Department of Commerce

...now browsing by tag

 
 

Can America Take Over the Internet?

Friday, September 11th, 2009

Original Title : Cyber FUD s773

9.11.2009 – I haven’t forgotten.

A final straw has just broken this camel’s back.  I’m not exactly sure why it suddenly became such a big issue, but the story about “Obama can shut down the Internet” really topped the charts there for a while. I even had someone ask me about it without the facilitation of an electronic or analog device.  Today, I saw one more headline about the topic then was good for me, and as I said it was the last straw.  The thing that bothers me more then the sudden influx of news stories suddenly paying attention to this legislation is that nothing regarding the president’s powers has changed since its introduction. A few of us were making noise about this months ago, and it was no big deal. So some mainstream media must have picked up on it, and the type of people who take in that sort of information ate it up. In what seems to be par for the course, those covering the story have no idea what they are talking about, and are just playing on the popularity of the subject to attract attention to their publication. 

Internet Takedown Links

Let’s just skip over the fertile male bovine fecal matter, and get to the point.

Can Obama Shut Down the Internet?  – New Legislation Gives President Emergency Control.

That is a whole load of ignorance. Obama wouldn’t know how to turn off the internet even if such a thing was possible.  Yes the new legislation does contain wording related to the executive powers of control over critical infrastructure, but in reality this is nothing new. 

Lawmakers strike new tone with proposed bill giving Obama power to shut down Internet

When the bill was release in April, Leslie Harris, president and CEO at the Center for Democracy and Technology (CDT), which promotes democratic values and constitutional liberties for the digital age, told Network World: “We are confident that the communication networks and the Internet would be so designated [as critical infrastructure], so in the interest of national security the president could order them disconnected.”


I suppose this is the right day for this article.

In time of emergency the government has the power to seize control over anything and everything they desire. This includes the communications infrastructure and access to the internet.  If the people covering this story were aware of this, they might have expressed their concern over the redundancy of this power; why are they reminding us of this now?

Existing laws already give the president broad discretion on how to respond to cyberattacks, despite language in a Senate bill that proposes giving the president specific powers during such events, according to experts.

Experts debate expansion of president’s cybersecurity powers

The president has that power under the National Security Strategy, Addicott said. The most recent National Security Strategy was published in 2006.

Addicott said the bill — S.773 — probably included the language to more clearly define how government officials expect to react to a potential threat, Addicott said. There are precedents for presidents acquiring authority in situations where they do not legally need it, he said.


The people pushing this legislation are using scare tactics to advance their agenda. Using the threat of a cyber-911 or cyber-pearl harbor type of event as leverage to wedge the legislation into existence, they are merely trying to grow a new teat on Uncle Sam’s buttocks for them to feed from.

New Threat Scenarios Drive Cybersecurity Planners to Mull Responses

“It could even be a panic if you think about it,” Meyerrose said. “A story catches hold, there’s an attribution that says that country x has infiltrated something and nobody can take anything out of an ATM, or your power is going to go off or your water is going to turn off or whatever. And then a panic ensues. Those are the kinds of things (to consider) when you’re talking about cyber 911s or cyber Pearl Harbors, in my view.”

Meyerrose said laws are in place already for a situation like the one eight years ago, when the United States was attacked and President Bush ordered all aircraft grounded until further notice. But those aren’t easily applicable to cyberspace.

“There are already provisions I believe — and most of the folks in the business and the government believe — that give the powers to the president that allow to effectively do what needs to be done in times of national emergency,” Meyerrose said.

“I would be troubled if the president didn’t have some sort of emergency powers” for the Internet, he added. “The real ambiguity is, what’s the trip wire for making it a national emergency?”

 Obama Administration Seeks “Emergency Control” of the Internet

True enough as far as it goes, these “free market” cheerleaders are extremely solicitous however, when it comes to government defense and security contracts that benefit their clients; so long as the public is spared the burden of exercising effective control as cold cash greases the sweaty palm of the market’s “invisible hand”!


Of course Meyerrose is the former head of technology for the US Spymaster, and is now the traveling salesman for the Harris Corporation which works with the NSA on U.S. SECRET level encrypted communications. In  2008 it was the number one recipient of funds from the Department of Commerce, and makes billions of dollars a year in revenue. Security and cyber is their business. With the cybercommand being hosted by the NSA, I’m sure Harris <HRS> is a stock symbol to watch.

