Slashdot Mirror


Internet Kill Switch Back On the US Legislative Agenda

suraj.sun points out a story at Wired that US lawmakers have revived the idea of a government-controlled "Internet Kill Switch," which reads, in part: "The bill, which has bipartisan support, is being floated by Sen. Susan Collins, the Republican ranking member on the Homeland Security and Governmental Affairs Committee. The proposed legislation, which Collins said would not give the president the same power Egypt's Hosni Mubarak is exercising to quell dissent, sailed through the Homeland Security Committee in December but expired with the new Congress weeks later. 'My legislation would provide a mechanism for the government to work with the private sector in the event of a true cyber emergency,' Collins said in an e-mail Friday. 'It would give our nation the best tools available to swiftly respond to a significant threat.'"

62 of 376 comments (clear)

  1. It is just data! by mini+me · · Score: 2, Insightful

    You cannot hurt anyone with data. There is no such thing as a threat via the internet.

    1. Re:It is just data! by hedwards · · Score: 2

      Except that things that can hurt people are. For reasons I can't comprehend there's an awful lot of stuff that's connected to the internet which could result in casualties if it was attacked.

    2. Re:It is just data! by phantomfive · · Score: 4, Insightful

      You cannot hurt anyone with data. There is no such thing as a threat via the internet.

      Ya, nevermind that whole, 'pen is mightier than the sword' thing. It's exactly because data is so powerful that unsavory characters want to stop it. I don't know what is motivating these Homeland Security creatures, but it isn't a sane concern for their fellow men.

      --
      "First they came for the slanderers and i said nothing."
    3. Re:It is just data! by im_thatoneguy · · Score: 4, Interesting

      No but we are at a disadvantage since we depend on private sector infrastructure which isn't coordinated enough to fend off a coordinated attack.

      A government agency working with the ISPs could however respond to a systematic attack on our infrastructure and kill routes which are origins of the attack.

      If a bank is receiving a denial of service attack to all of its servers it doesn't have the authority to order an ISP to start shutting down the source of the attacks. If however there is an attack under way they can notify a central agency whose job is to make an organized response to an organized attack.

      Yes individual organizations need good cyber security response plans--but as we realized during the last economic crisis, just because an organization is critical to society doesn't mean it is acting in such a manner. Nor should they necessarily have to bare the cost of behaving as such.

    4. Re:It is just data! by GiveBenADollar · · Score: 2

      Name one thing you know firsthand is connected to the Internet and could result in casualties if attacked. Sure banks computers could crash, sure amazon could go down, but ICBMs are not going to launch and the power grid wont go down. If anything that could actually cause casualties is connected to the Internet then it shouldn't be.

    5. Re:It is just data! by mlyle · · Score: 5, Informative

      Name one thing you know firsthand is connected to the Internet and could result in casualties if attacked. Sure banks computers could crash, sure amazon could go down, but ICBMs are not going to launch and the power grid wont go down. If anything that could actually cause casualties is connected to the Internet then it shouldn't be.

      http://www.devicesworld.net/

      SCADA (Supervisory Control and Data Acquisition) technology provides the means to monitor and control distributed systems from a central location. They are used widely in the telecommunications, power distribution, oil & gas and transportation industries. SCADA systems are typically deployed with dedicated communication infrastructure, proprietary software and hardware.

      iSCADA, on the other hand is an Internet-based SCADA solution that utilizes the public Internet infrastructure as the data communication medium. It uniquely combines traditional SCADA technology with the open data communication protocols, services and data formats of the public Internet to deliver cost-effective and easy-to-use SCADA solutions. With iSCADA, it is now feasible to monitor and control virtually anything from anywhere in the world.

      This kind of stuff is getting deployed more and more.

    6. Re:It is just data! by Jason+Levine · · Score: 5, Insightful

      Actually, you can hurt people with data. Mainly, people in power. And that's what they're afraid of.

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    7. Re:It is just data! by Nikker · · Score: 2

      I know that many admins might look at this as seeing a nail while holding a hammer but there is always someone more clever than you or me and if that person or people really wanted to they could probably cause some sort of issue. The Internet is for basic communications if you are trying to run a power grid, water utility or anything that people depend on there is no excuse not to air gap. Why some businesses put mission critical services with in earshot of the Internet I'll never know, I would see that as having highly sensitive company meetings in the local town square during a carnival.

