Toribash
So Lets see how they define cyberthreat :

"
‘(4) CYBER THREAT INFORMATION-
‘(A) IN GENERAL- The term ‘cyber threat information’ means information directly pertaining to--[*]‘(i) a vulnerability of a system or network of a government or private entity;
‘(ii) a threat to the integrity, confidentiality, or availability of a system or network of a government or private entity or any information stored on, processed on, or transiting such a system or network;
‘(iii) efforts to deny access to or degrade, disrupt, or destroy a system or network of a government or private entity; or
‘(iv) efforts to gain unauthorized access to a system or network of a government or private entity, including to gain such unauthorized access for the purpose of exfiltrating information stored on, processed on, or transiting a system or network of a government or private entity.

"

Or

‘(6) CYBERSECURITY CRIME- The term ‘cybersecurity crime’ means--
‘(A) a crime under a Federal or State law that involves--

‘(i) efforts to deny access to or degrade, disrupt, or destroy a system or network;
‘(ii) efforts to gain unauthorized access to a system or network; or
‘(iii) efforts to exfiltrate information from a system or network without authorization;


Basically means that anyone expressing a negative opinion about the government or a company can be considered as a "threat". Basically everyone.
It also make investigative journalism, or the revelation of abject positions and choices of govt or company leaders, fall under "cybersecurity crime".
And i'm not sure but "effort to deny access to" could simply be seen as "setting a password"...

And people who generally hack their way to sensible informations in order to reveal those to the public, not physically hurting anyone, and trying to bring some "justice" in that money world, those people are fuckin heroes.

Anyway, I quoted only that part because a huge part of the bill is politic/lawyer giberish for me; plus it's not my mother tongue. But some lawyers and people with far more knowledges and experience in that area took the time to "popularise" its content, and explained how it is a danger for people and their liberty. If everyone had the knowledges and will to understand those bills, they wouldn't even bother trying to make them !
But thanks to the people who bother explaining to us, the mass, what's really at stake.
Last edited by deprav; Apr 24, 2013 at 07:20 PM.
Originally Posted by deprav View Post
So Lets see how they define cyberthreat :

"
‘(4) CYBER THREAT INFORMATION-
‘(A) IN GENERAL- The term ‘cyber threat information’ means information directly pertaining to--[*]‘(i) a vulnerability of a system or network of a government or private entity;
‘(ii) a threat to the integrity, confidentiality, or availability of a system or network of a government or private entity or any information stored on, processed on, or transiting such a system or network;
‘(iii) efforts to deny access to or degrade, disrupt, or destroy a system or network of a government or private entity; or
‘(iv) efforts to gain unauthorized access to a system or network of a government or private entity, including to gain such unauthorized access for the purpose of exfiltrating information stored on, processed on, or transiting a system or network of a government or private entity.

"

Or

‘(6) CYBERSECURITY CRIME- The term ‘cybersecurity crime’ means--
‘(A) a crime under a Federal or State law that involves--

‘(i) efforts to deny access to or degrade, disrupt, or destroy a system or network;
‘(ii) efforts to gain unauthorized access to a system or network; or
‘(iii) efforts to exfiltrate information from a system or network without authorization;


Basically means that anyone expressing a negative opinion about the government or a company can be considered as a "threat". Basically everyone.
It also make investigative journalism, or the revelation of abject positions and choices of govt or company leaders, fall under "cybersecurity crime".
And i'm not sure but "effort to deny access to" could simply be seen as "setting a password"...

And people who generally hack their way to sensible informations in order to reveal those to the public, not physically hurting anyone, and trying to bring some "justice" in that money world, those people are fuckin heroes.

Anyway, I quoted only that part because a huge part of the bill is politic/lawyer giberish for me; plus it's not my mother tongue. But some lawyers and people with far more knowledges and experience in that area took the time to "popularise" its content, and explained how it is a danger for people and their liberty. If everyone had the knowledges and will to understand those bills, they wouldn't even bother trying to make them !
But thanks to the people who bother explaining to us, the mass, what's really at stake.

No. NO.


It does not mean anyone that expresses a negative opinion is a threat.
It is EXACTLY as it says. A vulnerability, a threat to the integrity, confidentiality or availability, or an effort to deny, disrupt or destroy a system.

This is nothing to do with having a negative opinion.

Why do you quote one part then say it proves something COMPLETELY different?

i) defines it as a vulnerability, something that makes a system vulnerable to attack, for example a misconfigured ssh server.
ii) says it can be something that causes a risk of integrity or confidentiality or availability of a system to fail, for example a virus that could corrupt or steal data or take a system offline.
iii) is obviously a counter to DoS and DDoS attacks

Where the hell did you pull your garbage from?
Originally Posted by ImmortalCow View Post
No. NO.


It does not mean anyone that expresses a negative opinion is a threat.
It is EXACTLY as it says. A vulnerability, a threat to the integrity, confidentiality or availability, or an effort to deny, disrupt or destroy a system.

This is nothing to do with having a negative opinion.

