Slashdot Mirror


House Overwhelmingly Passes Cybersecurity Bill

eldavojohn writes "The Caucus, a NY Times Blog, is reporting on the overwhelming majority vote (422 yeas) the House gave a new cybersecurity bill. The Cybersecurity Enhancement Act, H.R. 4061 has a number of interesting provisions. Representative Michael Arcuri, a Democrat of New York who sponsored the bill called cybersecurity the 'Manhattan Project of our generation' and estimated the US needs 500 to 1,000 more 'cyber warriors' every year in order to keep up with potential enemies. The new bill 'authorizes one single entity, the director of the National Institute of Standards and Technology, to represent the government in negotiations over international standards and orders the White House office of technology to convene a cybersecurity university-industry task force to guide the direction of future research.'"

121 of 170 comments (clear)

  1. I wonder by jwinster · · Score: 5, Insightful

    Since this new body is designed to "represent the government in negotiations," I wonder if there's any relation to the ACTA treaty currently discussed behind closed doors.

    --
    Q.E.D.
    1. Re:I wonder by coinreturn · · Score: 3, Insightful

      Since this new body is designed to "represent the government in negotiations," I wonder if there's any relation to the ACTA treaty currently discussed behind closed doors.

      I don't wonder at all.

    2. Re:I wonder by girlintraining · · Score: 5, Insightful

      You don't have to wonder. This is one of the final moves being put in place to distance themselves from public controversy. They're expressly putting treaty powers into the hands of someone who isn't an elected official. When it finally blows open, they'll conduct an investigation, which will be tied up in committee for years. The investigation will continue until it drops off the media radar and people forget about it. In the meantime, no direct criticism can be made of ACTA -- because the investigation hasn't resolved. It's a standard PR move, and it's been done before. If the public demands blood, they'll pin it on the scapegoat -- "We Were Misled" will be the headline. But the treaty will remain.

      This is how bureauacracy deals with things they know will become controversial: They elect a fall guy, and then create a web of deceit to blunt the minds of their critics and hopefully dissipate entirely any demands for their power to be reduced. And most of the time, it works.

      --
      #fuckbeta #iamslashdot #dicemustdie
    3. Re:I wonder by Anonymous Coward · · Score: 1, Informative

      You don't have to wonder. It has nothing to do with ACTA. Really. Read the bill. It's S&T driven: research, education, and having somebody there when standards setting bodies meet.

      You're dreaming if you think that State Dept. listens to NIST. Or that this bill would pass the House without going before Foreign relations committee if it had that kind of reach.

    4. Re:I wonder by Tekfactory · · Score: 4, Informative

      NIST isn't a new entity, they are the US Government's standards body, they are part of the Dept of Commerce, and write all kinds of standards the government has to use.

      So when the government directs their standards body to take part in standards negotiations on their behalf, there is no conspiracy there.

      Take a look at some of what NIST does

      http://www.nist.gov/index.html
      http://www.nist.gov/public_affairs/orgchart.htm

      Also note that like IEEE all of their Technology Special Publications go through public comment periods.

      http://csrc.nist.gov/publications/PubsSPs.html

      One of my favorites is SCAP, its like an XML for Security products that helps to standardize vulnerability reports and security settings so you can check using an array of SCAP compatible tools if your thousands of machines are all patched and up to date as well as running your enterprise security config.

      http://scap.nist.gov/

      I'd be concerned if some new bill made someone ELSE without some of the worlds best test labs, scientists and engineers negotiate standards for the US.

    5. Re:I wonder by davester666 · · Score: 1

      Task one for NIST: declare the BitTorrent protocol as a tool that is primarily used by hackers and terrorists, and thus must not be permitted on American networks.

      --
      Sleep your way to a whiter smile...date a dentist!
    6. Re:I wonder by TheNarrator · · Score: 1

      Treaties are really awful, they are the big loophole in the constitution by which tyranny can be introduced.

      http://www.jpands.org/hacienda/article4.html

      Article VI, paragraph 2 actually stipulates on the issue: "...all Treaties made, or which shall be made, under the Authority of the United States, shall be the supreme Law of the Land; and the Judges in every State shall be bound thereby, any Thing in the Constitution [of any State] or Laws of any State to the Contrary notwithstanding. [Emphasis added.]"

    7. Re:I wonder by girlintraining · · Score: 2, Interesting

      It has nothing to do with ACTA. Really. Read the bill. It's S&T driven: research, education, and having somebody there when standards setting bodies meet.

      The internet has been a thorn in the side of every government since it's creation -- it's a place where people can organize against the government, conduct tax-free business, and freely and anonymously congregate. The only 'standards' the governments of the world are interested in, are ones that allow them a greater degree of control over it.

      Do you really think they give a damn about whether it runs on IPv4, or IPv6, or whether DNS is secure or not?

      --
      #fuckbeta #iamslashdot #dicemustdie
    8. Re:I wonder by sensei+moreh · · Score: 1

      Take a look at some of what NIST does

      Ok - I'll look at http://www.time.gov/timezone.cgi?Central/d/-6/java/

      --
      Geology - it's not rocket science; it's rock science
    9. Re:I wonder by geekoid · · Score: 1

      I don't say this often, but you should be banned from the internet.

      A new body, sheeesh.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    10. Re:I wonder by FatherDale · · Score: 2, Informative

      The State Dept DOES listen to NIST, and was the first federal agency to adopt the NIST SP800 series as the primary guidance for information security issues. State also made up 100% of the panel that built the CAP certification, and built it mainly on SP 800-37.

