Cyber-war law would expose customer privates to spies

Big biz and US govt propose info sharing


US lawmakers are backing a bill that will let spy agencies share top-secret information on cyber threats with certain pre-approved companies, and allow firms to give out data on their customers to the spies.

The Permanent Select Committee on Intelligence voted to put forward the legislation (PDF), which would build on a pilot programme in the Pentagon sharing clandestine and sensitive data with defence contractors and internet firms.

“There is an economic cyber war going on today against US companies,” the chairman of the committee Mike Rogers said in a statement supporting the bill.

“There are two types of companies in this country: those who know they’ve been hacked, and those who don’t know they’ve been hacked.

"Economic predators, including nation-states, are blatantly stealing business secrets and innovation from private companies. This cybersecurity bill goes a long way in helping American businesses better protect their networks and their intellectual property," he added.

Companies including Microsoft, IBM and Verizon have all written in support of the bill, saying it will help them to combat cyber threats more effectively.

However, the bill also provides for private entities sharing information with intelligence agencies, something that privacy advocates aren't too happy about.

An amendment to the bill that attempts to deal with privacy concerns states that the data can only be used for cyber or national security reasons – but many would say that casts a fairly wide net.

The American Civil Liberties Union (ACLU) has already said that it will oppose the bill if more privacy protections aren't put in place.

"The Cyber Intelligence Sharing and Protection Act would create a cybersecurity exception to all privacy laws and allow companies to share the private and personal data they hold on their American customers with the government for cybersecurity purposes," the ACLU said in a letter to the committee.

"The bill would not limit the companies to sharing only technical, non-personal data. Instead, it would give the companies discretion to decide the type and amount of information to turn over to the government.

"While such data might be used for cybersecurity purposes, there would be no bar on the government also using it to conduct fishing expeditions for criminal, immigration or other purposes," it added.

The US has become increasingly concerned about the cybersecurity of its firms and cyber-espionage from foreign countries.

Last month, a government report claimed that agents from both China and Russia were frequently hacking into US firms to make off with their technological and economic secrets, although it stopped short of saying that their governments were definitely behind the cyber attacks.

The House of Representatives committee on intelligence also launched an investigation last month into Chinese telecoms firms in the country, including Huawei and ZTE, to look at "the extent to which" the companies were giving their government the opportunity to spy on the US.

China's government and its firms have hotly denied the allegations, and say they want to cooperate with investigations and sort out cyber espionage as much as the next country. ®


Other stories you might like

  • VMware claims 'bare-metal' performance from virtualized Nvidia GPUs
    Is... is that why Broadcom wants to buy it?

    The future of high-performance computing will be virtualized, VMware's Uday Kurkure has told The Register.

    Kurkure, the lead engineer for VMware's performance engineering team, has spent the past five years working on ways to virtualize machine-learning workloads running on accelerators. Earlier this month his team reported "near or better than bare-metal performance" for Bidirectional Encoder Representations from Transformers (BERT) and Mask R-CNN — two popular machine-learning workloads — running on virtualized GPUs (vGPU) connected using Nvidia's NVLink interconnect.

    NVLink enables compute and memory resources to be shared across up to four GPUs over a high-bandwidth mesh fabric operating at 6.25GB/s per lane compared to PCIe 4.0's 2.5GB/s. The interconnect enabled Kurkure's team to pool 160GB of GPU memory from the Dell PowerEdge system's four 40GB Nvidia A100 SXM GPUs.

    Continue reading
  • Nvidia promises annual datacenter product updates across CPU, GPU, and DPU
    Arm one year, x86 the next, and always faster than a certain chip shop that still can't ship even one standalone GPU

    Computex Nvidia's push deeper into enterprise computing will see its practice of introducing a new GPU architecture every two years brought to its CPUs and data processing units (DPUs, aka SmartNICs).

    Speaking on the company's pre-recorded keynote released to coincide with the Computex exhibition in Taiwan this week, senior vice president for hardware engineering Brian Kelleher spoke of the company's "reputation for unmatched execution on silicon." That's language that needs to be considered in the context of Intel, an Nvidia rival, again delaying a planned entry to the discrete GPU market.

    "We will extend our execution excellence and give each of our chip architectures a two-year rhythm," Kelleher added.

    Continue reading
  • Now Amazon puts 'creepy' AI cameras in UK delivery vans
    Big Bezos is watching you

    Amazon is reportedly installing AI-powered cameras in delivery vans to keep tabs on its drivers in the UK.

    The technology was first deployed, with numerous errors that reportedly denied drivers' bonuses after malfunctions, in the US. Last year, the internet giant produced a corporate video detailing how the cameras monitor drivers' driving behavior for safety reasons. The same system is now apparently being rolled out to vehicles in the UK. 

    Multiple camera lenses are placed under the front mirror. One is directed at the person behind the wheel, one is facing the road, and two are located on either side to provide a wider view. The cameras are monitored by software built by Netradyne, a computer-vision startup focused on driver safety. This code uses machine-learning algorithms to figure out what's going on in and around the vehicle.

    Continue reading

Biting the hand that feeds IT © 1998–2022