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
    8. Re:It is just data! by Fluffeh · · Score: 5, Insightful

      No offence, but I think that for the most part, you Americans have lost the freedoms that you all tout - you just aren't aware of it properly yet.

      You get fondled to get onto a plane, you can't protest the President anywhere near where anyone can see it and so many other things. Sure, you might still have the right to carry guns for the most part, but you have lost the freedoms that really matter.

      For the most part, actually, so has the rest of the world. Such are the times we live in heh.

      --
      Moved to http://soylentnews.org/. You are invited to join us too!
    9. Re:It is just data! by jdpars · · Score: 2

      Except we can and do regularly protest the president. Every damn president. I don't think anyone could do a job over half the country would consider any good.

    10. Re:It is just data! by dch24 · · Score: 2
      Look at the bill. S. 3480 -- Protecting Cyberspace as a National Asset Act of 2010 (also introduced to the house as H.R.5548). To view it, you have to go to thomas.loc.gov and search for it using the Advanced Search, 111th Congress.

      This is more than just "Kill Switch" legislation (don't believe the PR saying it is something else).

      The most interesting part is -- you can't actually read the part about the kill switch. It doesn't say redacted -- IT'S JUST MISSING.
      Ok, here's the basic outline:
      TITLE I--OFFICE OF CYBERSPACE POLICY I don't think we need to hire people just to spew more legislation like this! TITLE II--NATIONAL CENTER FOR CYBERSECURITY AND COMMUNICATIONS
      I don't think we need to expand the DHS to "pat down" the Telcos. No, thanks!
      TITLE III--FEDERAL INFORMATION SECURITY MANAGEMENT

      TITLE III--FEDERAL INFORMATION SECURITY MANAGEMENT

      SEC. 301. COORDINATION OF FEDERAL INFORMATION POLICY.
      (a) Findings- Congress finds that--
      (1) since 2002 the Federal Government has experienced multiple high-profile incidents that resulted in the theft of sensitive information amounting to more than the entire print collection contained in the Library of Congress, including personally identifiable information, advanced scientific research, and prenegotiated United States diplomatic positions; ...

      Sweet! They used 1 Library of Congress as a unit! So anyway, "Sec. 3552. Authority and functions of the National Center for Cybersecurity and Communications" gets to the meat of TITLE III: this new agency has to have some teeth with the guys doing real work in the government.

      TITLE IV--RECRUITMENT AND PROFESSIONAL DEVELOPMENT
      Gives this bill more teeth. Basically adds to the workload of government agencies, making them follow these guidelines. Don't get me wrong -- training about cybersecurity is good. But not this kind of jack-booted cybersecurity.
      TITLE V--OTHER PROVISIONS
      SEC. 239 NATIONAL CYBERSECURITY ADVISORY COUNCIL - creation of another federally-funded "think thank."
      Also gives these new agencies more teeth (Sec. 503).
      Gives them special spending privileges (Sec. 504).

      The bill seems to be missing some major parts at the end, specifically the parts about what happens in an "emergency," changes to CERT, and requirements for supply chain management (to avoid purchasing bugged hardware).

      Subtitle E--Cybersecurity

      `Sec. 241. Definitions.

      `Sec. 242. National Center for Cybersecurity and Communications.

      `Sec. 243. Physical and cyber infrastructure collaboration.

      `Sec. 244. United States Computer Emergency Readiness Team.

      `Sec. 245. Additional authorities of the Director of the National Center for Cybersecurity and Communications.

      `Sec. 246. Information sharing.

      `Sec. 247. Private sector assistance.

      `Sec. 248. Cyber vulnerabilities to covered critical infrastructure.

      `Sec. 249. National cyber emergencies..

      `Sec. 250. Enforcement.

      `Sec. 251. Protection of information.

      `Sec. 252. Sector-specific agencies.

      `Sec. 253. Strategy for Federal cybersecurity supply chain management.'.

    11. Re:It is just data! by Jah-Wren+Ryel · · Score: 3, Interesting

      Yes individual organizations need good cyber security response plans--but as we realized during the last economic crisis, just because an organization is critical to society doesn't mean it is acting in such a manner. Nor should they necessarily have to bare the cost of behaving as such.

