Cybersecurity and Piracy on the High Seas

Schneier points out an interesting article comparing modern cybersecurity to piracy on the high seas in the early 1800s. The article extends the comparison into projected action based on historical context. "Similarly, in many ways, current U.S. policy on the security of electronic commerce is similar to Adams' appeasement approach to the Barbary pirates. The U.S. government's inability to dictate a consistent cyber commerce protection policy is creating a financial burden on the U.S. private sector to maintain a status quo, when those resources could be used to mount a more-effective Internet-focused defense. In the case of financial fraud on the Internet, the costs associated with fraudulent transactions are currently borne by private companies, which then have to pass those costs on to their customers. This basically creates a system in which the financial institutions are paying a type of 'tribute' to the cyber criminals, just as Adams did to the Barbary pirates."

Comments

You can't have it both ways

[dave562]

Either the government stays out of regulating and securing the internet or they don't. Which one do you really want? Do you want the government to be responsible for internet security enough to give them free reign to the point where they have control over all content? Or do you want to hold private industry responsible for securing their business transactions?

I'm of the opinion that the government should be there to hold private industry liable for any breaches of personal data that leads to fraud. If someone steals my credit information and makes purchases with them, the credit card company should be on the hook for not verifying the identity of the person who made the purchase. The merchant should be on the hook for not verifying the identity of the purchaser. The whole system needs to be changed. Instead of giving out free credit, they need to only give credit to those who ask for it. Turn it from a push to a pull system and validate the hell out of the puller.

On an only semi-related tangant, I'm waiting for the explosion in fraudulant health care claims. The health care cards themselves are simple pieces of paper. It is easy to get a picture idea with your picture and someone else's name on it. With the cost of health care skyrocketting in this country it is only a matter of time before people start getting health services under someone else's name. And I already know what is going to happen... the person whose name got abused is going to be liable for it, not the health providers who okayed the procedure in the first place.