H.R. 4036: Active Cyber Defense Certainty Act

[rslade]

OK, USians, possibly time to talk to your Congresscritters.

Govtrack gives H.R. 4036, aka the Active Cyber Defense Certainty Act, only about a 12% chance of succeeding.  Which is probably a good thing.

"Congress determines that the use of active cyber defense techniques, when properly applied, can also assist in improving defenses and deterring cybercrimes."

 Oh, really?

The rest of the rationale seems to be that attackers are dangerous and fast, and waiting around for law enforcement to help you is just going to give the bad guys time to destroy your systems and get away.

OK, I don't understand all of the wording in this bill.  (I rather suspect that the author isn't entirely certain of it, either.)  But the overall upshot seems to be that, yes, you can attack anyone who is attacking you (or who you think is attacking you) if you tell the FBI you are going to do it.

Come to think of it, good luck with finding, before the bad guys destroy your systems and get away, someone in the FBI who understands the situation and will give you official permission to mount an active defence attack.

[rslade]

---

@HTCPCP-TEA wrote:

Let us know where you do get to present.

---

OK, the Vancouver Chapter is doing it next week, Feb. 8, 2-4 pm, PST.

For those of you who aren't in Vancouver (poor you), we will be broadcasting this meeting
and may post it later on YouTube. Please register by sending an email to van.secsig@gmail.com with the Subject line: February 8th, 2019 + Your Name. You will get an email with the YouTube URL just before the meeting.  (It might start a little after 2 pm.)  While you are welcome to share your display with colleagues (but remind them to abide by the confidentiality rules set by the speaker for the meeting), please do not forward the URL to others (instead, ask them to join VanSecSIG and register directly for the video broadcast). Please also note that the (ISC)² Vancouver Chapter will only submit CPE credits for those who attend the meeting in person and sign the attendance sheet.  (You can still submit for your own CPEs, but we can't prove anything about your attendance.)

[Flyslinger2]

Here on the East Coast in DC that is Happy Hour and Mrs. Fly doesn't like her date night messed with. So, I will wait for the Youtube link so I can watch it at a later time.  Hope it goes well!