      Then we should be taking the opposite approach. Instead of increasing centralisation because parts of the system are "too big to fail" we should be encouraging decentralisation - encouraging more players to get involved and build up redundancy so that if some are compromised we can still maintain functionality in the face of damage.

      --
      When information is power, privacy is freedom.
    12. Re:It is just data! by SuricouRaven · · Score: 2

      I assume he was referring to the practice of 'free speech zones.' They were used extensively by W. Bush, but he was by no means the first. They started out as a safety measure - confining protesters to designated areas in case of any violent incidents should they get carried away. It just didn't take long to realise that it's really not good for the approval ratings for a presidential event to have scores of people holding protest signs, and so the free speech zones were moved. Usually a few blocks away, around a corner, and into a secluded alley. That way the people can protest, but they are kept out of view of the media, and the president gets to gon on TV in front of an adoring crowd with not a protester in sight.

    13. Re:It is just data! by cheekyjohnson · · Score: 2

      I'd honestly rather risk 'dangerous' information being released than let the government have so much control. I trust them less than anyone else, as it should be.

      --
      Filthy, filthy copyrapists!
    14. Re:It is just data! by Joce640k · · Score: 2

      How is the worst possible DOS attack any worse than pulling the plug on the Internet?

      Answer: It isn't...

      --
      No sig today...
    15. Re:It is just data! by vlm · · Score: 2

      Breathing machines, heart regulators and whatever else you have planned won't stop functioning if the internet was shut off.

      Actually, they will, yes.

      Think of spare parts. When was the last time you called / faxed / MAILED an order into Digikey / Mouser / Jameco etc? In "a couple weeks" they could set up a non-VOIP call center to slowly and inaccurately take voice orders over the phone, but for days, commerce will simply shut down. If by some miracle you got an order to Digikey, would they even have a manual process to airmail a contract to China and get a shipping crate back?

      The purpose of JIT inventory control is to "save money" by not keeping many spares. So, when the breathing machine needs a new air valve, the heart regulator needs a new weird lithium battery, or whatever else needs something.... it shuts off.

      Also think of repair contractors, like the stereotypical Xerox repairman but for breathing machine / heart regulator repair maintenance and upgrades. The bottom level of support is the nurse whom flicks the power switch on and off when it doesn't work. Then its escalated upwards, someone gets an email ... errr ... a runner is dispatched ... whatever. At some point in the escalation procedure it simply will not work without the internet. Think of how 20 years ago IBM folks got jobs on their PDAs, and its much worse now.

      So, correct, a working device will keep working. Once it breaks or requires the slightest repair, not so good.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    16. Re:It is just data! by soundguy · · Score: 2

      Then take if OFF the internet. - Both the central Union government and the Member States have the power to regulate the monopolies we call utilities. Pass a rule forbidding them from connecting their power stations online. Ditto any other critical services, like water and sewer.

      Quite a few utilities ARE the internet. Ever hear of Hurricane Electric? They're a substantial provider of discount bandwidth in data centers all over the country. They started by stringing up fiber on their own power poles. Power companies have branched out as end-user ISPs in several cities because, again, they already own the poles and easement rights. I've heard numerous proposals by gas and sewer utilities regarding running fiber thru their existing infrastructure. I wouldn't be surprised if that's already taking off in some places. Sprint (tier-1 provider) began as the Southern Pacific Railroad. They started by laying in fiber along their thousands of miles of railroad right-of-way decades ago and now they handle a sizable percentage of the world's internet traffic.

      You can't just "disconnect" our vital infrastructure and utilities from the internet. they're one and the same.

      --
      Nothing worthwhile ever happens before noon
    17. Re:It is just data! by camperdave · · Score: 3

      Do the words "Throwing the baby out with the bathwater", "The cure is worse than the disease", and "Congress shall make no law ... abridging the freedom of speech..." mean anything to you? Viruses, denial of service attacks, botnets, and hacking require tighter security of the target, not a wholesale shutdown of a communication grid. You don't shut down the phone system because of junk faxes and threatening phone calls. Why would you shut down the internet?

