w1ld wrote:

] ] An internal draft of the administration's upcoming plan
] ] to improve cybersecurity also no longer includes a number
] ] of voluntary proposals for America's corporations to
] ] improve security, focusing instead on suggestions for
] ] U.S. government agencies, such as a broad new study
] ] assessing risks.
] ]
] ] "Governments can lead by example in cyberspace security,"
] ] the draft said."
]
] Would love to hear what you have to say about that last quote.
] :)

Last month an "internal draft" was going to have FBI monitored IDS systems installed in every network. This month an "internal draft" has the government "leading by example." Basically, I'm ignoring this until the government actually releases a proposal. Just because some idiot somewhere wrote a draft doesn't mean it will become Administration policy.

Having said that, no, I don't think the government can "lead by example." There are plenty of "examples" of the right things to do out there. The problem is not lack of good examples. The problem is that people just don't understand that this is important, and if so, how. People would rather be vulnerable then take on the expense associated with security. This creates national security problems, and network abuse problems. If you want to address those problems you have to teach people to care. You have to teach them that running a secure website is like always washing your hands. Its not just about security from things you can see. Its about not being a carrier for things you can't see.

So if this is the proposal, I'll say the government ruined a really good opportunity.

Unsubstantiated Conspiracy Theory: John Markoff's unsubstantiated conspiracy theory created all kinds of noise at the White House from people who were opposed to something they haven't read. The White House responded by telling the people working on this that they are going to kill the project. Those people responded by "leaking a draft" that eliminates all the good things that the proposal would do. They are hoping people will be equally pissed off, thus justifying their existence to the President.

RE: A Pared-Back Security Initiative