DNC Creates 'Cybersecurity Board' Without Any Cybersecurity Experts (techdirt.com)
An anonymous reader writes from a report via Techdirt: The Democratic National Committee has created a "cybersecurity advisory board" to improve its cybersecurity and to "prevent future attacks." Politico reports: "'To prevent future attacks and ensure that the DNC's cybersecurity capabilities are best-in-class, I am creating a Cybersecurity Advisory Board composed of distinguished experts in the field,' interim DNC Chairwoman Donna Brazile wrote in a memo. 'The Advisory Board will work closely with me and the entire DNC to ensure that the party is prepared for the grave threats it faces -- today and in the future.' Members include Rand Beers, former Department of Homeland Security acting secretary; Nicole Wong, former deputy chief technology officer of the U.S. and a former technology lawyer for Google and Twitter; Aneesh Chopra, co-founder of Hunch Analytics and former chief technology officer of the U.S.; and Michael Sussmann, a partner in privacy and data security at the law firm Perkins Coie and a former Justice Department cybercrime prosecutor." What's surprising is that none of these members are cybersecurity experts. Techdirt reports: "If the goal of the board was to advise on cybersecurity policy, then the makeup of it is at least slightly more understandable, but that's not goal. It's to actually improve the cybersecurity of the DNC. Even if the goal were just policy, having someone with actual technology experience with cybersecurity would be sensible."
Just never write down any dirt.
See also: Bill Clinton's meeting on the tarmac. That's how serious dirt is done.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
The point of every board isn't to ever do work. It's just to head up the meetings and organize the allocation of funds to achieve the agenda.
You might want one technician but management is management. Management is just about allocating your resources to do get shit done.
Obviously nobody on the board is actually going to get their hands dirty. And boards don't do very much. They will probably meet once a quarter... by phone for an hour. Agree that the consulting firm that they hired is spending the money wisely and then go back to their real jobs.
Political officials setting themselves up to regulate things they have zero background knowledge in? Sounds like business as usual to me.
Many chiefs. No tribal members.
Look, there are two ways to look at cybersecurity:
1. Most unauthorized access is through social engineering. It can be fixed with training and fewer gullible people. Translation: this is a massive back door that will never be fixed, as those at the top are the worst offenders. And they never follow instructions.
2. Most methods of providing cyber security involve fixing known prior methods of attack. Polymorphous self-adapting viral code with bootstrap load into the kernel was created in the 1980s, but we still have no real ways of defeating it. Realize most cybersecurity is just closing the barn door after the horses escape. Stop putting all the horses in the barn.
3. Insert fictional defense method here which will never work in reality, because the PHBs always need a fall guy they can blame for their own security nightmares they created by ignoring advice.
-- Tigger warning: This post may contain tiggers! --
And the politicoes are all stumped as to why people are angry at them and screaming for real change, to the point where people will actually vote for an asshat like Trump...
Chas - The one, the only.
THANK GOD!!!
The hiring choices outlined by this article are going to lead to another article at some point in the future, to which I will feel compelled to once again post the comment: "Should have hired me instead, assholes!"
Just the political elites doing what they do irrespective of the skill set of people they are employing. People keep banging on about corruption in some third world nation when corruption is well and truly alive in your back yard.
A board designed to investigate a technical thing, being staffed by people who are better at raising money and making good sound bites than actually knowing anything about what they're supposed to be figuring out.
On second thought, erase the word "technical" from that paragraph.
This is business-as-usual government foo-bah of putting people they can influence on fictitious, red-tape-induced board to make themselves more paper-tiger worthy down the road.
Every time I see a bunch of former C[TEIF]O titles on a board, it'll just be a bunch of 'big idea' movement with zero skills and lots of tax payer money going to government contractors who'll milk every penny out of it for medeocre-at-best results. I agree whole-heartedly that there needs to be some real, proven technical people who make up that board --- not the suits. They are good at pushing agendas and this will be nothing more than polticial-career on-the-job training for most of them.
A bunch of cannibals?
I used to know a guy who would always make reservations under the name of "Donner" because occasionally he'd then get to hear "Donner Party - your table is ready".
#DeleteChrome
This is the hottest cybersecurity board on record.
A bunch of cannibals?
I used to know a guy who would always make reservations under the name of "Donner" because occasionally he'd then get to hear "Donner Party - your table is ready".
At which point he could exclaim, "It's about time, we're starving!"
You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office
Even if the goal were just policy, having someone with actual technology experience with cybersecurity would be sensible."
... or failing that an 8 year old child.
On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
An acquaintance who is a manager once told me that he can manage anything because, well, managing is managing. Another one suggested to me when I was a teen to go study management because, well, managers will always be needed...
Isn't that a little pretentious and old school like where the boss is the boss, doesn't matter if he is right or wrong or if he knows what he is talking about.
Seems to me hard to understand how a manager can manage something he doesn't know anything about unless he has skilled technical assistants. But how will he evaluate the skills of his assistants? I suppose if the assistants tell him what he wants to hear, it might help.
This is one of the fallacies of modern MBA-style management: management is a specific skill that's the same across all industries.
In it's worst form, it's what gets us CEOs who slash costs and show growth for the first year, then leave with a golden parachute while the company flounders.
If you study management even a little, you realize that the best managers are expert in their respective fields. This is not to say that software managers must be expert coders, but they need to have in mind the capabilities and limitations of the company products, the tools that the coders use, the current marketing trends, and some ad-hoc guesswork as to where the market is going. And also, they should at least know how to code, if not be an expert at it.
Consider: Do you think a generic manager could step in and manager a newspaper without intimate knowledge of the newspaper business? How well do you think that company would do if it actually happened?
Looking at some of Warren Buffet's writings, I note that he has people he trusts that can quickly learn the business and make informed choices that ultimately turn a company around. For example, a troubled company that supplies hardware, his people identified parts that had little profit and were available from other suppliers, as opposed to other parts that had more profit and were unique to the business. That's how he buys distressed companies and turns them around.
This is not what generic MBA-style managers do: learn the business, go into detail, and make strong decisions that benefit the company.
Looking at how GE gets vice-presidents, they always hire from within. They take a director and move him over to another department for a couple of years, and see how well he does. Then they move him again, and in a couple of years move him again. Over time, the directors become very well informed about how the business actually works, and anyone who isn't flexible enough to learn and do well in the business gets weeded out.
GE executives are some of the best managers in the world.
I've worked with a lot of "plug-in" managers who never seem to know where to go or what to do. They take the opinions of their staff as gospel without adding their own expertise, and serve as a simple buffer between the workers and upper management.
Did you visit the link I provided? The guy fits the bill and he was indeed a project manager. Of course I agree with what you wrote. I manage stuff that I know about. My head isn't inflated enough to pretend I can manage everything.
Actually, I didn't. I honestly thought it was part of your sig, and didn't think it was relevant to your text. Sorry about that.
Maybe weave the link as part of text as a reference to a position, or refer to it in the text?
Don'tcha just feel good knowing how well Hillary will be keeping the nation secure when you cast that ballot?
There is no America. There is no democracy. There is only IBM and AT&T and DuPont, Dow, General Electric, and Exxon
And the politicoes are all stumped as to why people are angry at them and screaming for real change, to the point where people will actually vote for an asshat like Trump...
Given Clinton's recent hiring practices and campaign staff, maybe we should just be happy that she hired Americans and leave it at that.
Donner, party of 8, Donner?
[pause]
Donner, party of 7, Donner?
[pause]
Donner, party of 6, Donner?
[pause]
Donner, party of 5, Donner?
etc...
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
"DNC emails leaked regarding insiders' placements on DNC Cybersecurity Advisory Board. The DNCCAB releases statement, 'It depends on your definition of hacking.' Nude photos of Clinton found among the leak which boost her in polls by 75%. Trump tried to counter by leaking his own sex tape, but the effort tanked because no one wanted to hear him dirty talk Chris Christy."
... if any of the above headline becomes true, the terrorists have won
Mod me down, I shall become more off-topic than you could possibly imagine.
And that's useful ... in what way exactly? Basically these people are superfluous and if capitalism worked they'd have been eliminated a long time ago.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Or a personal responsibility board? Of course they don't need any actual cybersecurity experts, this is only to distract from the fact that they broke the rules by pointing the finger at someone else. They don't need this board to do anything, it's just for the press release
--
Stay tuned for some shock and awe coming right up after this messages!
This is what you get when you spend your life in management as opposed to doer-ship. They probably look at doers as some kind of alien species of human being they have no contact with or understanding of. "Hey, Donna (says Hillary), do you or anyone you know actually have contact with someone who can actually DO something in this area (or any area)? No? Me neither. Let's call a bunch of supporters and contributors with good sounding backgrounds. That'll have the "optics" we need.
E Proelio Veritas.
The addition of lawyers to a bunch of C-level managers is very telling. This group will advise others what policies can and can't be implemented, who in turn will advise others what mechanisms can and can't be installed, who in turn will tell somebody to make the bloody (security) thing work.
Politicians, regardless of political party, will always perform their duties as politicians so it is no surprise that they create rules committees and advisory boards and fill the positions with politicians. It's what they do. Much of the time it's just for show to make it appear like they are doing something and that they "care" about the topic or crisis at hand. The advisory board will hold meetings, travel around the country to investigate things, make speeches and ultimately release a statement filled with lots of professional sounding words that really don't say anything or make any impact on the topic they were created for. In the end, they will all pat themselves on the back for a job well done and the public will feel satisfied because "at least they DID something about the problem" and everyone will move onto the next "we need to DO SOMETHING about this problem" crisis.
See? They only need lawyers.
What's surprising is that none of these members are cybersecurity experts.
Not surprising to me. The DNC and their members create economic policies with no understanding of economics. They put people in charge of justice with no understanding of justice. They put people in charge of foreign policy who are incompetent in dealing with foreign policy issues.
So this is just what they do - meddle in things they know nothing about.
"Somebody has to do something. It's just incredibly pathetic it has to be us."
--- Jerry Garcia
No doubt they are not cybersecurity experts. They are attempting to solve the impossible: "Preventing future attacks." The attacks will continue. They need to change the goal to be "Prevent successful attacks." Until the problem has been correctly defined, it will not be solved.
Change definition of DNC to Does Not Compute.
Why don't they hire Algore - the man who invented the Internet to head this group? He'd have 2 great things going for him:
I guess the democrats couldn't let Trump have the upper hand having an economic board with no economists.
Only intentions are important in the DNC. And then there's the whole "experience" issue. If we're supposed to vote for Hillary because she has experience, this blows that out of the water. But then again, it doesn't matter, results don't matter, as long as they are in charge.
No, they usually just shoot people that leak emails.
There are no cyber security experts on the panel because nobody owed any favors to any cyber security experts that could have been called in to get an appointment to the board. The skill set of the candidates in question never came into play.
Actually, it seems to me that the makeup of this board is geared towards damage control and being able to sue whoever hacks them. One of the big picture items from Edward Snowden's leak is that, not only does the NSA believe that the best defense is a good offense, they believe that many aspects of cyber defense are hopeless. Clinton, of all people, would know this so the DNC may well have concluded that they can't avoid being hacked so they have decided to be ready to clean up when it happens.
..., lawyer up.
When the king heard the words of the Book of the Law he tore his robes.2Kings22:11
Just look at the impressive people they hired! Wouldn't you be scared if you were a hacker?
All it is about anymore. Appearances. No substance.
At least, I never hear the word used in association with securing data, networks, servers, etc. But maybe the companies I work for are all weird or something?
--- wad
Nothing new here! It is typical government bullshit: Put friends and family in charge, regardless of the potential to further break a system!
HEAR THIS: It is IMPERATIVE that fully qualified people need to run regulatory, or ANY other, agencies.
Non-qualified persons in a job ALWAYS make matters worse. Period.
Just because you are an activist does NOT make you qualified! You are likely just looking for a bandwagon to jump on. GET THE FACTS, PLEASE!
Self-importance and self-indulgence is the root of ALL evil.