    11. Re:I wonder by Thinboy00 · · Score: 1

      What's this then? The 10th Amendment is part of the Constitution.

      --
      $ make available
    12. Re:I wonder by Vairon · · Score: 1

      What you linked is consistent with what I said.

      It clearly says that treaties do not override the constitution. treaties may trump state rights, but only when there is not language in the constitution prohibiting the treaty.

      "...the Supreme Court held that the law was in fact constitutional, noting that the treaties clause of the Constitution (Article VI, clause 2), sometimes known as the "supremacy clause," makes treaties the "supreme law of the land," a finding that trumps any state-level concerns with regard to the provisions of any treaty (though it does not trump other provisions of the constitution)..."

      Also Missouri v. Holland was in 1920, since then Reid v. Covert (1957) has made it even more explicit that the Constitution supersedes treaties ratified by the US Senate.

      As I understand it, here's the order of law:
      Constitution
      Treaties ratified by the US Senate
      Federal enumerated powers only
      States all other powers

  2. Re:Why Icecream has no bones by Anonymous Coward · · Score: 3, Insightful

    Uhmm.....you forgot to check the "Post Anonymously" box.

  3. At least by sleekware · · Score: 1

    It's a step in the right direction...

    1. Re:At least by thehostiles · · Score: 1

      really?
      Hacking: a crime that will get you some jail time and computer probation.
      Cyber Warrior: a profession where you hack and get paid for it by the government.

      If the government wanted to beef up their web security by improving defense, they would hire people titled "engineers"

    2. Re:At least by sleekware · · Score: 1

      Ah, good point.

    3. Re:At least by geekoid · · Score: 1

      Murder: A crime that will get you jail time
      Infantry: a profession where you kill people while being paid by the government.

      Seriously, nothing new here.

      They do hire people titled "engineers"
      Dont' get caught up in the reporting of these things.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  4. I need a job and this one fits my life to a tee. by JDeane · · Score: 2, Interesting

    Where do I sign up?

  5. Cyber Warrior positions available? by PingSpike · · Score: 4, Funny

    I knew all those years playing Quake would come in handy eventually.

    1. Re:Cyber Warrior positions available? by Hurricane78 · · Score: 2, Insightful

      I think you mean System Shock 1!

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
    2. Re:Cyber Warrior positions available? by ArundelCastle · · Score: 1

      Can you imagine handing out shiny new business cards?
      -----
      [DHS logo]

      Bill "FraggleR0x0rs" Ferguson

      Cyber Warrior
      U.S. Government

      Cell: ### Skype: ### AIM: ###
      -----

      Dude, awesome.

    3. Re:Cyber Warrior positions available? by Alsee · · Score: 2, Funny

      I am Cyber Warrior. I was once likely to be eaten by a grue.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  6. eeep by the_Bionic_lemming · · Score: 3, Funny

    The house overwhelmingly approved? That means it'll add to the deficit, be largely useless, and misused by RIAA.

    God help us all.

    --
    _ _ _ Go for the eyes Boo! GO FOR THE EYES!
    1. Re:eeep by interkin3tic · · Score: 1

      That means it'll add to the deficit

      By this, do you mean to imply there's a tax cut hidden in there somewhere?

  7. Cyber Warriors.... by neogeographer · · Score: 5, Funny

    Come out to playyyyyyyyy

    1. Re:Cyber Warriors.... by DarrenBaker · · Score: 1

      Why is it that the Government, when referring to IT matters, always uses terminology like that... What is this, the United States of Johnny Mnemonic?

    2. Re:Cyber Warriors.... by sconeu · · Score: 1

      Alas, most Slashdotters are too young to get your reference.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    3. Re:Cyber Warriors.... by Jawn98685 · · Score: 1

      Dude,
      Tell me that you didn't not get the "Warriors" reference...
      More seriously, would you prefer cyber "cops"? Cops or warriors, the terminology does, in my mind, trivialize this truly global contest (war, battle, struggle, whatever). As others have observed, there is some serious talent out there and it is well motivated. Unless/until there is similar motivation for those inclined to wear white hats, things are going to get worse, not better. The military will (just like in Gibson's novels) understand the threat and build or buy the best defenses. Big Corporate World will, eventually, come to a similar conclusion and pony up, though signs seem to indicate that this will be later, rather than sooner. The rest of us are on our own. "The government" can't/won't throw enough resources at the problem to keep the spam bots off grandma's PC. And honestly, I am not sure I want anyone, especially the government, that close (as in close enough to make a difference) to my edge of the network.

    4. Re:Cyber Warriors.... by nine-times · · Score: 1

      Wrong movie. Cyber warriors are like road warriors except the "road" is the information super-highway. Now, I know that's confusing because the Internets are more like tubes than like dumptrucks, but still, the Internet is exactly like a highway for information only superer.

      So much as you'd expect, these cyber warriors will be riding around in cyber-cars (aka computers) trying to hoard cyber-gasoline, and perhaps trying to get revenge for their murdered cyber-wives. I know, it sounds funny, but you'd totally understand if you were a hacker who was familiar with cyberspace. The most important thing is to make sure all the T1s don't break through your firewalls and get access to your IP addresses.

    5. Re:Cyber Warriors.... by DarrenBaker · · Score: 1

      What? Yeah, I got the reference.

      It's stupid chest-beating bill-marketing terminology aimed below most people's intellect, because that's how the bill authors see us. The intent and effect of the bill is irrelevant here. It just irks me that they feel they need to dumb it down for us. Instead of 'Information Technology Security Official', it's 'Cyber Warrior'. How gauche.

