04:24 PM
Jim Rapoza
Jim Rapoza
Connect Directly

Government Puts The Hurt On The Internet

There are a lot of problems that face the Internet and technology today, from major security flaws to increasing infrastructure demands, you name it. But by far the biggest threats are the regular attempts by government and special interests to control the Internet and technology, attempts which would usually end up causing severe damage.

There are a lot of problems that face the Internet and technology today, from major security flaws to increasing infrastructure demands, you name it. But by far the biggest threats are the regular attempts by government and special interests to control the Internet and technology, attempts which would usually end up causing severe damage.The first is yet another proposed bill from a group of Senators, Democrat and Republican (though maybe they should all be called Entertainment Industry Senators), that is designed to limit piracy and file sharing. This bill, called the Combating Online Infringement and Counterfeits Act (COICA), would give the Justice Department the ability to block access to sites that are deemed to be dedicated to infringing copyright.

Even worse, there's no judicial review, if someone says a site is infringing and the Justice Department agrees, the site gets blocked. And from the bill it looks as if it would be very hard to get off that blocked list once on there.

So maybe you're saying, so what, those sites shouldn't be involved in piracy and infringing copyright. But just what entails infringing copyright? The bill is pretty vague and if we go by things that the entertainment industry has considered tools of piracy, it could be just about anything.

Among the technologies that entertainment heads have accused of existing mainly to abet piracy there's: the VCR, cassette tapes, DVRs, MP3 players, Internet backup services, CD and DVD burners, and even search engines. And what about sites that promote free use rights and attack bills like that one? Maybe they should be added to those block lists as well.

Hopefully this bill will never pass a full vote of Congress but you never know. There are a lot of powerful names attached to it. If it does pass it looks like it has more than a few Constitutional issues but I would hate to have to rely on the courts to stop this idiocy.

Of course Congress isn't the only one trying to break the Internet and take away the rights of users everywhere. The Obama administration has signaled that it is planning to put forward a bill that would essentially force all encrypted Internet services; from email to secure web sites to peer to peer conversations to systems like Blackberry mail; to put in a back door hole to allow law enforcement to tap those communications.

Now some will say that this is needed to fight terrorists and is no different from tapping phone calls. But there are some significant differences.

First off, we aren't talking about a centralized phone network, we're talking about the Internet. Given the decentralized nature of the Internet, we aren't talking about one back door, we're talking about maybe thousands of back doors.

Once you cut a hole in a wall and add a back door, you are instantly less secure. If these holes exist it will only be a matter of time until bad guys can take advantage of them as well. So there goes the whole idea of secure communications on the Internet.

Even worse, once these back doors were put in, the U.S. wouldn't be the only government to insist on access to them. China, Saudi Arabia, Iran, pick your country of choice. They will all have access to these backdoors.

And like most of these efforts, it wouldn't even really work. Sure, some stupid criminals would get caught. But most would be able to easily figure out ways to get around these controls, which means that the main victims of this lessened security would be legitimate users and businesses.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.