White House Decides P2P Isn't All Bad?

ethericalzen writes "An article this week at Cnet revealed that the White House doesn't necessarily hate everything about P2P. The Bush Administration apparently has called into question a law, known as the Federal Agency Data Protection Act, that would force all federal agencies to have plans guarding against the risks of P2P file sharing. In a Congressional hearing on IT security threats, the LimeWire founder was questioned about how his service warned users about the files and folders they are sharing. Karen Evans, the chief information officer for the federal government, stated that she was against singling out a particular technology when issuing computer security requirements. As it is the government already has a law which requires federal agencies to report on information security plans and risk assessments known as FISMA."

Comments

So let me get this right...

[Guinness2702]

...filesharing is the number 1 threat of leaking sensitive information. Damn, and I wasted all that money on memory sticks, FTP servers, back doors, and searching busses, taxis and trains trying to get my hands on secret data.

Re:So let me get this right...

[iamacat]

In the context of a computer with classified information, P2P filesharing is a form of back door. Unlike Intranet server-based file sharing, the list of available files can not be centrally audited. Unlike FTP or SMB, programs like FireWire make extraordinary efforts to bypass firewalls, even potentially an HTTP-only proxy. Unlike a memory stick, computers can not be physically modified to prevent running P2P (unless you make federal employees use XBOX 360's with up-to-date firmware).

A federal agency blocking LimeWire and BitTorrent is a lot different from Comcast blocking LimeWire and BitTorrent and it's frustrating to see Bush administration going after the wrong thing. Let security-hardened versions of P2P be tried and tested in corporate world and then perhaps it will be ready for government use. I am thinking a version of BitTorrent where clients first share an encrypted file with each other and then get the decryption key and verify checksum from an Intranet server with a known public key.

Not the "stance" of the Bush administration.

[Anonymous Coward]

This was an off-the-cuff remark made by an individual who is loosely associated with the Bush administration. It is clearly not the stance of the administration, nor of the Republican Party as a whole.

Email

[Colin Smith]

Peer to peer... The single largest distribution network for files and other information.

This is why government isn't always a good thing.

Re:Email

[mixmatch]

As far as I know email is a server-based network. P2P got its name from the ability of clients to connect with each other directly without the use of a server. There are server-like services that assist the clients in finding each other and function as proxies for data, but often-times these also function as clients. By your definition, anything transfered on the Net is peer to peer.

Conspiracy Theories

[MyNameIsFred]

I wish everyone who believes in grand conspiracy theories could work in Washington DC for a couple of years. They would then realize that most conspiracies are a load of bull. The vast majority of the government is run by civil servants that are NOT political appointees. And having worked in Washington, if you get a stupid political appointee as a boss, the system has a lot of inertia, and tends to wait them out. Look at the track record for most appointees, based on my experience, most of them don't last four years. A couple of years is normal. Its easy for the bureaucracy to drag its feet for a couple of years. With a new appointee, you get new priorities. Problem solved. That and Washington leaks like a colander. Keeping a secret is impossible.

Limewire has no business in the government

[MikeRT]

There is absolutely not a single good reason for anyone outside of a handful of employees at the Department of Justice who investigate copyright infringement and pornography to have Limewire installed on a government machine. That is precisely how the head of Limewire should have responded to Congress.

There are some limited applications for P2P in the government, but not an implementation like Limewire.

But then, why am I not surprised that Congress once again doesn't do the job we pay them to do? See, this is why I have come to the conclusion that maybe we need to call a new constitutional convention through state legislatures, and add in a constitutional amendment that contains an entire article of civil and criminal liability for each part of the body politic.

Personally, I think legislators ought to be held civilly and criminally liable where necessary for the negative outcomes of their laws. They don't hesitate to hold engineers, doctors, programmers, etc. accountable for their mistakes. Here's turnabout for them:

1) Establish two legal distinctions: misdemeanor and felony unconstitutionality. The distinction is that felony unconstitutionality is a blatant, obvious to anyone, violation of the constitution such as passing a gun ban in direct violation of the 2nd amendment or outlawing political speech. Everytime a law is declared unconstitutional, everyone who voted for it gets effectively put on trial. If it's at the Supreme Court, everyone gets sanctioned, without right to a trial, for supporting it. I mean, at that point, how could you argue that they should get their day in court when it is the SCOTUS ruling against their law?

2) Allow private citizens to sue members of Congress for loss of life, liberty, property and/or emotional distress caused by the enforcement of any unconstitutional law.

3) Declare that the only political activity that can be legally done while Congress is in session is government-related work. Make campaigning effectively timecard fraud that can cost the legislator their position. Allow the leadership of both parts of Congress to sanction members who go on a tangent like Arlen Spectre going after the NFL. Repeat offenders can be censored from entering Congress for up to one month. Imagine going back home to your district, and having to explain why you were so off topic from what is constitutional, that the Speaker of the House told you to shut up and go home. That's great for reelection.

Again, Executive incompetence = more Legislation

[gr8scot]

My favorite part of the article was the hyperlink text at the bottom of page one leading to page two, which suggests two interpretations of the situation that are both completely wrong.

CONTINUED: Blame P2P users or software makers?... BS. Blame sysadmins who give their end-[L]users Administrator privileges. Not rights, privileges. Government employees don't own those computers, or those data. I do, along with the rest of the taxpayers. Administrator privileges to a government laptop by its daily user are completely inappropriate. Every software package on every government computer should be approved through a bureaucratic process as time-consuming as the worst urban myth about the Motor Vehicle Department and building permits put together. And, this is not uniquely a government problem, it's one of many symptoms of a cultural problem, specifically entitlement mentality. There is no good reason to have administrator access to a computer you have not personally purchased, but I hear a cacophony of pseudo-populist whining whenever I say that to semi-literate, entry-level keyboard operators.

Evidence that sensitive information is accessible through peer-to-peer networks illustrates "the importance of strengthening the laws and rules protecting personal information held by federal agencies" and other organizations, said Rep. Tom Davis (R-Va.), the committee's ranking member, who has sponsored a bill that would impose new requirements on government agencies that discover security breaches. "We need to do this quickly." You need to do it right, and be sure to include a few clear, simple guidelines preventing -- not just prohibiting -- the installation of software by the end user, by limiting them to Limited User status.