practices, and recruitment materials for the program to the tune of $15 million (a drop in the $700 billion defense budget but a big deal for a university program). In arguing for the amendment, Lipinski said, "Rapid, low-cost technological innovation is what makes Silicon Valley revolutionary, but the DOD hasn't historically had the mechanisms in place to harness this American advantage. Hacking for Defense creates ways for talented scientists and engineers to work alongside veterans, military leaders, and business mentors to innovate solutions that make America safer." -
Congressman Proposes Organizations Should Be Allowed To 'Hack Back' (engadget.com)
Engadget reports: Representative Tom Graves, R-Ga., thinks that when anyone gets hacked -- individuals or companies -- they should be able to "fight back" and go "hunt for hackers outside of their own networks." The Active Cyber Defense Certainty ("ACDC") Act is getting closer to being put before lawmakers, and the congressman trying to make "hacking back" easy-breezy-legal believes it would've stopped the WannaCry ransomware. Despite its endlessly lulzy acronym, Graves says he "looks forward to formally introducing ACDC" to the House of Representatives in the next few weeks... The bipartisan ACDC bill would let companies who believe they are under ongoing attack break into the computer of whoever they think is attacking them, for the purposes of stopping the attack or gathering info for law enforcement.
Friday The Hill published a list of objections to the proposed law from the CEO of cybersecurity company Vectra Networks. "To start with, when shooting back, there's the fundamental question of who to shoot... We might be able to retaliate, weeks or months after being attacked, but we certainly could not shoot back in time to stop an attack in progress." And if new retaliatory tools are developed, "How can we be sure that these new weapons won't be stolen and misused? Who can guarantee that they won't be turned against us by our corporate competitors? Would we become victims of our own cyber-arms race?"
Slashdot reader hattable writes, "I would think a proposal like this would land dead in the water, but given some recent, and 'interesting' decisions coming from Congress and White House officials, I am not sure many can predict the momentum." -
Proposed Active-Defense Bill Would Allow Destruction of Data, Use of Beacon Tech (onthewire.io)
Trailrunner7 quotes a report from On the Wire: A bill that would allow victims of cybercrime to use active defense techniques to stop attacks and identify attackers has been amended to require victims to notify the FBI of their actions and also add an exemption to allow victims to destroy their data once they locate it on an attacker's machine. The Active Cyber Defense Certainty Act, drafted by Rep. Tom Graves (R-Ga.) in March, is designed to enable people who have been targets of cybercrime to employ certain specific techniques to trace the attack and identify the attacker. The bill defines active cyber defense as "any measure -- (I) undertaken by, or at the direction of, a victim"; and "(II) consisting of accessing without authorization the computer of the attacker to the victim" own network to gather information in order to establish attribution of criminal activity to share with law enforcement or to disrupt continued unauthorized activity against the victim's own network." After releasing an initial draft of the bill in March, Rep. Tom Graves held a public event in Georgia to collect feedback on the legislation. Based on that event and other feedback, Graves made several changes to the bill, including the addition of the notification of law enforcement and an exception in the Computer Fraud and Abuse Act for victims who use so-called beaconing technology to identify an attacker. "The provisions of this section shall not apply with respect to the use of attributional technology in regard to a defender who uses a program, code, or command for attributional purposes that beacons or returns locational or attributional data in response to a cyber intrusion in order to identify the source of the intrusion," the bill says. -
Facial Recognition Database Used By FBI Is Out of Control, House Committee Hears (theguardian.com)
The House oversight committee claims the FBI's facial recognition database is out of control, noting that "no federal law controls this technology" and "no court decision limits it." At last week's House oversight committee hearing, politicians and privacy campaigners presented several "damning facts" about the databases. "About 80% of photos in the FBI's network are non-criminal entries, including pictures from driver's licenses and passports," reports The Guardian. "The algorithms used to identify matches are inaccurate about 15% of the time, and are most likely to misidentify black people than white people." From the report: "Facial recognition technology is a powerful tool law enforcement can use to protect people, their property, our borders, and our nation," said the committee chair, Jason Chaffetz, adding that in the private sector it can be used to protect financial transactions and prevent fraud or identity theft. "But it can also be used by bad actors to harass or stalk individuals. It can be used in a way that chills free speech and free association by targeting people attending certain political meetings, protests, churches, or other types of places in the public." Furthermore, the rise of real-time face recognition technology that allows surveillance and body cameras to scan the faces of people walking down the street was, according to Chaffetz, "most concerning." "For those reasons and others, we must conduct proper oversight of this emerging technology," he said. -
