Slashdot Mirror


US/UK Will Stage 'Cyber-Attack War Games' As Pressure Against Encryption Mounts

An anonymous reader writes: British prime minister David Cameron is currently visiting Washington to discuss the future of cyber-security in Britain and North America. The leaders have announced that their respective intelligence agencies will mount ongoing cyber-attack "war games" starting this summer in an effort to strengthen the West's tarnished reputation following the Sony hacking scandal. Somewhat relatedly, a recently-leaked Edward Snowden document show the NSA giving dire warnings in 2009 of the threat posed by the lack of encrypted communications on the internet.

46 of 77 comments (clear)

  1. Any bets? by fuzzyfuzzyfungus · · Score: 4, Interesting

    Given the state of real-world security, 'cyber war games' are going to look like a particularly enthusiastic WWI reenactor event if the participants take the gloves off.

    Who feels like a little speculation: Will the offensive teams be fairly picked(from people with suitable skills) and actually try, resulting a a resounding bloodbath, or will the 'exercise' be largely a whitewash?

    1. Re:Any bets? by Anonymous Coward · · Score: 1

      White wash? They want a blood bath, then they can beef up security laws - to protect us from the terrorists.

    2. Re:Any bets? by Tokolosh · · Score: 1

      The whole aim of practical politics is to keep the populace alarmed (and hence clamorous to be led to safety) by menacing it with an endless series of hobgoblins, all of them imaginary. - H. L. Mencken

      They are priming the pump.

      --
      Prove anything by multiplying Huge Number times Tiny Number
  2. Um... by Anonymous Coward · · Score: 2, Insightful

    Encryption is one of the first defences against "cyber-attacks".

    It's like banning locks on doors to deal with the problem of burglaries.

    1. Re:Um... by AmiMoJo · · Score: 4, Interesting

      Fortunately the US is likely to tell Cameron to fuck off, since it would be unconstitutional to ban encryption and after the economic damage that the NSA did they won't allow the UK to force service providers to back-door their apps.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re:Um... by Z00L00K · · Score: 1

      Well - if you don't have a lock then the door won't be broken when you come home.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    3. Re:Um... by jeffasselin · · Score: 4, Insightful

      Euh locks on doors don't stop burglars. They stop kids from doing petty vandalism. Burglars can easily pick your door locks, or will simply break a window to enter.

      Door locks are the equivalent of FTP server banner messages telling people "access is restricted to those authorized".

      What prevents burglaries in civilized countries is the social contract, and the fact that most people have a common moral and ethical sense that tells them it's wrong. The idea that you're better off working for a decent salary and that you should respect the property of others so they'll respect you is a basic logic that holds true in many places (less so nowadays in some countries where the working poor are worse every day).

      The reason it doesn't work on the Internet is because this contract falls apart because of distance and the anonymizing nature of the Internet. Not just the fact that bad guys can be pseudonymous, but because to them you're not a person, you're an IP address. It de-humanizes contact and makes it easier to justify bad behavior.

      Add to it the fact that there may be a small portion of people in a city or neighborhood who are lacking enough in morality to do burglaries, but in the whole world there's a lot more of them. And although they can't all break into your house, they can all break into your computer...

      --
      If he explores all forms and substances Straight homeward to their symbol-essences; He shall not die.
    4. Re:Um... by RabidReindeer · · Score: 1, Funny

      Fortunately the US is likely to tell Cameron to fuck off, since it would be unconstitutional to ban encryption and after the economic damage that the NSA did they won't allow the UK to force service providers to back-door their apps.

      Have you forgotten? Up to and including the Clinton years, encryption was classified as a "munition" and was very much controlled by the US Government.

    5. Re:Um... by whoever57 · · Score: 2

      Euh locks on doors don't stop burglars. They stop kids from doing petty vandalism. Burglars can easily pick your door locks, or will simply break a window to enter.

      In the UK at least, door locks have an important function. They turn entering your house from traspass (NOT a criminal offense) into breaking and entering (a criminal offense).

      In the USA they invoke a requirement to get a warrant for LEO to enter the house.

      --
      The real "Libtards" are the Libertarians!
    6. Re:Um... by drinkypoo · · Score: 1

      In the UK at least, door locks have an important function. They turn entering your house from traspass (NOT a criminal offense) into breaking and entering (a criminal offense).

      In the USA they invoke a requirement to get a warrant for LEO to enter the house.