Internet security bill continues to cause uproar

Larry Clinton, president of the Internet Security Alliance, which represents a cross-section of IT companies including Verizon and Nortel, has criticized what he calls vaguely worded language in the latest version.

“It is [still] unclear what authority … is necessary over the private sector. Unless this is clarified, we cannot properly analyze, let alone support the bill,” he states.

However, there are those who say the recommendations make sense. James Lewis of the Center for Strategic and International Studies compared the provisions to President Bush’s decision to shut down airlines after the 9/11 attacks.

“It seems foolish not to have the same authority for cyberspace,” he said, quoted by TheHill.com. “It’s not that the president will wake up in a bad mood one day and implode Yahoo. This would apply only to s
evere national emergencies. … This is a great opportunity to blast us into a new level of discussion about cybersecurity.”


Ok, so not everyone writing about this is in need of immediate cranial rectal extraction, just most of them.  Lewis’ statement points something out that is important to note.


James Lewis of the Center for Strategic and International Studies compared the provisions to President Bush’s decision to shut down airlines after the 9/11 attacks.


Next time you read a story that says ‘the government can’t shut down the internet because 90% of the infrastructure is privately owned’, I want you to think for a moment; did the government own the airlines?  Remember, once these systems are designated as critical infrastructure, regardless of their ownership, they will be required to comply with federal standards which put them indirectly under government control. Depending on who is attached to these networks, the systems will fall under control of either Homeland Security or the NSA.  Both competent agencies with the publics best interests at heart.

Obama Administration Seeks “Emergency Control” of the Internet

Drafted by Senators Jay Rockefeller (D-WV) and Olympia Snowe (R-ME), “best friends forever” of the National Security Agency (NSA) and the telecommunications industry, they were key enablers of Bush-era warrantless wiretapping and privacy-killing data mining programs that continue apace under Obama.


Once the ‘emergency’ is declared, and the networks are commandeered, privacy’s already dead zombie corpse is beheaded and killed with fire, so not even the illusion of privacy would remain. 

The initial question remains. Can America Take Over The Internet?

My initial reactionary response to this absurd question is “of course not”.  Though after some discussion it seems to be that with enough pressure from the United States, most international corporations, telecommunications providers, and ISP’s are likely to cave and accept the forced compliance standards.  After all if America gets the DNSSEC root, then the DHS will be able to shut down pretty much whatever they want on an international scale, not to mention that the IANA was a US Department of Defense contract which ICANN was created to handle after the death of John Postal

New Agreement Means Greater Independence in Managing the Internet’s System of Unique Identifiers

“The United States Department of Commerce has clearly signaled that multi-stakeholder management of the Internet’s system of unique identifiers is the way ahead and ICANN is the obvious organization to take that responsibility,”- ICANN will no longer have its work prescribed for it. How it works and what it works on is up to ICANN and its community to devise;- ICANN is not required to report every 6 months as it has been under the MOU. It will now provide an annual report that will be targeted to the whole Internet community; – There is no requirement to report regularly to the DOC. The DOC will simply meet with senior ICANN staff from time to time. “The ICANN model of multi-stakeholder consultation is working and this agreement endorses it.


No requirement to report to the Department of Commerce, they can just come over for drinks every once in a while to see how things are going.   “Multi-stakeholder consultation”, makes me wonder where the ICANN is getting its funding.  Strangely enough, the federal funding for ICANN seems to be incompletely listed

ICANN Funding

It is unclear from the above paragraph whether ICANN inherits IANA’s self-proclaimed mandate of ‘Preserving the central coordinating functions of the global Internet for the public good.’ However, it would appear that it is in a good position to assert end-users should be willing to pay. If they are not, then the internet should be allowed to fall apart. Certainly the regulatory authorities who have largely stepped aside to allow this experiment to happen ‘would like to see an economically rational and practical charging system – a contribution per name registered for example.’ Therefore ICANN devises a funding scheme that not only takes account of internediary functions, but goes directly to the beneficiaries of the connectivity ICANN preserves and asks them for a contribution appropriate to the value of their benefit. ICANN provides security and stability. What is the price of that stabilty and security? What further can ICANN do to provide these services? It is in terms of the above argument that, apart from registry contributions, well-wisher contributions (disallowed as political contirbutions long-term?), we devised a quadripartite funding plan which can draw income from the end-user services ICANN provides. However it is not suggested that ICANN, in its not-for-profit guise, should operate these income streams directly -this would hazard the not-for-profit status of ICANN and threaten its mandate-, but that it be an agreed beneficiary on a cost-recovery basis, whilst any other pooled income accrues to internediaries pro rata.