      --
      When our name is on the back of your car, we're behind you all the way!
    18. Re:It is just data! by JAlexoi · · Score: 2

      Yes... I see it now.
      Me - Calling the ISP support line, because all traffic stops at the nearest router
      Me: Hi. I can't get though to the internet for the last few days. The network is connected. Your router responds.
      Rep: Have you tried restarting you modem/router?
      Me: Yes, I said that I am getting through to your router.
      Rep: Please give me your client number:
      Me: It's 1234567
      Rep: Thank,you. ... Yes I see we have received your latest payment. I will log your complaint and call you ASAP.
      Rep(calls back): Hi. Mr JAlexoid. Our network engineers have disabled your local router. Apparently we got a disconnect request from law enforcement, because it was used for DDoS attack two weeks ago. We can't turn it on without their approval...

  2. Great idea! by Grapplebeam · · Score: 2

    So when China takes over our internet, they can't use our machines to gold farm in World of Warcraft! Sarcasm aside, what would the BENEFIT of such a thing be? All it seems to be good for is pretending we don't have a Bill of Rights, specifically the first amendment.

    --
    There is no -1 Disagree.
    1. Re:Great idea! by Black+Parrot · · Score: 2

      Sarcasm aside, what would the BENEFIT of such a thing be?

      a) Someone posts to Slashdot, pointing out that countries are being run for the benefit of the elite; global rioting results.

      b) Politician gets in trouble, corporate-owned media politely decline to cover it, but voters find out about it on the innertube.

      c) Terrists invent a code phrase that makes people's heads explode when they read it.

      d) Solar system passes through a cloud of interstellar gas that makes people lose interest in porn, threatening global economic collapse.

      e) Uhm, I'm really having trouble thinking of good excuses.

      --
      Sheesh, evil *and* a jerk. -- Jade
  3. A significant threat... Um, like the government. by webdog314 · · Score: 5, Insightful

    Seems to me, the biggest threat would be doing EXACTLY what Mubarak is doing now in Egypt.

  4. See the bullshit round language ? by unity100 · · Score: 2

    ... to work with the private sector in the event of ....

    they got used to roundspeak and bullshit because you let them for all these years.

    now all that passing an enemy-of-public bill requires is enough roundspeak, and sufficient number of catchphrases. (jobs, security, emergency, terrorism, nation, economy)

    our democracies are shams.

  5. Re:Expectations were too high. by Amorymeltzer · · Score: 3, Informative

    It doesn't stand a chance. All it needs is for one person to compare a sponsor of this bill to Mubarak and it should be dead in the water. You can't bring something like this up right after all this tumult.

    --
    I live in constant fear of the Coming of the Red Spiders.
  6. From Net Neutrality to Net Fatality by SuperKendall · · Score: 4, Informative

    I can't see any reasonable purpose for a government being able to shut down internet access in broad swathes; any internet "emergency" could (and would) realistically be handled quite well by the array of network providers involved in standing up the internet. Otherwise botnets would have killed us all long ago.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:From Net Neutrality to Net Fatality by Black+Parrot · · Score: 4, Insightful

      I can't see any reasonable purpose for a government being able to shut down internet access in broad swathes; any internet "emergency" could (and would) realistically be handled quite well by the array of network providers involved in standing up the internet. Otherwise botnets would have killed us all long ago.

      The only substantial threat to the internet is censorship (whether by governments or corporations).

      Besides, we've already seen that our telecoms are all too eager to help the government with illegal spying upon the citizenry during an "emergency". What makes anyone think they would hesitate to pull the plug at that same government's behest?

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re:From Net Neutrality to Net Fatality by Seumas · · Score: 2

      Holy fuck, I have a paper cut on my finger -- CUT OFF MY HEAD, QUICK!

  7. This is more likely to be exploited by an attacker by Anonymous Coward · · Score: 4, Insightful

    than used for the intended purpose IMHO.

  8. Re:Oh noes! I can't reach porntube! (rolls eyes) by commodore6502 · · Score: 4, Insightful

    P.S.

    It's also unconstitutional. I can not lay my hand on any power given to the Union Congress which allows them to shutdown the mail or the newspapers (old-fashioned type or modern websites/email). That power is reserved to the Member States.

