Slashdot Mirror

← Back to Stories (view on slashdot.org)

Congress Passes Bill Forcing Tech Companies To Disclose Foreign Software Probes (reuters.com)

Posted by BeauHD on from the publicly-available dept.

An anonymous reader quotes a report from Reuters: The U.S. Congress is sending President Donald Trump legislation that would force technology companies to disclose if they allowed countries like China and Russia to examine the inner workings of software sold to the U.S. military. Companies would be required to address any security risks posed by the foreign source code reviews to the satisfaction of the Pentagon, or lose the contract. The legislation also creates a database, searchable by other government agencies, of which software was examined by foreign states that the Pentagon considers a cyber security risk. It makes the database available to public records requests, an unusual step for a system likely to include proprietary company secrets. The final version of the bill was approved by the Senate in a 87-10 vote on Wednesday after passing the House last week. The spending bill is expected to be signed into law by Trump.

9 of 61 comments (clear)

  1. Linux Distros by Muckluck · · Score: 2

    So how might this affect the companies like RedHat, Debian and the other Linux distros that are open source based? Even Mozilla and Android are largely publicly available. It is clear that their source is available for all to peruse. Is this going to add a bunch of paperwork overhead to these companies so they can continue developing and providing software to the US government?

    --


    --I like turtles...
    1. Re:Linux Distros by Jaime2 · · Score: 3, Insightful

      Seems unlikely. A foreign government would never need to ask to review public source code, so there would never be an approval for which paperwork would be necessary.

    2. Re:Linux Distros by oh_my_080980980 · · Score: 2

      That's the point Potsy, government contacts. Depending on the details that could preclude government agencies from using Linux and other open source tools.

    3. Re:Linux Distros by AHuxley · · Score: 2

      AC it wont just be the distro. It will be the people who are part of any international project in any way.
      Any computer work by a company with mil/gov contracts will have to be report what their staff do.
      Work for a big company and that work on any "open source" project gets banned.

      People are the "security risks" not just the distro.

      --
      Domestic spying is now "Benign Information Gathering"
    4. Re:Linux Distros by Anonymous Coward · · Score: 2, Informative

      So how might this affect the companies like RedHat, Debian and the other Linux distros that are open source based?

      In all the DoD work I've been exposed to, open source was prohibited altogether. So no Redhat at all, but a 20 year old unpatched Solaris 7 OS was okay.

  2. Let's start cracking the whip by MikeRT · · Score: 4, Interesting

    I am a lot less concerned about the PRC being allowed to view the code for Oracle DB or Windows than I am about allowing Chinese citizens to be employed to work on them. The human intelligence network run by PRC intelligence puts anything the US or Russians have ever had to shame because they can rely on Chinese nationalism in the civilian population to get part-time assets in places we never could. It should be taken as a given that the PRC has agents in Microsoft and Oracle because that's how they roll.

    If any of that sounds outlandish, read this. As just one example, in terms of influencing public policy, the PRC is way worse than anything most liberals believe about Russia.

    1. Re:Let's start cracking the whip by Anonymous Coward · · Score: 2

      I am a lot less concerned about the PRC being allowed to view the code for Oracle DB or Windows than I am about allowing Chinese citizens to be employed to work on them

      Why stop here?

      Why not throwing all Chinese out of USA?

      That'll sure cure your anxiety.

      He/she only identified the particular risk, did not hint at your proposed solution. Do you not agree that the fact that many Chinese citizens come to work for these companies, then return to China, is a risk? Or are you just jumping to some kind of divisive rant because that is what you do?

    2. Re:Let's start cracking the whip by drinkypoo · · Score: 2

      in terms of influencing public policy, the PRC is way worse than anything most liberals believe about Russia.

      Worse how? More influential? Because they are both up to the same kinds of tactics.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  3. Dumb as a Post by oh_my_080980980 · · Score: 2



    https://www.reuters.com/articl...

    "In order to sell in the Russian market, technology companies including Hewlett Packard Enterprise Co, SAP SE and McAfee have allowed a Russian defense agency to scour software source code for vulnerabilities, the Reuters investigation found last year."

    Senator Jeanne Shaheen is dumb as a post. Foreign governments are purchasing American technology. It would be in their best interests to see if there are backdoors put in there by the NSA or CIA. This has happened before. Senator Biden talked about how the US put backdoors into pipeline controls sold to the Soivet Union. So this type of thing happens.