      They do the first thing in the case of the USA, too. It doesn't matter how crappy the lock is. A fence around your property with a locked gate does the second thing, too, although in that case they can and will still come to the door for 911 calls, reports of domestic violence, etc etc. But they can come right in your house for that stuff whether you have a lock or not, no warrant is necessary. They can also enter a domicile without a warrant if they claim to be "in hot pursuit". I believe that only requires spotting a suspect outside, I don't think they have to spot them committing a crime. But IANAL.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    7. Re:Um... by JimSadler · · Score: 1

      Frankly I think the greatest cause of burglaries is substance abuse or mental illnesses. For example a compusive gambler will turn to theft when he is on a losing streak. A sex addict may steel to be able to get more sex. Drug addicts and alcoholics need money to get by and often are incapable of working. People with usual levels of psycopathy due to mental problems also tend to break rules including rules agaisnt burglary and theft. We also have a lack of support for the unfortunate that is a cause for money crimes. And oddly the justice system itself is so twisted that it is creating criminals. Businesses also create criminals. For example some companies fire any employee who is arrested even though the employee is later found innocent. Then other businesses will refuse to employ anyone who has been arrested in the past. Then those businesses will whine and cry about customers driven away by street crimes. For whatever twisted reasons society wants crime to a certain degree and seems to work towards insuring that crime will continue to exist.

    8. Re: Um... by peragrin · · Score: 1

      What prevents burglaries in the USA is more along the lines of cheap goods for the masses and stiff penalties for all involved in dealing with stolen goods.

      Car stereos stopped being stolen once auto makers started putting in good systems to begin with. Yes it stil happens but not nearly as often.

      --
      i thought once I was found, but it was only a dream.
    9. Re:Um... by MightyMartian · · Score: 1

      Reading David Cameron's speech from a few days ago, it drives home just how stunningly ignorant of technology the majority of politicians are. How would one even limit encryption? Ban mathematicians and programmers? The British government, in particular, is being run by possibly one of the stupidest people to ever be in charge of a modern democracy.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    10. Re:Um... by Anonymous Coward · · Score: 2, Funny

      Wow. I mean double wow. Is this that new common core system I keep hearing about? Common core 'free form' word art. or somesuch?

      Mr. Sadler, you have written a string of I guess 15 or 20 sentences together, loosely directed at the topics of crime, substance abuse, mental illness, sexuality, hiring practices and such.

      Your initial assertion, that burgalaries and caused primarily by "substance abuse or mental illnesses" is made, then you don't even attempt to support this in any way, while rambling on - in a few cases nonsensically, and others you simply throw things out there devoid of any logical argument at all ("Businesses also create criminals.") and finally move on to the blockbuster statement that society in fact wants crime.

      So which is it? Are burgalries the result of substance abuse and mental illness, or are they caused by businesses and the justice system? Is this, in the end, all perfectly normal and good, because society in fact wants these criminals?

      I have to ask, is this the product of your schooling? Or is there some other reason (like for example "usual levels of psycopathy due to mental problems")? I wonder for a minute here if this is what happens to a persons mind when they spend excessive amounts of time on twitter, where, I seem to recall, you are limited to issuing 'Twits' (or whatever they are called) in 40 characters or less, all day long for months at a time. I wouldn't know, because I have never, nor have I ever wanted to Twit myself.

      Are you aware of what you are doing? That is to say, that your communication, in this case at least, indicates to me that you need at the very least to lay off the coffee, or worse I suppose, lay off the blue meth.

      I've never seen anyone write this way and it does worry me. Is this really what our educational systems are producing? On the other hand as it just occurred to me after writng that sentence, are you 12?

      Anyway, if you are 12, do please pay attention when you start to take English courses as you may be latching onto some interesting ideas, you just need to look for ways to organize your thoughts, understand basic logic and reason, and then lear ways to express these ideas. If you are in fact much older than 12, I'm frieghtened, I sincerely think you may be suffering from "usual levels of psycopathy due to mental problems" and you may want to call someone.

      Good grief, I will *never* go anywhere near facebook or twitter, and thank god I never have.

      Good day sir!

    11. Re:Um... by Immerman · · Score: 1

      Easy - ban all usage of encryption except for approved algorithms where one party has a valid encryption license. Amazon still gets to do secure online ordering (well, secure enough. NSA back doors notwithstanding), but should you dare to send an encrypted email... well that's ten years behind bars, per offense. No evidence of any other crime needed.

      Where's the problem? Do you really think enough people know or care about encryption that you'd get a popular uprising over such a law?

      --
      --- Most topics have many sides worth arguing, allow me to take one opposite you.
    12. Re:Um... by MightyMartian · · Score: 1

      And what exactly would stop me, for instance, from using "non-approved" encryption for, say, my VPN end points?