    If they think Congress should have that power, let the states pass an amendment FIRST granting that power, rather than create an Egypt-type problem where some future Caesar/dictator can squash the people with a simple flip of the switch.

    --
    Information wants to be expensive AND wants to be free. So you have Value vs. Cheap distribution fighting each other.
  9. Good to know the government fears its people by DCFusor · · Score: 4, Insightful
    Nearly all that actions taken lately "for our security" are identical to the ones a government takes when it's afraid its people will revolt because (via that old psych tenet called projection) that's what they'd be doing had they been treated the way they are treating us.

    After all, who knows better how they've screwed us than the ones doing it?

    --
    Why guess when you can know? Measure!
    1. Re:Good to know the government fears its people by witherstaff · · Score: 2

      I'm surprised they don't call this something totally opposite from what it is. Like the Patriot Act.

    2. Re:Good to know the government fears its people by am+2k · · Score: 2

      The Internet enlivenment switch?

  10. Sneaker Net by Anonymous Coward · · Score: 2, Interesting

    We(tech types) have to think about how to have an marginally working internet without the cooperation of the telcos. Off the top of my head I could see an entire city's wireless routers all sort of passing things along. The traceroute would be from hell but data would keep moving.

    I suspect that this is being developed right now by civil minded Egyptian programmers and engineers.

    It could also be used in disasters and whatnot.

    As long as a node here and there could contact the rest of the internet then various governments would lose the power presently exercised to evil ends in Egypt.

    Message me if anyone is serious about this and maybe something could be brewed up.

    Normally I am logged in as EmperorOfCanada but not at my computer right now.

  11. Citizen this is completely different than Egypt by Anonymous Coward · · Score: 5, Insightful

    Because we'll only use it for your own good.

    They're the bad guys. You can trust us.

    We're looking out for you.

    1. Re:Citizen this is completely different than Egypt by Concerned+Onlooker · · Score: 3, Insightful

      Well, actually it does appear to be. The actual article gives as an example the removal of critical government systems from access, not limiting citizen access to the internet. Admittedly it is still a stupid sounding idea since you don't need a single kill switch, as the article also points out. It is definitely good to be skeptical and to keep a close eye on government abuse, but this doesn't seem like what everyone is jumping to make it out to be.

      --
      http://www.rootstrikers.org/
  12. SneakerNet 2 by EmperorOfCanada · · Score: 3, Insightful

    We(tech types) have to think about how to have an marginally working internet without the cooperation of the telcos. Off the top of my head I could see an entire city's wireless routers all sort of passing things along. The traceroute would be from hell but data would keep moving.
    I suspect that this is being developed right now by civil minded Egyptian programmers and engineers.
    It could also be used in disasters and whatnot.
    As long as a node here and there could contact the rest of the internet then various governments would lose the power presently exercised to evil ends in Egypt.
    Message me if anyone is serious about this and maybe something could be brewed up.
    PS I finally remembered my password.

  13. Famous last words by Anonymous Coward · · Score: 3, Insightful

    "It's for your own good". Whenever a government uses those words you can assume with some confidence it's for their good and not yours.

  14. Another Egypt scenario? by rs1n · · Score: 5, Insightful

    In light of the recent incident in Egypt, it seems that the real purpose of such a kill switch is more useful as a means of censorship (a la big scandals that could make the US look bad, like Wikileaks). On a local scale, if I know my network is about to be attacked, I would cut off the main entrance into my network, while leaving the inside up and running. If they insist on a kill switch, why not just implement a similar scheme for all the "gateways" into government networks? As for each citizen's own access, I don't need the government to unplug my computer for me -- I can do that by myself, and am capable of making the decision to do so myself.

  15. Re:Expectations were too high. by icebike · · Score: 4, Insightful

    The timing is so dumb that one has to wonder.

    To bring that up now suggest the recent election turn around has scared Both Democrats and Republicans into believing Egypt could happen here, and rather fix the problem they react with police state measures.

    Or was this on track all along, with hopes of sneaking it through, and the mainstream press just finally took notice?
    In which case it may well be DOA already.

    --
    Sig Battery depleted. Reverting to safe mode.
  16. Why is "Critical Infrastructure" available online? by beanbrew · · Score: 5, Insightful

    "An example, the aide said, would require infrastructure connected to “the system that controls the floodgates to the Hoover dam” to cut its connection to the net if the government detected an imminent cyber attack."

