Cyber-Cops Outgunned

Comments

1. 
   1 Jun 2004 ~ 4:37pm Straight_Man Well, some interagency co-operation CAN happen, if various levels of enforcement and security folks are willing to hand off and intershare info enough to get data to law enforcement so law enforcement can catch bad and not go after good by mistake.
   
   US-Cert, for example is a clearinghouse that will take a user report and feed to routes the reporter of info thinks should be done (FBI, FTC, FCC, NIPC(by default), publisher of software can all be reached through this single report venue, which is designed as a secure reporting session), and CERT can forward optionally the info to folks concerned with that issue.
   
   Carnegie Mellon does the infrastructure side of CERT, and is under US Gov't contract to dev it and do local admin for it. CERT then releases proven things of public need-to-know nature (like vuln plus link to workaround after vuln is worked on, or link to patch when patched) in email and in linkages to new security reports that public can get routinely delivered. Public does not see a lot of what is done, true, by default, but individuals can opt in and get lots of info if wanted.
   
   Communications of fact to people empowewred to act are key, and not hiding info from one area of enforcement by another. Turf needs to be redesigned to foster more cohesive interexchangeablility as far as factual info goes.
2. 
   1 Jun 2004 ~ 4:48pm Thrax Heeeeelloooooo U.S. HSA!