{"id":21092,"date":"2016-06-18T19:18:44","date_gmt":"2016-06-19T00:18:44","guid":{"rendered":"http:\/\/olduvai.ca\/?p=21092"},"modified":"2016-06-18T19:19:08","modified_gmt":"2016-06-19T00:19:08","slug":"ex-white-house-officials-criticize-vague-rules-around-disclosure-of-hacking-tools","status":"publish","type":"post","link":"https:\/\/olduvai.ca\/?p=21092","title":{"rendered":"Ex-White House Officials Criticize Vague Rules Around Disclosure of Hacking Tools"},"content":{"rendered":"<div class=\"Post-header\" data-reactid=\".ti.1.0.0\">\n<div class=\"Post-header-grid\" data-reactid=\".ti.1.0.0.3\">\n<div class=\"Post-header-row\" data-reactid=\".ti.1.0.0.3.0\">\n<div class=\"Post-header-block\" data-reactid=\".ti.1.0.0.3.0.1\">\n<div data-reactid=\".ti.1.0.0.3.0.1.0\">\n<div class=\"Post-title-block\" data-reactid=\".ti.1.0.0.3.0.1.0.1\">\n<h3 class=\"Post-title\" data-reactid=\".ti.1.0.0.3.0.1.0.1.0\"><a class=\"Post-title-link\" href=\"https:\/\/theintercept.com\/2016\/06\/17\/ex-white-house-officials-criticize-vague-rules-around-disclosure-of-hacking-tools\/\" data-reactid=\".ti.1.0.0.3.0.1.0.1.0.0\">Ex-White House Officials Criticize Vague Rules Around Disclosure of Hacking Tools<\/a><\/h3>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"Post-body\" data-reactid=\".ti.1.0.1\">\n<div class=\"Post-content-block-outer\" data-reactid=\".ti.1.0.1.1\">\n<div class=\"GridContainer\" data-reactid=\".ti.1.0.1.1.0\">\n<div class=\"GridRow\" data-reactid=\".ti.1.0.1.1.0.0\">\n<div class=\"Post-content-block\" data-reactid=\".ti.1.0.1.1.0.0.0\">\n<div class=\"Post-content-block-inner\" data-reactid=\".ti.1.0.1.1.0.0.0.0\">\n<div class=\"PostContent\" data-reactid=\".ti.1.0.1.1.0.0.0.0.1\">\n<div data-reactid=\".ti.1.0.1.1.0.0.0.0.1.$p-0\">\n<p>WHEN U.S. GOVERNMENT\u00a0officials discover a new vulnerability they can use to hack into people\u2019s computers, they have a decision to make: Should they keep it to themselves? Or should they warn the world?<\/p>\n<p>Exactly how they make that decision is a mystery.<\/p>\n<p>Now, two top former White House cybersecurity officials are recommending in a\u00a0<a href=\"http:\/\/belfercenter.ksg.harvard.edu\/files\/vulnerability-disclosure-web-final3.pdf\">report<\/a>\u00a0that the administration be more transparent about how it deals with those vulnerabilities when it discovers them or buys tools to exploit them from the private sector.<\/p>\n<p>\u201cThe principles guiding these decisions, as well as a high-level map of the process that will be used to make such decisions, can and should be public,\u201d wrote Ari Schwartz and Robert Knake in a new report for Harvard\u2019s Belfer Center for Science and International Affairs.<\/p>\n<p>Members of the intelligence community have an obvious incentive to hold on to undiscovered cyber flaws so they can keep using them to hack their targets. But failing to tell a company about a flaw in its product \u2014 so it can be fixed \u2014 puts users at risk from other hackers.<\/p>\n<p>The White House\u2019s continued refusal to explain how it balances the priorities of intelligence versus cybersecurity for Americans is leading to a lack of public trust, the authors suggest.<\/p>\n<p>In 2015, White House officials begrudgingly released heavily redacted guidelines for disclosing cyber threats, which they call the Vulnerabilities Equities Process, to the\u00a0<a href=\"https:\/\/www.eff.org\/cases\/eff-v-nsa-odni-vulnerabilities-foia\">Electronic Frontier Foundation<\/a>. They also issued a vague White House\u00a0<a href=\"https:\/\/www.whitehouse.gov\/blog\/2014\/04\/28\/heartbleed-understanding-when-we-disclose-cyber-vulnerabilities\">blog post<\/a>.<\/p>\n<p>But as the public becomes more aware of the government\u2019s ability to go on the technological offensive \u2014\u00a0<a href=\"https:\/\/theintercept.com\/2015\/09\/28\/hacking\/\">hacking against adversaries<\/a>\u00a0\u2014 consumer advocates are asking how that capability is regulated.<\/p>\n<p>&#8230;click on the above link to read the rest of the article&#8230;<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Ex-White House Officials Criticize Vague Rules Around Disclosure of Hacking Tools WHEN U.S. GOVERNMENT\u00a0officials discover a new vulnerability they can use to hack into people\u2019s computers, they have a decision to make: Should they keep it to themselves? Or should they warn the world? Exactly how they make that decision is a mystery. Now, two [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[6],"tags":[2148,2712,11950,765,5567,877],"class_list":["post-21092","post","type-post","status-publish","format-standard","hentry","category-liberty","tag-hacking","tag-intelligence","tag-jenna-mclaughlin","tag-surveillance","tag-the-intercept","tag-white-house"],"_links":{"self":[{"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/posts\/21092","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/olduvai.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=21092"}],"version-history":[{"count":1,"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/posts\/21092\/revisions"}],"predecessor-version":[{"id":21093,"href":"https:\/\/olduvai.ca\/index.php?rest_route=\/wp\/v2\/posts\/21092\/revisions\/21093"}],"wp:attachment":[{"href":"https:\/\/olduvai.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/olduvai.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/olduvai.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}