SOPA is a Major Security Problem and Congress Doesn't Care
Tech companies and security experts oppose law that seems drafted with no knowledge of how the internet actually operates.
Congress has changed its “mind” (try not to be too surprised) and says it will now move ahead with hearings about the Stop Online Privacy Act (SOPA) just two days after it said it was tabling the matter until next month. While the press coverage has been about free speech issues, SOPA is definitely a security problem as well.
SOPA and the Protect IP Act (PIPA), another piece of legislation, both want to crack down on internet pirating – a goal every bit as laudable as the measures themselves are flawed. The bills would require companies to monitor user content, limiting the use of pictures, video and audio and other media. One problem that is it is pretty much impossible to tell the difference between an ISP interfering with a connection because of a court order and a hacker interfering prior to an attack.
Internet security savants Dan Kaminsky, Paul Vixie, Steven Bellovin, Jon Callas, David Ulevitch, Richard Clayton, L. Jean Camp, Ben Laurie and Chris Morrow, joined with 75 other major internet inventors and pioneers in an open letter to Congress objecting to the bill:
Censorship of Internet infrastructure will inevitably cause network errors and security problems. This is true in China, Iran and other countries that censor the network today; it will be just as true of American censorship. It is also true regardless of whether censorship is implemented via the DNS, proxies, firewalls, or any other method. Types of network errors and insecurity that we wrestle with today will become more widespread, and will affect sites other than those blacklisted by the American government.
Despite the fact that the bills are also opposed by Yahoo, Facebook, Twitter, eBay, AOL, Google, Microsoft, Intel, Adobe and Apple, Congress seems determined to act on them. There has been a lot of very well-funded lobbying for the bill from Hollywood -- the Motion Picture Association of America (MPAA) and movie studios themselves. (It is worth noting that two of the congressional aides who helped draft the bill recently got jobs with the MPAA and the National Music Publishers’ Association, another supporter.)
The bill is being debated with all the finesse and intelligence we’ve come to expect from Congress. So far opponents have been all but non-existent in the hearings and DNS and security issues brushed aside. Here’s how a Washington Post reporter described them.
This is terrifying to watch. It would be amusing — there’s nothing like people who did not grow up with the Internet attempting to ask questions about technology very slowly and stumbling over words like “server” and “service” when you want an easy laugh. Except that this time, the joke’s on us.
The leaders in the fight for the bill are Reps. Lamar Smith (R-Tex), Bob Goodlatte (R-VA) and Mel Watt (D-NC). If they are your reps and you think the bill is as dangerous as I do, then now would be a good time for you or your company to pick up the phone.
Previous Post: Virulent Bank Robbing Code Released by Hacker: Round-up of Week's IT...Next Post: Why Did the Chinese Hack into the U.S. Chamber of Commerce?
Most Discussed Posts
Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.
Sponsored Links