    6. Re:Cyber Warriors.... by tyrione · · Score: 1

      He probably wasn't born to see the movie when it first aired back in the days when our cable boxes were rotary dials.

    7. Re:Cyber Warriors.... by tyrione · · Score: 1

      Wrong movie. Cyber warriors are like road warriors except the "road" is the information super-highway. Now, I know that's confusing because the Internets are more like tubes than like dumptrucks, but still, the Internet is exactly like a highway for information only superer.

      So much as you'd expect, these cyber warriors will be riding around in cyber-cars (aka computers) trying to hoard cyber-gasoline, and perhaps trying to get revenge for their murdered cyber-wives. I know, it sounds funny, but you'd totally understand if you were a hacker who was familiar with cyberspace. The most important thing is to make sure all the T1s don't break through your firewalls and get access to your IP addresses.

      And you thought he was interested in an analogous reference? It was meant to be tongue-firmly-in-cheek.

    8. Re:Cyber Warriors.... by Dalambertian · · Score: 1

      I do wonder whether the government is capable of guiding the future of IT security, especially if they insist on having their own back-door as a matter of national security. I really had no idea how vulnerable we were until I saw this lecture http://www.demoscene.tv/prod.php?id_prod=13914 and his discussion of mebroot.

    9. Re:Cyber Warriors.... by nine-times · · Score: 1

      And you thought I was attempting a serious rebuttal?

    10. Re:Cyber Warriors.... by neogeographer · · Score: 1

      Slashdot: Stuff that REALLY matters

    11. Re:Cyber Warriors.... by XxtraLarGe · · Score: 1

      Wrong movie. Cyber warriors are like road warriors except the "road" is the information super-highway. Now, I know that's confusing because the Internets are more like tubes than like dumptrucks, but still, the Internet is exactly like a highway for information only superer.

      Wouldn't that make them Tube Warriors? I mean, the Internet is like a series of tubes, or so I've been told...

      --
      Taking guns away from the 99% gives the 1% 100% of the power.
    12. Re:Cyber Warriors.... by countertrolling · · Score: 1

      ...that's how the bill authors see us.

      Well, considering how many times we reelect these goofs, it seems to be more of a matter of how we present ourselves. It's not "dumbing down". It's marketing, and rather successful at that.

      --
      For justice, we must go to Don Corleone
    13. Re:Cyber Warriors.... by DarrenBaker · · Score: 1

      I know... It's a vicious cycle. But don't kid yourself - It's dumbing down in the name of marketing.

  8. Re:I need a job and this one fits my life to a tee by chill · · Score: 3, Interesting
    --
    Learning HOW to think is more important than learning WHAT to think.
  9. So now suddenly it's OK again? by moz25 · · Score: 3, Interesting

    Too little, too late.

    For more than a decade, effort was done to *weaken* the domestic talent at developing themselves or helping (causing) to harden the existing infrastructure.

    1. Re:So now suddenly it's OK again? by Anonymous Coward · · Score: 1, Interesting

      Standard operating procedure: Eradicate what's there, bring in your own guys.

    2. Re:So now suddenly it's OK again? by GovCheese · · Score: 5, Informative

      The federal government hasn't done a particularly good job advertising their Scholarship for Service Federal Cyber Service program where promising cyber students are given scholarships in return for a promise to give the government 2 years of service as federal employees in a cyber security related position. Few in the IT field even know it exists. But it's an exceptional idea and most government agencies are lobbying for expanding it to bring in even more students. The federal government isn't entirely incompetent or bereft of good ideas or lacking the will to implement them. The SFS Cyber Service program is one of their success stories.

      --
      "He's using a quantum encryption scheme! That'll take hours to break!"
    3. Re:So now suddenly it's OK again? by Anonymous Coward · · Score: 1, Interesting

      As someone who transitioned through the program, yes it is an excellent system. The problem is that it is very difficult to find clearable talent in the the field, so to remedy the situation they expanded who can be accepted to the program.
      As of now, the SFS program is filthy with Business degrees and the CS, ECE, CompE degrees are a rarity. Somehow i don't think the business kids are quite the "Cyber Warriors" that everyone is talking about.

    4. Re:So now suddenly it's OK again? by Anonymous Coward · · Score: 3, Informative

      It gets better:

      H.Amdt. 545:
      An amendment numbered 1 printed in House Report 111-410 to address the lack of minority representation in the cybersecurity industry including women and African-Americans, Hispanics, and Native Americans. The amendment adds language in Sec. 107 to describe how successful programs are engaging said minorities and in Sec. 108 to include minority-serving institutions on the Cybersecurity University-Industry Task Force.

      Yay, more quotas.

      H.Amdt. 548:
      An amendment numbered 4 printed in House Report 111-410 to require the National Science Foundation to study ways to improve detection, investigation, and prosecution of cyber crimes including piracy of intellectual property, crimes against children, and organized crime.

      Won't someone think of the children? And "This bill brought to you by the MPAA/RIAA".

    5. Re:So now suddenly it's OK again? by shaitand · · Score: 1

      They should up the ante a bit on this. Since they want four year degrees the should pay for 4 yrs of schooling. If they want you to have completed two years on your own to show commitment that is fine but they should reimburse those two years after successful completion. They could even up the service requirement to four years to match.

      It just doesn't make sense to stick people in low paying government jobs with student loans to pay as their reward.

