Re:The OPM Data Breach [pdf]
by BoringCode on Thursday September 08, 2016 @08:24PM
(#12458745)
> Nobody seems to be in charge.
That's indeed the problem. There was a strong push for a while to put NSA in charge of civilian infosec infrastructure. But Congress didn't really want to put a combat support agency in that role. So DHS is technically in charge of that. But we still have the majority of federal agencies stuck fending for themselves when it comes to securing their networks. Without stronger action from Congress, this may never change.
Because when I think of technical sophistication, I think of DHS.
Re:The OPM Data Breach [pdf]
by BoringCode on Thursday September 08, 2016 @08:30PM
(#12458770)
Exactly, they simply have never had the institutional knowledge required to secure government networks.
Re:The OPM Data Breach [pdf]
by linkregister on Friday September 09, 2016 @01:22PM
(#12464258)
Their hostile attitude towards computer security pay incentives practically guarantees nobody will jump ship from IOC or TAO. This problem will likely only be resolved by a big media stink.
Re:The OPM Data Breach [pdf]
by Godel_unicode on Friday September 09, 2016 @01:11AM
(#12459760)
> Without stronger action from Congress, this may never change.
You should go read the cybersecurity act passed in December of 2015, and realize that DHS is now authorized to force agencies to use it's security and offerings.
Maybe it should have the power to intervene and stop it? This is still the federal government (it is not about walking into Facebook and shutting it down). I think it is the only agency with the brainpower to do it. It should be been trying to hack it and test the system periodically to identify flaws in it. Then mandate changes.
> Do you want the NSA to have the authority to cut network connections occurring in the U.S. internet?
To the federal agencies. Cyber defence doesn't work with current bloated beaurocracy. Nobody seems to be in charge.
> I doubt the vast majority of HN'ers want an increase in NSA's authority or scope.
I don't know. I would rather them spend more time defending, wouldn't mind expanding their power and diverting more budget towards that.