'Dig Once' Bill Could Bring Fiber Internet To Much of the US (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: If the U.S. adopts a "dig once" policy, construction workers would install conduits just about any time they build new roads and sidewalks or upgrade existing ones. These conduits are plastic pipes that can house fiber cables. The conduits might be empty when installed, but their presence makes it a lot cheaper and easier to install fiber later, after the road construction is finished. The idea is an old one. U.S. Rep. Anna Eshoo (D-Calif.) has been proposing dig once legislation since 2009, and it has widespread support from broadband-focused consumer advocacy groups. It has never made it all the way through Congress, but it has bipartisan backing from lawmakers who often disagree on the most controversial broadband policy questions, such as net neutrality and municipal broadband. It even got a boost from Rep. Marsha Blackburn (R-Tenn.), who has frequently clashed with Democrats and consumer advocacy groups over broadband -- her "Internet Freedom Act" would wipe out the Federal Communications Commission's net neutrality rules, and she supports state laws that restrict growth of municipal broadband. Blackburn, chair of the House Communications and Technology Subcommittee, put Eshoo's dig once legislation on the agenda for a hearing she held yesterday on broadband deployment and infrastructure. Blackburn's opening statement (PDF) said that dig once is among the policies she's considering to "facilitate the deployment of communications infrastructure." But her statement did not specifically endorse Eshoo's dig once proposal, which was presented only as a discussion draft with no vote scheduled. The subcommittee also considered a discussion draft that would "creat[e] an inventory of federal assets that can be used to attach or install broadband infrastructure." Dig once legislation received specific support from Commerce Committee Chairman Greg Walden (R-Ore.), who said that he is "glad to see Ms. Eshoo's 'Dig Once' bill has made a return this Congress. I think that this is smart policy and will help spur broadband deployment across the country." -
'Dig Once' Bill Could Bring Fiber Internet To Much of the US (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: If the U.S. adopts a "dig once" policy, construction workers would install conduits just about any time they build new roads and sidewalks or upgrade existing ones. These conduits are plastic pipes that can house fiber cables. The conduits might be empty when installed, but their presence makes it a lot cheaper and easier to install fiber later, after the road construction is finished. The idea is an old one. U.S. Rep. Anna Eshoo (D-Calif.) has been proposing dig once legislation since 2009, and it has widespread support from broadband-focused consumer advocacy groups. It has never made it all the way through Congress, but it has bipartisan backing from lawmakers who often disagree on the most controversial broadband policy questions, such as net neutrality and municipal broadband. It even got a boost from Rep. Marsha Blackburn (R-Tenn.), who has frequently clashed with Democrats and consumer advocacy groups over broadband -- her "Internet Freedom Act" would wipe out the Federal Communications Commission's net neutrality rules, and she supports state laws that restrict growth of municipal broadband. Blackburn, chair of the House Communications and Technology Subcommittee, put Eshoo's dig once legislation on the agenda for a hearing she held yesterday on broadband deployment and infrastructure. Blackburn's opening statement (PDF) said that dig once is among the policies she's considering to "facilitate the deployment of communications infrastructure." But her statement did not specifically endorse Eshoo's dig once proposal, which was presented only as a discussion draft with no vote scheduled. The subcommittee also considered a discussion draft that would "creat[e] an inventory of federal assets that can be used to attach or install broadband infrastructure." Dig once legislation received specific support from Commerce Committee Chairman Greg Walden (R-Ore.), who said that he is "glad to see Ms. Eshoo's 'Dig Once' bill has made a return this Congress. I think that this is smart policy and will help spur broadband deployment across the country." -
'Dig Once' Bill Could Bring Fiber Internet To Much of the US (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: If the U.S. adopts a "dig once" policy, construction workers would install conduits just about any time they build new roads and sidewalks or upgrade existing ones. These conduits are plastic pipes that can house fiber cables. The conduits might be empty when installed, but their presence makes it a lot cheaper and easier to install fiber later, after the road construction is finished. The idea is an old one. U.S. Rep. Anna Eshoo (D-Calif.) has been proposing dig once legislation since 2009, and it has widespread support from broadband-focused consumer advocacy groups. It has never made it all the way through Congress, but it has bipartisan backing from lawmakers who often disagree on the most controversial broadband policy questions, such as net neutrality and municipal broadband. It even got a boost from Rep. Marsha Blackburn (R-Tenn.), who has frequently clashed with Democrats and consumer advocacy groups over broadband -- her "Internet Freedom Act" would wipe out the Federal Communications Commission's net neutrality rules, and she supports state laws that restrict growth of municipal broadband. Blackburn, chair of the House Communications and Technology Subcommittee, put Eshoo's dig once legislation on the agenda for a hearing she held yesterday on broadband deployment and infrastructure. Blackburn's opening statement (PDF) said that dig once is among the policies she's considering to "facilitate the deployment of communications infrastructure." But her statement did not specifically endorse Eshoo's dig once proposal, which was presented only as a discussion draft with no vote scheduled. The subcommittee also considered a discussion draft that would "creat[e] an inventory of federal assets that can be used to attach or install broadband infrastructure." Dig once legislation received specific support from Commerce Committee Chairman Greg Walden (R-Ore.), who said that he is "glad to see Ms. Eshoo's 'Dig Once' bill has made a return this Congress. I think that this is smart policy and will help spur broadband deployment across the country." -