    6. Re:So now suddenly it's OK again? by countertrolling · · Score: 1

      ...filthy with Business degrees...

      So 2 years at Goldman Sachs or AIG trashing the economy will cover the student's obligations? Or do they have to chair the Fed?

      --
      For justice, we must go to Don Corleone
  10. Private sector by gmuslera · · Score: 4, Funny

    A private company could be delegated for most of the dirty stuff. OCP, Cyberdyne, and Umbrella Corporation already proposed themselves for that task.

    1. Re:Private sector by Blakey+Rat · · Score: 1

      Did Weyland-Yutani bid on it?

    2. Re:Private sector by jellomizer · · Score: 1

      That is knda why the government hires contractors. If they are caught it is those immoral contractors, if they are not they perform a valuable asset to the country... Even if they do get caught and take the PR mess they hire them again as all they did was what they were hired to do.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    3. Re:Private sector by EventHorizon_pc · · Score: 1

      So did Aperture Science Laboratories, but we all know Black Mesa will get the job.

  11. Re:I need a job and this one fits my life to a tee by Anonymous Coward · · Score: 3, Insightful

    https://www.sfs.opm.gov/

    I went through this program. Got a FREE MS in CompSci in 3 semesters, interned at NIST for a summer and ended up working for NSF for a couple years. Started at NSF and a GS-9, was GS-12 within 2 years.

  12. Re:Why Icecream has no bones by fibrewire · · Score: 3, Interesting

    Nah, I just get sick of cybersecurity bill garbage - not like anyone on slashdot is going to do anything about it.

  13. Google attack? by antiaktiv · · Score: 3, Interesting

    Would it have had as much support without the recent (allegedly chinese) attack against Google and other companies?

    BYOCT... (Bring your own conspiracy theory)

    1. Re:Google attack? by shaitand · · Score: 1

      ALLEGEDLY Chinese?

    2. Re:Google attack? by BhaKi · · Score: 1

      ALLEGEDLY Chinese?

      The same people who said there were WMDs in Iraq are saying the attacks are from China. So the 'allegedly' adverb should be used. My personal opinion is that the whole China-Google episode is a desperate joint attempt by NSA, CIA and Google.

      To what end?

      To make Americans boycott Chinese products and go for local ones.

      --
      The largest prime factor of my UID is 263267.
    3. Re:Google attack? by shaitand · · Score: 1

      The Chinese have been caught with their hands in so many U.S. digital cookie jars in the past few years I fail to see what difference it makes.

      I also fail to see how it benefits the NSA to make public the fact that Google was compromised through NSA backdoors in their gmail system.

  14. Re:Orders? by mujadaddy · · Score: 3, Insightful

    Hi, I'm Separation of Powers, and I take laws that Congress makes and give them to the Executive branch so they can enforce them.

    In other news, you really don't know what those words you said mean, do you?

    --
    Populus vult decipi, ergo decipiatur...
    "Force shits upon Reason's back." - Poor Richard's Almanac
  15. Where is their test environment? by zerointeger · · Score: 2, Insightful

    Since when does using a fuzzer to modify http headers constitute as a l337?

    So do I have to give up my computer while somebody that wants to test out their l337 skillz essentially destroying my development server and hard work without compensation?

    Where are the bills protections to me as a non-felon, voting, tax-payer?

  16. Re:Shivers... by Narnie · · Score: 1

    If we don't act now, we will fall behind and develop a cave^H^H^H^Hcyber gap. Once the nuclear winter clears, the Ruskies^H^H^H^H^H^H^H Hackers will invade and we will have a serious disadvantage! And every cyber warrior should have 10 women to impregnate. Of course these will have to be attractive women to encourage procreation.

    --
    greed@All_Evils:~#
  17. Bleh by Anonymous Coward · · Score: 2, Interesting

    It's incredibly difficult to do something in an official, bureaucratic capacity without making your plan (and your goals) seem ridiculous, and your knowledge of the problem laughably ignorant. The internet is championed as a communication medium designed to be 'un-patrolable,' and any system that inspires hollywood-type 'hacking' will be immediately, firmly, and justifiably criticized by those who value it for exactly that reason. It sounds like our politicians are convinced that China has a few more 'cyber-warriors' than us, so we need to get in on that arms-race and move some of those crazy xbox kids away from shooting zombies so they can make pew pew at the holes China's punching in the giant 'firewall' UI buried under Nebraska. Why does the language of our policy, the words coming from the mouths of our representatives, have to be so over-simplified? Why can't the media hire somebody who knows what the hell they're talking about, and have him explain it in language appropriate for the content? Aren't the people who actually care about the issue, and so become its audience, the same people who are insulted by the simplified method in which its presented? Honestly, if you want my Grandmother to read an article in your newspaper, fine, if you want her to vote for you, fine, but don't spoon-feed me BS and tell me it's good for me.

    1. Re:Bleh by starfliz · · Score: 1

      not enough citizens care. to have proper citizens people need to be educated on civics, logic, and management. The government(s) are in charge of our schools. This is the foundation on which all problems rest.

  18. What the heck is a Cyber Warrior? by Qualin74 · · Score: 2, Informative

    Can someone tell me WTF a "Cyber-Warrior" is? Seriously. Like, what is it.. A bunch of script-kiddies running 1337 ha0r tools? Or someone who just knows how to pingflood? If they really want to be concerned about "Cyber Security", why don't they nuke all the computers running Bot nets? Why don't they go after the jerkoffs running the C&C servers? Why don't they set up Honeypots acting as spam traps and go after all those spammers clogging up the pipes? Why don't they go after the RBN equivalents out there? Nobody would dare to sue a military unit, would they? Am I missing something here?

    1. Re:What the heck is a Cyber Warrior? by Akita24 · · Score: 1

      It's like a Road Warrior only different.

    2. Re:What the heck is a Cyber Warrior? by Lord+Ender · · Score: 1

      Right now, it is trivial to get into any medium or large company's datacenter. And it happens all the time. I would imagine that the term "cyber-warrior" would refer to someone skilled in the craft of doing exactly that.

      Are they hiring these people to "hack back" for counter-intelligence purposes? Will they be using these guys to try and get botnets all over countries we have poor relations with for intelligence-gathering purposes? Or are they hiring them merely ramp-up penetration testing efforts against our own systems?

      It's hard to say, but I'm guessing there might be some of each.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    3. Re:What the heck is a Cyber Warrior? by chrisG23 · · Score: 1

      Can someone tell me WTF a "Cyber-Warrior" is?

      Someone involved in any aspect of computer security, which can contain any of the following: penetration testing of systems to determine their vulnerabilites, network monitoring and analysis/intrusion detection, malware analysis, research into new exploits, analysis of botnet infrastructures and so on on the defensive side, and for the offensive side it is scanning target computer systems and networks, enumerating, exploiting, and pwning, either as a script kiddie with tools or as a more real hacker, creating your own tools for the particular system.

      If they really want to be concerned about "Cyber Security", why don't they nuke all the computers running Bot nets?

      International law. They (the FBI) already goes after people operating the C2C servers inside the borders of this country (the USA). Most people don't know it when their computer is infected with a botnet, depending on the botnet.

      Why don't they go after the jerkoffs running the C&C servers? Why don't they set up Honeypots acting as spam traps and go after all those spammers clogging up the pipes?

      I think that is the idea of this whole thing actually.

      Why don't they go after the RBN equivalents out there?

      It is hard to find the ringleaders, and then even if the USA did, they would likely be in Russia, and Russia may not accept our evidence. (Begin rumors without citation) There are some that think the Russian government unofficially supports the RBN, as long as their activities do no mess with Russian interests.(/rumors)

      Nobody would dare to sue a military unit, would they? Am I missing something here?

      Military action is never a good first option, or second, third or fourth option for that matter. There are serious consequences for violating a sovereign nation with an act of war, unless they are really weak and poor and have no friends.

      If there is evidence that countries are beefing up their own cyber warfare capabilities, then it sorta the explicit and implicit responsibility of a government to its people to protect them. You don't see any countries in the world that can afford a military without one do you? Unless they can get it way with it some other way (think Switzerland of countries that are not allowed a sizable military as a condition of their surrender in a previous war by the winning country(ies).)

      Welcome to the future. Its like Robot Jox but without the robots and just the software.

    4. Re:What the heck is a Cyber Warrior? by Lord+Ender · · Score: 1

      Pay me a good salary and give me an interesting job and you can call me the tooth fairy. Your priorities are entirely backwards. Besides, nobody said that was the job title. Troops today have titles other than "warrior," you know.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    5. Re:What the heck is a Cyber Warrior? by mikael · · Score: 1

      Can someone tell me WTF a "Cyber-Warrior" is?

      Somebody who understands how all the Internet protocols work (ssh/sshd, smtp, inet). If you have a Linux system, look at your /etc/services file. Do you know what all those protocols are? Look in your /etc/ssh directory. Are there files there? What are the *_key, *_key.pub files for? What are the hosts.allow, hosts.deny files in your /etc directory for? What is selinux? Or the smb.conf file?
      Do you what all the RFC files are for? What is your /etc/hosts file for? What is dhcp, and how does dynamic IP address allocation work? What is a DHCP server? What is postfix? How would you tell if any of those files were misconfigured or compromised?

      What are the vulnerabilities in all the source code that these are implemented in? How would you look for them? How is malicious code written? In what way can code take advantage of the hardware (Some time ago, there was a security fault where a program could generate a page fault, the kernel interrupt handling this event wouldn't restore the user ID, and thus granted root ownership to the process).

      That is just barely describing the functionality of a basic home Linux system for personal use, let alone a commercial web server, which will have multiple backups (CPU's, disk drives, network connections, backups).

      For someone to gain access and control of a web server, all they have to do is to get a single executable bit of code to execute on that system, that can receive commands from outside, perhaps even allowing remote login.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    6. Re:What the heck is a Cyber Warrior? by mrdoogee · · Score: 1

      !!!!!!ATTENTION CITIZEN!!!!!
      W97M.Marker.o virus has been detected on this system. Airstrike is incoming and a SEAL team has been dispatched to your location. Please assume *PATRIOT* position on the floor and await further orders.

  19. What the * is a Cyber Warrior? by CoffeePlease · · Score: 1

    Just saying it does not make it mean something. We need a new congress.

    1. Re:What the * is a Cyber Warrior? by Anonymous Coward · · Score: 2, Insightful

      That's easy. A Cyber Warrior is someone empowered (for your own protection) to watch your communications, analyze your network of friends for suspicious links, grant your tax money to friendly contractors, seize your dangerous data, and defend your computer against its true enemies (who, as we speak, are probably planning their next attack with exploding wigs instead of flammable jock straps).

      It is an unintended and unfortunate side-effect that Cyber Warriors, in order to keep you safe, require significant funding and additional powers over you.

      Needless to say, we'll require lots of them.