Why do you quote one part then say it proves something COMPLETELY different?

i) defines it as a vulnerability, something that makes a system vulnerable to attack, for example a misconfigured ssh server.
ii) says it can be something that causes a risk of integrity or confidentiality or availability of a system to fail, for example a virus that could corrupt or steal data or take a system offline.
iii) is obviously a counter to DoS and DDoS attacks

Where the hell did you pull your garbage from?

i) ok, so that would imply a threat coming from the inside of the company/gvnmt, or a mistake.
ii) "A threat to the integrity, confidentiality... of ANY information stored on, processed on, or transiting such a system or network"

Do you know the number of informations transiting on a company/govt server ? a threat to the confidentiality of ANY information is totally retarded, even things we know are stored or transit through those servers. Means if you talk about itor express an opinion you're basically a "threat".
And "integrity" have multiple definitions : unity/"wholeness", and honesty (following a moral line). That makes it totally borderline, they could choose among a good bunch of words, they chose "integrity".
> that's a blow to freedom of speech

iii) efforts to deny access to or degrade, disrupt, or destroy a system or network of a government or private entity

Yep the DoS/DDoS aspect works ofc, if you think about big companies n shit. But you can also read it the other way, someone's PC, e-mail adress, or a group network (an information website offices or newspaper for exemple), are private entities, and people won't allow anyone to access his/their private informations for no reasons, therefore that's denying the access to a private entity, that's a "threat".
> private informations in danger.

It's purely and simply a totalitarian drift. And plenty organizations, like Reporters Sans Frontières (Reporters without borders) among others, are worried about it. It's not an armless bill to fight terrorism as you seem to think.

"Where the hell did you pull your garbage from?"

Critical thinking I guess, you should try it someday.
You're asking for quotes but you're reading it like a child. I'm pretty sure you were already convinced before you started reading the whole thing anyway.
Last edited by deprav; Apr 25, 2013 at 07:24 PM.
The internet is a nice place.
If it became scary I wouldnt stay much longer.
Well it has rules and stuff but its nice.

I dont like this law
hi
Originally Posted by deprav View Post
i) ok, so that would imply a threat coming from the inside of the company/gvnmt, or a mistake.
ii) "A threat to the integrity, confidentiality... of ANY information stored on, processed on, or transiting such a system or network"

Do you know the number of informations transiting on a company/govt server ? a threat to the confidentiality of ANY information is totally retarded, even things we know are stored or transit through those servers. Means if you talk about itor express an opinion you're basically a "threat".
And "integrity" have multiple definitions : unity/"wholeness", and honesty (following a moral line). That makes it totally borderline, they could choose among a good bunch of words, they chose "integrity".
> that's a blow to freedom of speech

No, these words have specific meanings in information security. Integrity means the validity of data or systems. Unauthorized attempts to view or modify data respectively disrupt the confidentiality or integrity of a system.

No, if you talk about it or express an opinion you are not a threat.
Originally Posted by deprav View Post
iii) efforts to deny access to or degrade, disrupt, or destroy a system or network of a government or private entity

Yep the DoS/DDoS aspect works ofc, if you think about big companies n shit. But you can also read it the other way, someone's PC, e-mail adress, or a group network (an information website offices or newspaper for exemple), are private entities, and people won't allow anyone to access his/their private informations for no reasons, therefore that's denying the access to a private entity, that's a "threat".
> private informations in danger.

If someone attempts to disrupt your email, yes that is a crime. However it is not disruption if you refuse to authorize access to a resource you control. Denying authorization is not the same as denying access.

Once again, these terms have specific meanings in information security.
Originally Posted by deprav View Post
It's purely and simply a totalitarian drift. And plenty organizations, like Reporters Sans Frontières (Reporters without borders) among others, are worried about it. It's not an armless bill to fight terrorism as you seem to think.

"Where the hell did you pull your garbage from?"

Critical thinking I guess, you should try it someday.
You're asking for quotes but you're reading it like a child. I'm pretty sure you were already convinced before you started reading the whole thing anyway.

Terrorism? Are you just throwing in buzz words? It's obviously an effort to formalize the definitions from the old computer misuse act.

If you have no knowledge of information security, then of course you can derp around and invent your own meanings for words. To anyone who knows infosec, this bill is reasonable and beneficial.

None of the things you said are valid.
"Some people are saying CISPA is dead. It’s a little more complicated than that -- the Senate will very likely break up CISPA into a few bills, and we’re not sure yet what that will look like.

The bad news: CNET has obtained 1,000 pages of government documents that reveal the Obama administration secretly authorized a backdoor for warrantless online wiretapping. Basically, the government promised not to prosecute companies for breaking privacy laws as long as they co-operated with government spying.

CISPA is just legislative backup for what the U.S. government has been already doing secretly (and possibly illegally) -- violating our online privacy rights.

We don’t want to live in a country where that’s okay. Help us respond quickly and loudly! It's unacceptable for the U.S. Government to violate the world’s online privacy, regardless of what acronym they use for it.

We made this easily shareable image to help spread the word about this. Can you share it on social media to make sure this doesn't stay a secret"
Thought I'd share this.
=
Originally Posted by Velair View Post
CISPA is just legislative backup for what the U.S. government has been already doing secretly (and possibly illegally) -- violating our online privacy rights.

Citation needed.

As previously discussed, CISPA requires a specific cyber threat to be identified before threat information can be transferred. Cyber threats are already considered crime under the computer fraud and abuse act, so in other words "entities can share information on how crimes against them are committed" How is this not unreasonable?