Slashdot Mirror
"Cyber War" Is Just the Latest Grab for Defense Money
New submitter Curseyoukhan writes "The phrase 'cyber war' is being used to scare us into coughing up money and liberties, just like 'anarchist' once was, and 'terror' still is. To quote H.L. Mencken, 'The whole aim of practical politics is to keep the populace alarmed (and hence clamorous to be led to safety) by menacing it with an endless series of hobgoblins, all of them imaginary.'"
Cause I've not heard the phrase "cyber war" being bandied about like the wars on terror/drugs/etc have been.
While I do agree that it is in the military's best interests to keep things rolling financially, make no mistake in the fact that cyber criminals and foreign nations are actively penetrating and stealing sensitive information from the United States as well as other countries.
You are preaching to the choir, sir.
Lets start refering to The War Against Terror by it's initials. . .
Americans are a very curious species. There are two things you should know about them:
1) Most Americans have never experienced real war of any sort. This includes those in the military, even those who have served in various conflicts, and even those who have killed during said conflicts. (Much of this killing has been done at great distances using missiles or munitions released by planes or drones, and was thus quite impersonal.)
2) Most Americans have a so-called "boner for war". This is especially true of those who self-identify as "Republicans", but many who identify as "Democrats" are equally afflicted.
Unfortunately, there are a lot of these people, and they have thus acquired much power within the American political system. To them, anything and everything they don't like needs to be crushed in a "war".
It doesn't matter whether their target is alcohol or drugs or Islam or homosexuality or affordable health care or free speech on the Internet. To them, "war" is the only solution possible, and they'll refer to "war" incessantly when discussing such topics.
There is an unfortunate additional quirk in this case: Since, naturally, the 'cyberwarriors' don't want to be stuck purely in the tedious and thankless job of playing defense, there is a demand for 'offensive capabilities'. This creates a perverse incentive: If a flaw is disclosed and patched or mitigated, it is no longer of offensive utility, so now the market for zero-days and exploit payloads isn't just black hats, scammers, and criminals; but 'respectable' defense industry types.
This is not a merely theoretical problem.
VUPEN is the crass, attention-whoring, bad-boy of the industry; but practically the entire who's-who of staid, tight-lipped, defense contractors has a division peddling bugs somewhere in the business.
Even if we were 100% warm and fuzzy about the use these exploits are being put to by these firms customers(Only the good guys, pinkie swear!), this situation is insane from the perspective of actual 'security'. Whose economies, financial systems, and infrastructure depend most heavily on complex IT systems? Ummm, mostly wealthy developed countries. Whose citizens are most vulnerable to electronic compromise of financial information and such? Countries with high rates of internet penetration and lots of computers. Who has the capability to deploy electronic attacks against unpatched vulnerabilities? Virtually everyone.
In addition to the usual grab for rights and money, this 'cybersecurity' industry begets insecurity, because of the demand for 'offensive capabilities', despite the fact that we are the ones with the most to lose in an insecure environment. At least classic corporate welfare military R&D is merely expensive, and once you hand over the money, Raytheon or whoever goes off to build some impractical toy that is largely useless; but at least largely harmless....
...tell the government where to spend our taxes. Me regarding the taxes I pay, your regarding the taxes you pay.
Only problem is what to do about things that nobody wants to think about paying for despite the fact that they have to be funded. Often these are things that don't require a lot of money (can you think of anyone who wants to fund the retirement plans of federal auditors?) but without them all sorts of things just fall apart over time.
"Little does he know, but there is no 'I' in 'Idiot'!"
I recently gave a talk on Cyberwar, with the main conclusion that there is nothing new here or nothing more scary than the targeted attacks we have increasingly seen in the last few years. Defense against "Cyberwar" is the same as against any other targeted IT attack. Even Stuxnet is not impressive at all and the authors made several unnecessary mistakes that jeopardized its mission. (And in addition, it is in no way certain that the damage to the Iranian centrifuges was even caused by Stuxnet. The Iranis had started using their own parts in the centrifuges and "the devil USA did it" may just be politically more opportune than "we do not have the skills to make our own centrifuges" or "we are incompetent to operate centrifuges reliably".)
But guess what? Some people in the audience were offended! Seems to me some people are so in love with their own misconceptions, that they rather be afraid than admit that they were wrong (and that they are not experts on the subject in the first place...). As long as this stupidity continues, the immoral manipulators using these memes will continue to be successful.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
That means that you should be calling your Congress person. Are you? The elected representative is the guy/gal who determines how the money is spent.
...richie - It is a good day to code.
No.
No no.
No no no.
We must begin deploying DWARF (Designated Warfare Advance Recon Forces) to defend against the hobgoblin menace. The best part is that all we need to send seven of them out with just a pickaxe and an axe and they are quite adept at constructing fortresses to defend against the hobgoblin menace. With a little bit of oversight we can make sure to avoid the lava cataclysm events that DWARF is prone to causing.
"Lack of speed can be overcome. In the worst case by patience." --Znork