Feeds

White House threatens veto of CISPA surveillance bill

Obama lowers the boom on snoop law

Protecting users from Firesheep and other Sidejacking attacks with SSL

The White House has said that the Cyber Intelligence Sharing and Protection Act (CISPA), currently before the US House of Representatives, lacks enough privacy protections in its current form and will probably be vetoed if passed.

A statement from the White House Office of Management and Budget said that, while the importance of protecting the national infrastructure from online attacks is paramount, it "strongly opposes" the bill because it lacks proper oversight, could seriously damage individuals' privacy and hands over responsibility for domestic cybersecurity to the NSA, rather than to a civilian body.

"Legislation should address core critical infrastructure vulnerabilities without sacrificing the fundamental values of privacy and civil liberties for our citizens, especially at a time our Nation is facing challenges to our economic well-being and national security," the statement reads.

"The Administration looks forward to continuing to engage with the Congress in a bipartisan, bicameral fashion to enact cybersecurity legislation to address these critical issues. However, for the reasons stated herein, if H.R. 3523 were presented to the President, his senior advisors would recommend that he veto the bill."

The bill as it stands sets up a mechanism for government cybersecurity agencies to share threat data with commercial companies, and sets up a mechanism whereby companies can share user information with the government on a voluntary basis. It includes full legal immunity for those companies that participate from any legal action brought by consumers who would like their data to remain private.

This legal shield is a major sticking point with the White House. The statement points out that CISPA would allow companies to dodge any legal action from consumers over data protection, if it could be shown that cybersecurity was involved.

CISPA was introduced in November by introduced by representatives Mike Rogers (R-MI) and "Dutch" Ruppersberger (D-MD) and has 112 co-sponsors, indicating strong support. The White House has obliquely warned against the legislation but now appears to have taken the gloves off and is actively trying to discourage it.

The bill has a lot of cheerleaders from the technology industry, with IBM, Intel, Facebook, Microsoft, Oracle, EMC and others sending in letters of support for the legislation, although none of them would comment when El Reg called. Facebook did issue a general statement that is supported the bill because any information sharing would be voluntary, and so would allow Facebook not to participate.

The bill's sponsors have been meeting with privacy groups to try and hammer out a compromise, and the Center for Democracy and Technology (CDT) announced significant progress has been made in tightening up privacy controls.

"The House Intelligence Committee has agreed to support certain amendments that will improve CISPA in terms of privacy and civil liberties," blogged CDT senior counsel Greg Nojeim. "However, the Committee-supported amendments leave two key issues unresolved - the flow of information to the super-secret National Security Agency and the broad purposes for which that information can be used." ®

The next step in data security

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.