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    13. Re:Um... by 0123456 · · Score: 2

      Have you forgotten? Up to and including the Clinton years, encryption was classified as a "munition" and was very much controlled by the US Government.

      Only in the sense that the rest of the world had to OCR the printed source code if they wanted to use it legally.

    14. Re:Um... by Tokolosh · · Score: 2

      "When a candidate for public office faces the voters he does not face men of sense; he faces a mob of men whose chief distinguishing mark is the fact that they are quite incapable of weighing ideas, or even of comprehending any save the most elemental — men whose whole thinking is done in terms of emotion, and whose dominant emotion is dread of what they cannot understand. So confronted, the candidate must either bark with the pack or be lost... All the odds are on the man who is, intrinsically, the most devious and mediocre — the man who can most adeptly disperse the notion that his mind is a virtual vacuum. The Presidency tends, year by year, to go to such men. As democracy is perfected, the office represents, more and more closely, the inner soul of the people. We move toward a lofty ideal. On some great and glorious day the plain folks of the land will reach their heart's desire at last, and the White House will be adorned by a downright moron."
        - H.L. Mencken

      --
      Prove anything by multiplying Huge Number times Tiny Number
    15. Re:Um... by Immerman · · Score: 2

      Mostly the burly guys in uniform that show up at your door soon after the NSA dragnet detects an unlicensed encrypted communication channel in use. Because why would they give you a license to establish a VPN? What are you trying to hide?

      --
      --- Most topics have many sides worth arguing, allow me to take one opposite you.
    16. Re:Um... by khallow · · Score: 1

      What prevents burglaries in civilized countries is the social contract, and the fact that most people have a common moral and ethical sense that tells them it's wrong.

      Imaginary social contracts, and imaginary moral/ethical sense don't stop burglaries. Consequences do.

    17. Re:Um... by rtb61 · · Score: 1

      No, encrytion does not secure the contents it merely makes them useless, so do not be fooled. There is nothing in the world than can stop encrypted data from being encrypted and thus made useless to the original encrypted. It is no real security solution, it is merely a scrambler into uselessness through obscurity, that obscurity being the lack of the password to decrypt the data and make it useful again. The more they want that information the more the holder of the password is at risk. So parallel networks, operating applications on appliances that can only carry out functions they are required to carry out, all flexibility stripped out of hardware, no unnecessary data connections. The normal computer hardware/software design is extraordinarily bad for security it is entirely too flexible, a more fixed and locked in design is required for security.

      --
      Chaos - everything, everywhere, everywhen
  3. Re:Cameron passed the NSA test by houghi · · Score: 3, Insightful

    As a European, please take a huge rope, tie it around the UK and drag it to the other side of the pool. And if you think you don't have enough space for another country, we will gladly take Canada.

    --
    Don't fight for your country, if your country does not fight for you.
  4. Alternate idea by king+neckbeard · · Score: 3, Insightful

    How about, instead of playing war games, you use the same resources to actually secure the vital infrastructure that we get regular scare stories about, or audit widely used FOSS before the next shellshock or heartbleed?

    --
    This is my signature. There are many like it, but this one is mine.
    1. Re:Alternate idea by hattable · · Score: 2

      Because if you spend a billion dollars doing source code audit and developing system hardening techniques but your seal is that of one of the three-letters you will still have the tinfoil hats accusing you of doing something nefarious. You have wasted a billion dollars better spent doing almost anything else. The war games seem like a show for the public anyway.

      --
      OMG facts!
    2. Re:Alternate idea by whoever57 · · Score: 1

      How about, instead of playing war games, you use the same resources to actually secure the vital infrastructure that we get regular scare stories about,

      You assume that the cyber war games are about preparedness. In reality, these events are about creating headlines that can be used to justify more intrusion into people's private lives.

      --
      The real "Libtards" are the Libertarians!
    3. Re:Alternate idea by king+neckbeard · · Score: 1

      In practice, it would be better, and this process can and should be incredibly open, with, at most, a small period of nondisclosure until the bugs can be fixed and patches distributed. This is in line with best practices, and it would limit the ability for such accusations.

      --
      This is my signature. There are many like it, but this one is mine.
    4. Re:Alternate idea by king+neckbeard · · Score: 1

      No, I know it's PR, I'm just wishing that they would actually do something constructive instead of trying to look good.

      --
      This is my signature. There are many like it, but this one is mine.
    5. Re:Alternate idea by hattable · · Score: 1

      Completely agree. Transparency would do wonders for both the security of the web at large as well as being an amazing PR move for them. Unfortunately along the lines of PR timing would definitely be a large factor in presenting a new initiative like this. Example: the IC-on-the-record tumblr thing that was started looks reactionary and probably generated so little goodwill that it was definitely a waste.

      But a transparent operation would be amazing on so many fronts.

      --
      OMG facts!
    6. Re:Alternate idea by LessThanObvious · · Score: 1

      Any logical use of resources would be an improvement. War games can make sense, but only when focused on real world threats to things Government is actually supposed to protect. If they are trying to "strengthen the West's tarnished reputation following the Sony hacking scandal" that isn't the right approach. Private industry generally has to provide it's own security and there is nothing about attacks on Sony that couldn't hit any company any time from any source for any reason. Government could do well to have some robust and well developed defenses and procedures available to defend at the national borders, but that has limit use cases. Corporate America is on it's own and will only defend itself as well as it chooses to do so. People are still the weakest link in security and determined attackers will exploit the greatest weaknesses with the least path of resistance. Business is going to have to come up to speed in that it must be accepted that one user or one computer or one service WILL be breached. The question is from there, will attackers be able to cause a cascade of subsequent breaches with unchecked ability to steal data and damage systems completely undetected until the impact becomes obvious? I think any company can see the answer to that without too much analysis. So how import is it that it doesn't happen to you? Government cannot defend business from their own insufficient security and I personally don't want to pay the tax bill for them to try.

  5. Fuck Cameron by mr_mischief · · Score: 2

    Scotland should have seceded with the UK willing to have such a daft demagogue in charge. Now he's trying to turn the UK and the rest of the world into even more of a surveillance nightmare than the street cameras London already has.

    He can piss up a rope and then hang himself from it.

    1. Re:Fuck Cameron by JimSadler · · Score: 1

      Are you one of the people who wants crime to exist? As the use of electronic means expands crimes will become harder and harder to commit without sudden arrest and convictions. Lies will also be hard to tell. Imagine if wives and husbands could study in detail the entire daily life of their mates? Oops! How about chidren being able to observe parents at all times just as simple devices hidden in cars can track teens and give the speeds and routes driven in their cars. Can society survive honesty?

  6. Re:Cameron passed the NSA test by king+neckbeard · · Score: 1

    Can't we just work together and find a safe place to put all of our authoritarian politicians, maybe Yucca Mountain? It was designed to handle dangerous materials for long periods of time.

    --
    This is my signature. There are many like it, but this one is mine.
  7. So... by slashmydots · · Score: 1

    So they're playing Starcraft II against each other?

  8. Gov warnings of lack of encryption by hattable · · Score: 3, Insightful

    This really shouldn't be a surprise to anyone. I think people forget that they exist to try and help advance the security of the internets, not listen to cheating husbands and wives for fun. Didn't they create SELinux, and the navy developed tor. Whether they are good or bad on the whole is a topic for another discussion but we shouldn't pretend that their mission statement is something like 'what 4th amendment' or 'internet cowboys without purpose'

    --
    OMG facts!
    1. Re:Gov warnings of lack of encryption by ahodgson · · Score: 1

      http://www.spiegel.de/internat...

      Read that. All of it. And then come back and tell me what their mission statement is.

  9. Those who grab for power can't be trusted with it by John.Banister · · Score: 2
    From the article:

    Mr Cameron has previously said in relation to cyber attacks that there should be no "means of communication" which "we cannot read".

    It sounds like Mr Cameron wants microphones in every person's residence.
    People who feel with absolute certainty that someone else is always the problem will always try to grab more power for themselves, and because of that, they can't be trusted with the ability to grab power, even though their current goals in using that power are ostensibly laudatory. They can't be trusted with power, because they will never consider any part of any of their own goals as being suspect. Citizens don't benefit when people who can't cope with compromising and feeling frustrated have a career in politics or public service.

  10. Re:Tricks by king+neckbeard · · Score: 1

    The Guardian had a huge trove of documents, and most of them haven't come out yet.

    --
    This is my signature. There are many like it, but this one is mine.
  11. You'd almost think there was an election due... by Dan1701 · · Score: 1

    Actually, there is an election due in the UK. All of this feckless noise is electioneering, to try to sway the opinions of the Great Unclued out there.

    The nitty-gritty detail is the usual sordidly mucky mess of politics everywhere. You may wish to skip this part and move on to calling me silly names if politics bores you.

    Britain is a member of the European Union, but is not a member of the EU currency union (the Euro). The EU is institutionally corrupt, to the extent that its own tame poodle of an auditor will not approve its accounts, and has not for the last seventeen years. The EU may be thought of as an empire-by-stealth, one of the few to actually start out decadent. As a result of this, the Euro currency is failing, and the EU is responding by asking for more money from its member states, and by churning out ever more regulations.