    Am I the only one who wonders what that kind of system is doing connected to the internet in the first place? Seems to me that if you want to protect infrastructure, the easiest and most sensible thing to do would be to unplug the ethernet cable.

  17. Re:I hate American politics. by cosm · · Score: 2

    Every time I pay attention to American politics, I find myself thinking that Lee Harvey Oswald had the right idea.

    You must be fucking joking. The Kennedy's were pretty big fans of ending our never-ending war in Vietnam, and boom Bobby and Johnny both get shot in the fucking head. Beside some of their shady backdoor dealings, they at least understood the threat of the military industrial complex. Once Kennedy started pushing for more transparency and oversight in the CIA, well, his days were numbered. I am not saying it was an inside job, but what I am saying is when a politician actually stands up for Doing the Right Thing (TM), they usually don't last very long politically, and sometimes biologically as well. Asking to incite violence like you are insinuating is not the answer, and is only going to lead us down the road to stricter control and more loss of privacy and rights.

    --
    'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
  18. Re:Why is "Critical Infrastructure" available onli by Black+Parrot · · Score: 2

    "An example, the aide said, would require infrastructure connected to “the system that controls the floodgates to the Hoover dam” to cut its connection to the net if the government detected an imminent cyber attack."

    Am I the only one who wonders what that kind of system is doing connected to the internet in the first place? Seems to me that if you want to protect infrastructure, the easiest and most sensible thing to do would be to unplug the ethernet cable.

    Also, how are they going to know that the attack is imminent? Like, before they hear the rushing water?

    --
    Sheesh, evil *and* a jerk. -- Jade
  19. Before it's too late by Baseclass · · Score: 3, Insightful

    We should start developing contingency plans to thwart a potential internet blackout.
    International dial-up, data feeds over the airways, carrier pigeon...whatever.
    Why are they asking for this if they don't have some kind of plan in store. Terrorism 2.0 perhaps, as the fear of conventional terrorism has faded quite a bit since 2001.

    --
    ^^vv<><>BA
  20. Re:I hate American politics. by cosm · · Score: 2

    nutters never assassinate the politicians who actually deserve a bullet in the fucking head

    If your suggesting the only way to progress for the people is the ammo box, then by your count any conversation is a moot point. We saw that during November it is possible to energize a base to kick a bunch of the wankers out of office. Regardless of your stance on the new republican congress, November showed that it is possible to get grassroots movements to actually make a difference.

    For serious change for the benefit of America, we need an intelligent 3rd party to form. A party of logic, reason, etiquette, balance, science, and honesty. Platform on it. Be forthcoming with all your flaws upfront so the other side has nothing to use, then just use pure logic, reason, and statistics to move forward. If we had a party of pure logical thinking, take away all political correctness, all blatant chest-pumping nationalism, all the empty rhetoric, and just stated reasonable goals, never waiving from them unless its logical, perhaps America might take the step in the correct direction.

    No politicians deserves what you say. They are all just pawns in the game that us, and the media have created. They are the best politicians we have. Because we created them. Now its time to make new, and better ones. Imagine an America were the world 'politician' was considered a bygone, and all future people involved in national decisions had degrees in science, technology, medicine, etc. Perhaps we should make a PhD (in anything but business) a requirement for future presidential applicants.

    I challenge you to go out tomorrow and start the discussion. With people IRL and not OL. I do. I try everyday. If it makes no difference, in my heart I know I at least tried to start a rational discussion, instead of giving up. Americans are capable of a lot of things, and if we lose complete faith in the country then the republic will be lost due to our own apathy. And it won't be due to the ignorant, but instead due to those too lazy or apathetic to enlighten the ignorant.

    --
    'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
  21. Re:Why is "Critical Infrastructure" available onli by SheeEttin · · Score: 2

    Am I the only one who wonders what that kind of system is doing connected to the internet in the first place?

    No, someone asks the same thing on every story like this.

    One of the responses I remember was a pair of questions from some kind of consultant or something:

    Question 1: Is this critical system separated from the Internet?
    Answer 1: Yes.

    Question 2: If, in an emergency, an admin needed to get in remotely, how could they do that?
    Answer 2: Well, you could VNC to here, then ssh to there, and so on and so forth...