'Dig Once' Bill Could Bring Fiber Internet To Much of the US (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: If the U.S. adopts a "dig once" policy, construction workers would install conduits just about any time they build new roads and sidewalks or upgrade existing ones. These conduits are plastic pipes that can house fiber cables. The conduits might be empty when installed, but their presence makes it a lot cheaper and easier to install fiber later, after the road construction is finished. The idea is an old one. U.S. Rep. Anna Eshoo (D-Calif.) has been proposing dig once legislation since 2009, and it has widespread support from broadband-focused consumer advocacy groups. It has never made it all the way through Congress, but it has bipartisan backing from lawmakers who often disagree on the most controversial broadband policy questions, such as net neutrality and municipal broadband. It even got a boost from Rep. Marsha Blackburn (R-Tenn.), who has frequently clashed with Democrats and consumer advocacy groups over broadband -- her "Internet Freedom Act" would wipe out the Federal Communications Commission's net neutrality rules, and she supports state laws that restrict growth of municipal broadband. Blackburn, chair of the House Communications and Technology Subcommittee, put Eshoo's dig once legislation on the agenda for a hearing she held yesterday on broadband deployment and infrastructure. Blackburn's opening statement (PDF) said that dig once is among the policies she's considering to "facilitate the deployment of communications infrastructure." But her statement did not specifically endorse Eshoo's dig once proposal, which was presented only as a discussion draft with no vote scheduled. The subcommittee also considered a discussion draft that would "creat[e] an inventory of federal assets that can be used to attach or install broadband infrastructure." Dig once legislation received specific support from Commerce Committee Chairman Greg Walden (R-Ore.), who said that he is "glad to see Ms. Eshoo's 'Dig Once' bill has made a return this Congress. I think that this is smart policy and will help spur broadband deployment across the country." -
Bill Would Legalize Active Defense Against Hacks (onthewire.io)
Trailrunner7 quotes a report from On the Wire: A new bill intended to update the Computer Fraud and Abuse Act would allow victims of computer attacks to engage in active defense measures to identify the attacker and disrupt the attack. Proposed by Rep. Tom Graves (R-Ga.), the bill would grant victims of computer intrusions unprecedented rights. Known as the Active Cyber Defense Certainty Act, the legislation seeks to amend the CFAA, the much-maligned 1986 law that is used in most computer crime prosecutions. The proposed legislation includes the caveat that victims can't take any actions that destroy data on another person's computer, causes physical injury to someone, or creates a threat to public safety. The concept of active defense has been a controversial one in the security community for several years, with many experts saying the potential downside outweighs any upside. Not to mention that it's generally illegal. -
Congressman Calls For Probe Into Trump's Unsecured Android Phone (cnet.com)
An anonymous reader quotes a report from CNET: President Donald Trump regularly makes news because of his tweets. Now a congressman is making news because of the device the president reportedly uses to tweet. On Friday, Congressman Ted Lieu, a Democrat from Los Angeles, wrote a letter to the House Oversight Committee requesting an investigation into Trump's cybersecurity practices. In particular, he calls out Trump's apparent decision to keep using his personal Android phone instead of a secured phone the Secret Service issued him for his inauguration. The letter is also signed by 14 other members of Congress and calls for a public hearing to discuss the issues. "The device President Trump insists on using -- most likely the Samsung Galaxy S3 -- has particularly well documented vulnerabilities," the letter says. "The use of an unsecured phone risks the president of the United States being monitored by foreign or domestic adversaries, many of whom would be happy to hijack the president's prized Twitter account causing disastrous consequences for global security. Cybersecurity experts universally agree that an ordinary Android smartphone, which the president is reportedly using despite repeated warnings from the Secret Service, can be easily hacked." -
Congress Will Consider Proposal To Raise H-1B Minimum Wage To $100,000 (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: President-elect Donald Trump is just a week away from taking office. From the start of his campaign, he has promised big changes to the US immigration system. For both Trump's advisers and members of Congress, the H-1B visa program, which allows many foreign workers to fill technology jobs, is a particular focus. One major change to that system is already under discussion: making it harder for companies to use H-1B workers to replace Americans by simply giving the foreign workers a raise. The "Protect and Grow American Jobs Act," introduced last week by Rep. Darrell Issa, R-Calif. and Scott Peters, D-Calif., would significantly raise the wages of workers who get H-1B visas. If the bill becomes law, the minimum wage paid to H-1B workers would rise to at least $100,000 annually, and be adjusted it for inflation. Right now, the minimum is $60,000. The sponsors say that would go a long way toward fixing some of the abuses of the H-1B program, which critics say is currently used to simply replace American workers with cheaper, foreign workers. In 2013, the top nine companies acquiring H-1B visas were technology outsourcing firms, according to an analysis by a critic of the H-1B program. (The 10th is Microsoft.) The thinking goes that if minimum H-1B salaries are brought closer to what high-skilled tech employment really pays, the economic incentive to use it as a worker-replacement program will drop off. "We need to ensure we can retain the world's best and brightest talent," said Issa in a statement about the bill. "At the same time, we also need to make sure programs are not abused to allow companies to outsource and hire cheap foreign labor from abroad to replace American workers." The H-1B program offers 65,000 visas each fiscal year, with an additional 20,000 reserved for foreign workers who have advanced degrees from US colleges and universities. The visas are awarded by lottery each year. Last year, the government received more than 236,000 applications for those visas.