  20. the 'Manhattan Project of our generation' by KharmaWidow · · Score: 1

    So does this mean that they are trying to wreck havoc on our lives like nuclear bombs have? ...Wars, threats of terrorism, devastating economic sanctions, preemptive wars, and cold wars?

    Reminds me of the DEVO song "It's a Beautiful Life"

  21. Rule of law, which Congress writes... by weston · · Score: 1

    I wasn't aware that Congress could order the White House to do anything. What part of the Constitution gives it this power? What about "separation of powers"?

    In theory, we have rule of law in this country, and the executive branch is bound by law, which congress writes, except the Constitution. The theoretical separation of power lies in the fact that the executive is generally part of the legislative process via the veto/signing power.

    In practice, the executive branch has even further freedom pretty broad latitude, arising partly from being the executor of the law, and partly from human sociology (most people have some natural aversion to adversarial actions against high-status individuals) and politics (sure, maybe Bush and Cheney are guilty of war crimes, but you open that can of worms and you're going to start a big fight and potentially find yourself staring down the barrel of similar accusations in the future).

    If anything, the executive branch is stronger in practice than it should be.

    1. Re:Rule of law, which Congress writes... by mcgrew · · Score: 1

      If anything, the executive branch is stronger in practice than it should be.

      I certainly wouldn't argue with that.

    2. Re:Rule of law, which Congress writes... by shaitand · · Score: 5, Insightful

      The entire federal government is dramatically more powerful than it should be. Just look how many powers it has stolen for itself by twisting a simple authority to regulate interstate commercial traffic.

  22. umm wat? by nilbog · · Score: 2, Insightful

    Shouldn't treaties be made by people who are responsible to an electorate? Isn't that the point of our entire system of government? This seems really shady to me.

    --
    or else!
    1. Re:umm wat? by Tekfactory · · Score: 1

      The Director if NIST a confirmed presidential appointee.

      Appointees get chosen by the president and grilled by the Senate, all of whom are elected and in theory responsible to their electorate.

    2. Re:umm wat? by dnahelicase · · Score: 1

      Shouldn't treaties be made by people who are responsible to an electorate? Isn't that the point of our entire system of government? This seems really shady to me.

      Don't use the internet to point out obvious lapses in judgment that the US government might have made. If it seems shady to you it means you have something to hide, and it's because of people like you that we need treaties like ACTA.

      Once the new cyberwarriors can finally get out and patrol the internet we won't have to worry about these weaknesses being released to the pirates.

    3. Re:umm wat? by Late+Adopter · · Score: 1

      The Director of NIST is a Senate-confirmed position. He's responsible to the Secretary of Commerce, and then the President, who is in turn responsible to the electorate (America is not a direct democracy, remember).

      A lot of business is done at the Cabinet level and below, even internationally (we have the State Department, remember, and the Office of the US Trade Representative). Treaties that require more than existing Executive power still have to be implemented with legislation.

  23. Separating reality and fantasy by Angst+Badger · · Score: 4, Insightful

    Every time I hear a government official -- or, for that matter, anyone else -- refer to a "cyber warrior" outside of the context of a game or movie review, I want to take their television away from them until they're old enough to tell the difference between reality and fantasy. And in the case of this buffoon and his thousand extra cyber warriors per year, he also needs to read The Mythical Man-Month before he's allowed to leave his room.

    --
    Proud member of the Weirdo-American community.
    1. Re:Separating reality and fantasy by spinkham · · Score: 1

      I'm sure that kenetic response for network threats is part of the US strategy. Though we don't use swords much anymore...

      --
      Blessed are the pessimists, for they have made backups.
    2. Re:Separating reality and fantasy by Lord+Ender · · Score: 1

      If anyone is living in fantasy, it's you. Computer systems are compromised all the time here in reality. Sometimes it's by bored teenagers, sometimes it's by the mafia, and sometimes it's by foreign governments and their proxies. There is nothing of fantasy about hiring people with those skills; they could help you secure your own systems and gather intelligence on your enemies.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    3. Re:Separating reality and fantasy by lennier · · Score: 1

      Because 'cyber warrior' sounds better than 'script herder'.

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    4. Re:Separating reality and fantasy by frank_adrian314159 · · Score: 1

      When I hear politicians calling soldiers "warriors" it makes me want to puke, as well. Being a soldier has been (and still is) a noble short-term profession. But we should always look at employing soldiers as, at best, a necessary evil. Give the guys that do it respect, but don't elevate them to exalted levels. And make no mistake, using the term "warrior" seeks to do this. We should never elevate the military above the political. I don't want to become an empire ruled by exalted military commanders (though the Congress seems to be showing too much deference and moving in this direction these days).

      --
      That is all.
    5. Re:Separating reality and fantasy by geekoid · · Score: 1

      If they where throughinh 1000 people at on single project, you would be correct.

      This is about 100's of new projects and needing the man power. You can have multiple teams working on separate projects and be successful.

      Please tell me you don't think 1000 people will al be working on the same project? That would be a hell of a funny way to do paired programming.

      Yes, cyber warrior is a lame name. No doubt about it.

      OTOH:
      "Cyber Warrior needs Dew, badly"

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    6. Re:Separating reality and fantasy by Angst+Badger · · Score: 1

      My objection was to the terminology, not the notion of the threat. Americans have this very unproductive habit of trying to cast every struggle in terms of a war of some kind: the war on drugs, the war on terror, even the war on cancer. The problem is that warfare is not a very effective model for much of anything except actual war, where it is arguably not terribly effective at anything except wasting lives and resources. Securing a system is not in any way like warfare. It is a whole lot like engineering, mathematics, and systems analysis, among other disciplines.

      If the congressional bozo in question had called for engineers, technicians, and scientists, that would have been fine. Instead, he called for "warriors", which is at best empty rhetoric and at worst betrays a complete failure to grasp the nature of the situation. I know very well that the threats are real. I also know very well that none of those complex, multidisciplinary threats are going to be effectively met by simplistic militaristic thinking.

      --
      Proud member of the Weirdo-American community.
    7. Re:Separating reality and fantasy by Lord+Ender · · Score: 1

      If they intend to counter hacks in an offensive manor, then war really is a fair analogy.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
  24. Google/NSA by Temujin_12 · · Score: 1

    Hmmm.... this would be related now would it?

    Google is finalizing an agreement with the National Security Agency to help the search giant ward off cyberattacks, according to the Washington Post.

    --
    Faith is a willingness to accept something w/o complete proof and to act on it. Reason allows you to correct that faith.
  25. Re:Why Icecream has no bones by poetmatt · · Score: 1

    so the real answer is that you're saying you forgot to check off "post anonymously", then.

  26. Re:Orders? by bsDaemon · · Score: 2, Insightful

    If Congress passes a law which has requirements of the Executive branch, then they are required to meet them. This law contains such a provision. By signing the bill into law, the President is clearly agreeing to the terms. It's not so much an "order" -- and even if it is, Congress has subpoena powers as well as the power of impeachment, so they're fully well able to order people to do things.

    If you really wanted to become the most powerful person in the country, you don't really want to be president. You want to be Speaker of the House, and then also get the chairmanship of the Ways and Means and Appropriations committees. Some other stuff like foreign affairs, defense and intelligence, etc might be nice, but controlling what comes to a vote on the house floor, and the committees which control the purse strings, pretty much everyone would have to just bow down and suck it.

  27. Re:Orders? by starfliz · · Score: 1

    separation refers to the creation of law. Just because the house passes a bill it does not make it a law. The white house has the power to veto. If the white house signs this then it agrees to it. The executive can be overridden of course but that just means the senate and house believe the bill is to important for the executive to have judgement.

  28. Re:Why Icecream has no bones by wizardforce · · Score: 1

    better to be ignorant of it then right?

    --
    Sigs are too short to say anything truly profound so read the above post instead.
  29. Re:Orders? by tyrione · · Score: 1

    Hi, I'm Separation of Powers, and I take laws that Congress makes and give them to the Executive branch so they can enforce them. In other news, you really don't know what those words you said mean, do you?

    Touché.

  30. I give up by Quiet_Desperation · · Score: 1

    I'm done fighting this stuff. I have only two questions. [1] Where do I send a resume to be a cyber warrior and [2] do I get an awesome badge?

    1. Re:I give up by mrdoogee · · Score: 1

      I'd prefer to be a cyber cleric. Or perhaps a cyber thief/rogue. My DPS against servers is pretty low, but I have a great AoE script that gives everybody else +1 against *NIX type mobs.

  31. Re:Orders? by mujadaddy · · Score: 1

    Now, the SCOTUS can order the President to obey the laws

    Andrew Jackson would disagree with that.

    This is Junior high school shit, everyone should know it.

    Congress issues requirements for the Executive branch all the time. Everyone should know this "Junior high school shit."

    --
    Populus vult decipi, ergo decipiatur...
    "Force shits upon Reason's back." - Poor Richard's Almanac
  32. I'll be your John Wayne by elrous0 · · Score: 3, Funny

    the US needs 500 to 1,000 more 'cyber warriors' every year in order to keep up with potential enemies

    I'm ready to serve my country. But if you want me on the team I'll need Top Secret clearance, one of those cool James Bond gun pens, a military uniform so I can get laid in bars, and a lifetime supply of Diet Mountain Dew Code Red and Doritos.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:I'll be your John Wayne by daveatneowindotnet · · Score: 1

      I can assure you, that you will be disappointed in all of these things if you given them.

    2. Re:I'll be your John Wayne by imac.usr · · Score: 1

      What have you got against Doritos?

      --
      I use Macs for work, Linux for education, and Windows for cardplaying.
    3. Re:I'll be your John Wayne by russotto · · Score: 1

      I'm ready to serve my country. But if you want me on the team I'll need Top Secret clearance, one of those cool James Bond gun pens, a military uniform so I can get laid in bars, and a lifetime supply of Diet Mountain Dew Code Red and Doritos.

      Sorry, with your physique the military uniform will only get you laughed at in some bars and beaten up in others. Back in the day the Top Secret clearance might have gotten you laid by one of the KGBs finest, but I think they've cut the budget for that. And you'd probably just shoot your balls off with the pen gun, so you're not getting it.

    4. Re:I'll be your John Wayne by geekoid · · Score: 1

      Jame Bond didn't need a military uniform to get laid.

      OTOH, how freaking cool would it be if the Tuxedo was a military uniform? mm.. ok not too cool.

      "and a lifetime supply of Diet Mountain Dew Code Red and Doritos."

      so a months worth.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  33. too coincidental by JustNiz · · Score: 1

    Does anyone else also think its entirely too coincidental for the progress of the new cybersecurity bill, that a large scale hack of a giant US company (Google) was supposedly perpetrated by a comunist country a mere couple of weeks before the bill goes before the house?