So now, I believe, the question should be: “Can the World Take The Internet From the USA?”
Click to continue »

S.773 – The Cyber Security Act of 2009 – part 2

Monday, June 1st, 2009

This is the second part in a series concerning the Cybersecurity Act of 2009. s773.  As per request I have broken a large single page into sections. If you liked it the other way let me know. Please forgive my use of the term -cyber-, and any other marketing buzzwords. I’m just reflecting the terminology used.

s.773 Cybersecurity Act of 2009 part 2.


The relationship between the national intelligence agencies, and the private information technology sector has long since been consummated.  There exists a tight federal and private partnership, with the majority of intelligence work being outsourced from the federal level to the corporate.  This legislation is nothing more then a formality. It makes the partnership public knowledge, and gives the intelligence industrial complex an official voice in the white house.

SEC. 3. CYBERSECURITY ADVISORY PANEL.

    (a) IN GENERAL- The President shall establish or designate a Cybersecurity Response Advisory Panel.
    (b) QUALIFICATIONS- The President–
    (1) shall appoint as members of the panel representatives of industry, academic, non-profit organizations, interest groups and advocacy organizations, and State and local governments who are qualified to provide advice and information on cybersecurity research, development, demonstrations, education, technology transfer, commercial application, or societal and civil liberty concerns; and
    (2) may seek and give consideration to recommendations from the Congress, industry, the cybersecurity community, the defense community, State and local governments, and other appropriate organizations.

The President will select people who are qualified to provide advice and information on cybersecurity research, development, demonstrations, education, technology transfer, commercial application, or societal and civil liberty concerns.

This is quite a broad section of potential appointees. There is no mention about how the selection process would be carried out, or what makes one person more qualified then another to serve on the panel. The President is neither qualified to carry out the selection process, nor able to comprehend the details of recommendations given to him.  Instead it would be necessary to create a “National Cyber Security Czar.”  A sort of interpreter to advise the President in terms he can understand, and to give the President’s speech writer terms most people can comprehend.  I suspect what we will ultimately see is the creation of a new cabinet position, a ‘Secretary of Cyberdefense’. Though it seems this has been done in the form of the National Cybersecurity Center.

US Cyber Head Quits Over Threats To Democracy

Rod Beckstrom, the head of the Department of Homeland Security’s National
Cyber Security Center, said last week he would be stepping down
effective March 13.

In a letter to Homeland Security Secretary Janet Napolitano, Beckstrom said
the NSA “dominates most national cyber efforts” and “effectively controls
DHS cyber efforts through detailees, technology insertions and the proposed
move” of the NCSC to an NSA facility at the agency’s Fort Meade, Md.,
headquarters.

In addition to the NCSC there is also the position of White House Cybersecurity Chief. With regards to part one of this article, I feel it important to note that the acting White House Cybersecurity Chief Melissa Hathaway was Senior Advisor to the Director of National Intelligence, Mike McConnell and Cyber Coordination Executive, she specialized in cybersecurity strategies with consulting firm Booz Allen Hamilton.


President Obama made an announcement in regards to the nation’s cybersecurity direction. Included in this plan is the appointment of Chief Cybersecurity Coordinator. It seems they will not be going with the title ‘czar’ this go round. It makes sense for the first people to be approached for positions on the panel will be people already currently employed in the service of the government. Those quoted in the findings would be an excellent example of potential panel members.  Despite the new campaign from the Department of Defense to recruit hackers out of high school, I strongly doubt there will be any application process for independent civilian admission onto the panel. With Ms. Hathaway on the inside, and her former boss on the outside, it seems that not only has the chess board been set, the game has been played and what we are seeing is the results of the match finalized and put down on paper.

Spies for Hire, US pays Carlyle Group to spy-2/3

Click to continue »

Twitter links powered by Tweet This v1.8, a WordPress plugin for Twitter.

Get Adobe Flash player