    So, the system isn't actually air-gapped. And not really that secure, then, either.

  22. lies by smash · · Score: 2

    Its about keeping you safe from the evildoers. Honest. Would we lie to you? We are the land of the free. WE have nothing to hide.

    Yeah right. Cutting off people's internet would be far more inconvenient to the citizenry than isolated attacks on public infrastructure or government facilities.

    It will effectively make them deaf, dumb, blind and mute as far as their voice in the international community goes.

    Now, why would the want to do that? Maybe Assange has an idea.

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  23. Biparitsan by amiga3D · · Score: 5, Insightful

    Amazing how the really bad shit always has bi-partisan support. More and more it becomes obvious that we really need a viable third party.

  24. Please Clairify.. by lionchild · · Score: 2

    Quick question: Just what -exactly- is a "true cyber emergency"?

    Is it to isolate our network(s) from the rest of the world?

    Is it to secure our important services?

    Is it to keep key infrastructure operational?

    What sort of 'true cyber emergency' would want to cut us off from the rest of the world? Help me out here.

    I can certainly understand wanting to keep key services from being threatened...but, shouldn't those simply be secure anway? Shouldn't they be on their own secure network anyway?

    --
    Awk! Pieces of eight. Pieces of eight. Pieces of seven... ERROR: General Protection Fault. [Paroty Error.]
  25. Re:Expectations were too high. by causality · · Score: 3, Insightful

    Note: I have no doubt the Government ALREADY has the means to cause a similar shutdown at their disposal, its just that doing so would be illegal. It would only take a little bit of BGP route poisoning to accomplish the same thing.

    I suspect this is a lot like Bush's warrentless wiretapping: it has been there for a long time now -- the legislation in question is merely a formality attempting to legitimize it. Consider it "retroactive immunity" for the possession of an Internet kill-switch.

    --
    It is a miracle that curiosity survives formal education. - Einstein
  26. Re:A significant threat... Um, like the government by PopCulture · · Score: 2

    yes. because we do not have free speech in the united states, that is a valid concern.

    --

    Here's to finally giving Bush his exit strategy in November
  27. Can we have a government kill switch? by DanielRavenNest · · Score: 4, Interesting

    In case of emergency, it would let us cut off all government computers and communication. Seems fair to me.

  28. Re:Oh noes! I can't reach porntube! (rolls eyes) by slashqwerty · · Score: 4, Interesting

    Sadly it IS constitutional, hell just about anything the feds want to do is allowed now thanks to the way they've perverted the Commerce Clause.

    By far, the most common use of the internet is speech protected by the first amendment. The commerce clause does not override the first amendment.

    ...not that the first amendment will stop congress from passing the law, the President from invoking it, or the courts from arguing over the terms strict scrutiny, intermediate scrutiny, content-specific, compelling state interest, etc.

  29. Re:Oh noes! I can't reach porntube! (rolls eyes) by Seraphim1982 · · Score: 2

    I can not lay my hand on any power given to the Union Congress which allows them to shutdown the mail

    Article 1 - Section 8 - Clause 7
    The congress has the power, not the obligation, to establish the post office. If it wants to it can shut down any or all parts of the system (so long as it isn't in violation of the Amendments).

  30. BE IT RESOLVED... by firewrought · · Score: 2

    "The right of the people to receive and provide information services without tracking, interception, or interruption thereof shall not be violated by the Government or agent thereof except by judicial warrant naming persons, data, and services to affected."

    Amendment XXVIII of the U.S. Constitution, as I think it should be. We need to go on the offensive instead of watching Washington wonks progressively wank away our rights year after year... who wants to spearhead a campaign?

    --
    -1, Too Many Layers Of Abstraction
  31. Triumph of Sensationalism by 99BottlesOfBeerInMyF · · Score: 5, Interesting

    So there are hundreds of comments already posted here, but none of them that have been modded up that I can see points out that this isn't actually an "Internet Kill Switch" in any way shape or form. That's just a sensationalist title used to get people riled up and interested. This is, in fact, a much less interesting and less threatening piece of legislation. It just says the president can order companies running critical infrastructure for the functioning of our society to take action to protect them from a network attack in an emergency. No where does it grant the authority to shut down the internet or large swaths of it or censor any content.

