Risk
9/28/2010
04:24 PM
Jim Rapoza
Jim Rapoza
Commentary
Connect Directly
Twitter
RSS
E-Mail
50%
50%

Government Puts The Hurt On The Internet

There are a lot of problems that face the Internet and technology today, from major security flaws to increasing infrastructure demands, you name it. But by far the biggest threats are the regular attempts by government and special interests to control the Internet and technology, attempts which would usually end up causing severe damage.

There are a lot of problems that face the Internet and technology today, from major security flaws to increasing infrastructure demands, you name it. But by far the biggest threats are the regular attempts by government and special interests to control the Internet and technology, attempts which would usually end up causing severe damage.The first is yet another proposed bill from a group of Senators, Democrat and Republican (though maybe they should all be called Entertainment Industry Senators), that is designed to limit piracy and file sharing. This bill, called the Combating Online Infringement and Counterfeits Act (COICA), would give the Justice Department the ability to block access to sites that are deemed to be dedicated to infringing copyright.

Even worse, there's no judicial review, if someone says a site is infringing and the Justice Department agrees, the site gets blocked. And from the bill it looks as if it would be very hard to get off that blocked list once on there.

So maybe you're saying, so what, those sites shouldn't be involved in piracy and infringing copyright. But just what entails infringing copyright? The bill is pretty vague and if we go by things that the entertainment industry has considered tools of piracy, it could be just about anything.

Among the technologies that entertainment heads have accused of existing mainly to abet piracy there's: the VCR, cassette tapes, DVRs, MP3 players, Internet backup services, CD and DVD burners, and even search engines. And what about sites that promote free use rights and attack bills like that one? Maybe they should be added to those block lists as well.

Hopefully this bill will never pass a full vote of Congress but you never know. There are a lot of powerful names attached to it. If it does pass it looks like it has more than a few Constitutional issues but I would hate to have to rely on the courts to stop this idiocy.

Of course Congress isn't the only one trying to break the Internet and take away the rights of users everywhere. The Obama administration has signaled that it is planning to put forward a bill that would essentially force all encrypted Internet services; from email to secure web sites to peer to peer conversations to systems like Blackberry mail; to put in a back door hole to allow law enforcement to tap those communications.

Now some will say that this is needed to fight terrorists and is no different from tapping phone calls. But there are some significant differences.

First off, we aren't talking about a centralized phone network, we're talking about the Internet. Given the decentralized nature of the Internet, we aren't talking about one back door, we're talking about maybe thousands of back doors.

Once you cut a hole in a wall and add a back door, you are instantly less secure. If these holes exist it will only be a matter of time until bad guys can take advantage of them as well. So there goes the whole idea of secure communications on the Internet.

Even worse, once these back doors were put in, the U.S. wouldn't be the only government to insist on access to them. China, Saudi Arabia, Iran, pick your country of choice. They will all have access to these backdoors.

And like most of these efforts, it wouldn't even really work. Sure, some stupid criminals would get caught. But most would be able to easily figure out ways to get around these controls, which means that the main victims of this lessened security would be legitimate users and businesses.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-4199
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

CVE-2014-4200
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

CVE-2014-0761
Published: 2014-08-27
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

CVE-2014-0762
Published: 2014-08-27
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service (infinite loop or process crash) via crafted input over a serial line.

CVE-2014-2380
Published: 2014-08-27
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.