    1. Re:too coincidental by geekoid · · Score: 1

      no, it was in the works and the outcome isn't unexpected.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  34. Cyber Warriors??? by Khan · · Score: 1

    Phft! All you need is Jack Bauer and CTU. THAT'LL teach them not to mess with the US! ;-)

    --

    "Klaatu, verada, necktie!" -Ash

  35. Re:Why Icecream has no bones by thePowerOfGrayskull · · Score: 1

    Why do I have to do this? I don't know, but I do. Alas, Ruth Cleveland died in 1904, while the Baby Ruth candybar made its debut in 1921. Its predecessor dates back to 1916 presumably, at the founding of Curiss Candy.

  36. NIST is not new by forand · · Score: 1

    NIST is not a new agency and has been around for some time. They are responsible for keeping track of US time and other standards. If the directory of NIST is anything like those I know who work there I do not think this will be anywhere near as bad as you imply. Finally ACTA has nothing to do with "international standards" and everything to do with copyright law.

  37. This is how all treaties are made. by pavon · · Score: 3, Insightful

    I have mod points, but this sentiment has been stated several times in this thread, and I haven't seen an adequate response.

    All treaties are negotiated by the executive branch on behalf of the president - it's in the constitution. They are then approved by Congress. This bill isn't taking power away from congress - they never had power to negotiate treaties to begin with and will still approve any negotiated by the NIST. If anything, this might be interpreted as taking power from the President as it limits who can negotiate treaties on standards on his behalf. In practice, this is a boring area and he will gladly let the NIST handle it, until a special case comes up at which point it will be within his constitutional power to appoint someone else if he wants, regardless of what this law says.

  38. Safety first by shutdown+-p+now · · Score: 1

    Good to know that we can finally cyber safely, thanks to the Congress!

  39. Cyber warrior...stupid name... by cgrant · · Score: 1

    Please people, tell your Washington representatives and senators that the term is stupid and sounds like it came from a 1980's GI Joe cartoon. Lets come up with something else other than using "cyber" and "warrior" to describe a technical, professional, information security job function.

    1. Re:Cyber warrior...stupid name... by mrdoogee · · Score: 1

      I perfer "TCP/IP Shaman"

  40. News Flash: 1,000 new cyber warrior H1B... by sgt_doom · · Score: 1

    ...visas issued. How do you say "cyber warrior" in Punjabi?

    Politically correct need not reply -- the class war has been in progress for quite some time now....how many CEOs did you off today?

  41. Alternative to the Bill? by myspace-cn · · Score: 1

    for windows put boxes behind hardware firewalls and keep them updated with wu and secunia psi
    for linux boxes iptables + filters
    for fbsd pf
    for passwords keepassx burnt to CD
    for banking a VM
    for shoping a VM
    for taxes a VM
    for data a clone backup

    The problem is there's no leadership because everyone's become frickin fascists instead of engineers. Allowing laws to be nanny state instead of following the constitution.

    1. Re:Alternative to the Bill? by gmuslera · · Score: 1

      only the 1st rule is needed, put the windows boxes behind fire walls

  42. Underlying problem remains unsolved by indil · · Score: 1

    'Cyber', 'warriors', and 'troops' are embarrassing and funny, however this bill's focus on educating people about these issues is laudable, and I'm glad malicious behavior in other countries is a growing concern. But the way I see it, computer security laws disincentivize us from innovating technologies that remove known exploits, and instead we patch things up and wait for the same exploit to show up another day. Buffer overflows, injection attacks, spam, denial of service, malware, viruses, these are things we've chosen to prevent by punishment, rather than by enforcing survival of the fittest for the underlying technologies. I will have to deal with spam probably for the rest of my life, because law enforcement can only target so many spammers, and the smaller ones can get by. The responsibility is on the government to enforce good behavior, so there's no incentive for us to make anything better for ourselves.

  43. Re:Why Icecream has no bones by cjb658 · · Score: 1

    Why would there be bones in ice cream? It's not made with animal parts.

  44. Re:Orders? by Chris+Burke · · Score: 1

    Now, the SCOTUS can order the President to obey the laws congress passes (and he or his predecessors sighn), but Congress can't order him.

    From the text you yourself quoted:

    "The new bill ... orders the White House office of technology to convene..."

    So... where exactly are you getting confused?

    --

    The enemies of Democracy are
  45. that's not bad, actually. by geekoid · · Score: 1

    ", the director of the National Institute of Standards and Technology, to represent the government in negotiations over international standards and orders the White House office of technology to convene a cybersecurity university-industry task force to guide the direction of future research.'""

    that's really good, actually. It beets the last 8 years of ignoring the professionals.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  46. This is dumb by blugu64 · · Score: 1

    This is stoopid I can't find anything in the text of this bill that says anything about cyberwarriors.

    --
    "Personal ownership is a hallmark of conservative capitalism. And I don't believe I am entitled to anything that I did n
  47. Re:Why Icecream has no bones by Cassius+Corodes · · Score: 1

    That was just the style at the time - when he says "how else can you make an ice-cream" he is not implying that it was impossible to do it without, just that it was unheard of at the time. It has since become unfashionable - not to mention the health risks - to use a bone as the stick for the ice-cream so they just use a bit of wood instead. Its quite bizarre how much the world has changed.

    Check it out - its quite interesting: http://en.wikipedia.org/wiki/Icecream#History

    --
    Control is an illusion, order our comforting lie. From chaos, through chaos, into chaos we fly
  48. Re:Orders? by countertrolling · · Score: 1

    If you really wanted to become the most powerful person in the country, work for the DMV. IRS is a close second.

    --
    For justice, we must go to Don Corleone