    Most UK politicians like the EU, but few are able to articulate why this is the case, nor why the EU is such a great entity. Notable exceptions are the UK Independance Party (UKIP) which despite attracting a broad spectrum of loons, does have widespread appeal in Britain.

    David Cameron is the leader of the Conservative Party (or Tories). This party is currently in a coalition with the Liberal Democrats. Opposing them is the Labour Party, led by Ed Milliband. The Tories and Labour are currently about level pegging in electoral stakes; UKIP may alter this a little, but not all that much.

    Cameron is trying presently to become more popular. He is unfortunately being advised very poorly, and is also being influenced by the Home Office, the government department in charge of domestic security, policing and the like. The Home Office has the reputation of being the department where useless civil servants get parked to serve out their time without annoying anyone important; it also has the reputation of slowly driving and Home Secretary insane, to the point of totalitarian leanings.

    So, what you're seeing is electioneering plus silly politicians plus nutcase advisors plus at least one nutcase political party, arguing against another load of nutcases in the country next door.

    This entire post probably makes very little sense to anyone in the USA. Don't worry, though; it makes almost as little sense if you live in the UK.

  12. Why is cameron allowed to speak any more? by Anonymous Coward · · Score: 1

    How can he lead a nation if he doesnt understand that the corporations OWN obama, there is no vector that he can use to "pressure" them. Maybe cameron thinks that if they have enough of a market share they can persuade the big boys to play nice.

    its amusing that they also dont seem to understand that the algorithms for good encryption have been published and people can just encrypt their message inside their decryptable message and layer up the encription just like Tor works...

    encryption is like pandoras box, its too late to try and close the lid, its impossible to stuff it all back in the box. maybe all the government people should spend tims doing their jobs instead of complaining how their jobs keep getting harder as technology advances. yes, you cant go to a switch board, plug in a set of headphones and listen to a conversation any more.. the government hacks are just complaining because sometimes capatalism does work and corrects the market and there is no ammount of whining or back handed back room deals that can make it work the way THEY want capatalism to work.

    1. Re:Why is cameron allowed to speak any more? by Immerman · · Score: 1

      You can however ban it's usage except in communications with properly licensed organizations. That lets banks and businesses continue to engage in secure online transactions, but dare to send an encrypted email, and that's five years in the hole without appeal. Sure, you can't tell the difference between a terrorist and a guy who doesn't want anyone to discover his donkey-porn addiction, but so long as they're all rotting in the gulag, who cares?

      --
      --- Most topics have many sides worth arguing, allow me to take one opposite you.
  13. Re:login joshua by Immerman · · Score: 1

    A curious game. The only way to win is for the governments to collude behind the scenes in order to distract their populations with a state of perpetual war.

    --
    --- Most topics have many sides worth arguing, allow me to take one opposite you.
  14. The future of cyber-security? by lippydude · · Score: 1

    "The leaders have announced that their respective intelligence agencies will mount ongoing cyber-attack "war games" starting this summer in an effort to strengthen the West's tarnished reputation following the Sony hacking scandal."

    'Inside the “wiper” malware that brought Sony Pictures to its knees Analysis of code shows it used knowledge of Sony's Windows network to spread and wreak havoc.'

  15. Homegrown Initiative by Roger+W+Moore · · Score: 2

    Fortunately the US is likely to tell Cameron to fuck off, since it would be unconstitutional to ban encryption...

    Just like it is unconstitutional to torture prisoners etc. etc.? I expect that you are right in that they will deny his request but the reason will be because it is the request of a foreign power. I also expect that many US politicians will think that it sounds like an excellent idea and after a suitable period so that they can claim it is their own idea there will be an American lead initiative to do the same thing. Why would they listen to some idiotic right wing UK politician when they have plenty of their own to choose from?

  16. Hack the planet by WaffleMonster · · Score: 1

    In the real world any serious attack would have been conduced in stealth far in advance with damage triggered at a time of the attackers choosing.

    In the fantasy world military brass operate repelling a "cyber attack" means sitting in front of a oversized console while "god" yells Rabbit.. flu shot? Someone talk to me.

  17. Keeping up with US, Bush and Obama. American Idle by raymorris · · Score: 1

    The Brits needed to keep up with the US. The Americans, being too preoccupied with American Idol and Honey Boo Boo to get a clue about the issues, elected Bush Jr and Obama. Not to be outdone by the Americans, the UK went one stupider with Cameron.

  18. Re:Cameron passed the NSA test by ahodgson · · Score: 1

    Would Quebec be enough? Please, take it.