    Now this legislation is not without problems and it certainly should more clearly define what is meant by critical infrastructure, but seriously, there is a reason this bill is supported from both sides of the aisle and it had fuck all to do with people's conspiracy theories about censorship and control of the media and communication. This is just an inadequately worded bill doing exactly what internet security experts have been asking for right along; precautions put in place to quickly isolate critical systems that likely shouldn't be accessible in the first place but often are in one way or another. This is about Stuxnet and the possibility of network based attacks on real hardware and resources from foreign powers. No politicians in the US have any interest in shutting down the internet because we still have robust means of communication otherwise and it would be political suicide.

  32. Host unreachable like an egyption by WaffleMonster · · Score: 2

    "This past March, the Senateâ(TM)s Sergeant at Arms reported that the computer systems of the Executive Branch agencies and the Congress are now under cyber attack an average of 1.8 BILLION times per month."

    The fuck you are. DoD reports on the order of tens of thousands of "attacks" against them YEARLY.

    You don't get to count every ping, spam, packet, scan and automated garbage as a "cyber attack". Well you can but you would (have already) loose all credibility in the process.

    "Rather than granting a âoekill switch,â S. 3480 would make it far less likely for a President to use the broad authority he already has in current law to take over communications networks."

    In other words since you already have the authority to do whatever the hell you want this whole exercise is redundant? If this is the case why bother with new legislation?

    I don't know of any operators who would not take reasonable steps to mitigate problems if the USG had specific information about a credible problem where public safety or life critical systems were involved. Do you? Is there any evidence whatsoever this is a problem?

    I would add it is quite foolish to think one can address a "cyber attack" as in "war" in linear time or on timescales in which humans have any chance of reacting. Chances are your advsaries have already compromised the system well in advance. For all you know failure to check in due to service disruption could well result in pre-programmed failsafe action.

  33. Re:Expectations were too high. by BonquiquiShiquavius · · Score: 2

    Suggested Form Letter:

    Dear Sen. Susan Collins:

    Fuck You. No.

    Respectfully,
    Your constituent

  34. Internet? SCADA systems are what matters by Kyusaku+Natsume · · Score: 2

    If Stuxnet gets imitated by script kiddies or black hats, they could damage seriously infrastructure like the Hoover dam in the example in TFA. Another example, they could target the systems that control burners in power plants. Even if they cannot manage to produce enough damage to put the power plant off line, they could cause enough damage to produce a generalized decrement across all the power plants of a given operator or builder and hitting the consumers with higher energy prices and a sharp increase in pollution. The repairs in those burners take at least a pair of weeks to get fixed and need to take the units off-line. The cascade effect of this could in the end produce roving, prolonged blackouts with the economic damage that they entail. A smart terrorist wet dream. This is the kind of risk that they should be targeting even if they end helping a bit the iranians or north koreans when more and more control systems get migrated to unfit systems to the task running Windows.

    --
    Mexico: 100% conservative's America now!
  35. Re:A significant threat... Um, like the government by thetoadwarrior · · Score: 2

    Actually if the US were doing what Egypt would then the government likely wouldn't covered that as freedom of speech and claim it's the act of terrorists, it incites violence and basically use every rule for speech to ensure you don't have the freedom to express yourself.

  36. Re:Oh noes! I can't reach porntube! (rolls eyes) by commodore6502 · · Score: 2

    The Union congress does indeed have the power to close the post office, but they do NOT have the power to forbid a Member State (example: Virginia) from setting-up its own post office for its own citizens.

    Nor do they have the power to prevent private entrepreneurs like FedEx or UPS to fill the gap left behind by the USPS's extinction. The Congressional power does not extend to abolition.

    --
    Information wants to be expensive AND wants to be free. So you have Value vs. Cheap distribution fighting each other.
  37. Brilliant Reasoning by Bigjeff5 · · Score: 2

    In a related note, I personally make sure to strap dynamite to each of my legs any time I go hiking.

    It's only sensible, if my foot ever gets caught while I am running away from a bear or a wolf I need a way to remove it quickly and reliably.

    I also strap bombs to my arms while swimming. You know, just in case.

    --
    Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller