Comments
US Military Officials, Defense Firms Targeted In 'Operation Pawn Storm'
Newest First  |  Oldest First  |  Threaded View
Robert McDougal
50%
50%
Robert McDougal,
User Rank: Ninja
10/27/2014 | 1:41:20 PM
Re: Data Nationalism
I will be honest with you, I am surprised that we haven't responded militarily yet.  China and Russia are both outright robbing us in broad daylight.  
securityaffairs
50%
50%
securityaffairs,
User Rank: Ninja
10/27/2014 | 7:02:34 AM
Re: Data Nationalism
Hi Thomas, are you referring to a proactive defense or what else?

Thanks Pierluigi
Thomas Claburn
50%
50%
Thomas Claburn,
User Rank: Ninja
10/24/2014 | 6:16:18 PM
Re: Data Nationalism
Well, if hacking gets really bad, there's no reason it couldn't prompt a military response. I expect that will happen sooner or later, if only to send a message.
SgS125
50%
50%
SgS125,
User Rank: Ninja
10/24/2014 | 4:24:03 PM
Re: Data Nationalism
It is time for us to limit the access these criminals have to our "free" resources.  Why do we allow anyone from the former Russian empire any access to our Internet resources?  They all seem to be criminals who can't be found or are protected by their Governments.  I suspect we like to have an open Internet because our "whitehat" boys in DHS like to hack back and get what they can as well.  From my perspective I say lets just shut off the pipe and control the access.  What value do the web resources of the "unfree" world offer us in America anyway?

 

Sure they can buy a server here and have at it, but once discovered we can at least shut it down.  Maybe we could even find them easier?

 
lancop
50%
50%
lancop,
User Rank: Apprentice
10/24/2014 | 1:33:06 PM
The internet has become such a threat platform that one wonders...
The problem with the "Information Economy" is that stealing information has become trivial for those with the resources to do it professionally, and the real economy, the capability to use what was once proprietary information to manufacture real things, has been outsourced to emerging market countries by the Wall Street Consensus. That means that emerging market countries, like China, are increasingly poised to become the new epicenter of the Global Supply Chain and older industrial countries are becoming less & less relevant to a globalized 21st century economy except as consumers. Add to this the beefing up of military capabilities and the increasing confidence in using newly acquired weapons technologies in projecting national political power, and you have a guaranteed recipe for international conflicts in both the geo-political & economic spheres over the decades ahead. Yes, it is time to re-think how we connect critical IT infrastructure to a globalized, increasingly insecure internet infrastructure that is disempowering our own society by making it trivially easy for our competitors & adversaries alike to simply steal our intellectual property, undermine our militiary security and leech off of our economic prosperity. It often appears that we are suffering from "too much connectivity" and all this connectivity is not actually improving our way of life, but simply distracting us from those things that are really important. We're increasingly vulnerable because of feature creep that opens up more & more of our life to remote hacking, while merely delivering the appearance of "cool" innovations that marketers love as selling points but security personnel realize are actually new security holes big enough to drive a truck bomb thru. More & more I see the Information Economy as resembling the Subprime Mortgage Bond Market: just another misbegotten child of the Wolves of Wall Street - always looking for something to hype, sell and walk quickly away from when it turns out to be just smoke & mirrors. But it is likely that we have way too much momentum behind this Information Economy B.S., so I expect that we will crash into the economic slowdown ahead while text messaging.
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
10/24/2014 | 10:47:24 AM
Re: Data Nationalism
You raise a debate that has been raging in other nations, @Chrisitan Bryant. Your thoughts on this are provocative, for sure. I'd love to hear what other readers think about this. Let's debate!
Christian Bryant
50%
50%
Christian Bryant,
User Rank: Ninja
10/24/2014 | 3:28:49 AM
Data Nationalism
You might be surprised to hear me talk about a solution to issues like this from a perspective of data nationalism, being a GNU software user and Free Software Foundation supporter.  However, I am also about solutions to problems, and advanced forms of data nationalism are a direct approach to ending these types of network attacks and remote data breeches that cross continents.

The "world wide" web as we know it has reached its end, anyway.  It's time, as security analysts, to put on the tinfoil hats and take a few doses of paranoia.  First, access to the Internet is a service already, so start treating it more like one.  Federate the Internet (US, China, Canada, Brazil, etc.) and write interfaces between each unique instance of Internet ecosystems that cost money to access; expensive access, at that.

Once global networks and Internet providers are fractured and new standards and protocols are put in place to keep everyone with once open access out, hacking threats from other countries will initially be zero.  Of course, over time, the same hackers we worried about before will figure out ways to get in; however, now the pipe will be a single entry point and a small one, at that.  We can more easily monitor and prevent intrusion from non-USA would-be hackers.

Companies like Google and Facebook - who federated Internet supporters initially worried would never support such initiatives - could actually stand to benefit greatly from such changes, being able to demand high costs of countries like China and the EU whose users will want access to American Facebook and G+ users.  

It's another one of those tough decisions and unpopular ideas that holds incredible opportunity for control and security overall for American Internet-based companies and Government agencies and resources, but whose implementation just plain scares too many people.  It may be time to get over the fear.


20 Questions to Ask Yourself before Giving a Security Conference Talk
Joshua Goldfarb, Co-founder & Chief Product Officer, IDDRA,  10/16/2017
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark Reading,  10/16/2017
Hyatt Hit With Another Credit Card Breach
Dark Reading Staff 10/13/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
The State of Ransomware
The State of Ransomware
Ransomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.