This is Stewart Baker's Typepad Profile.
Join Typepad and start following Stewart Baker's activity
Join Now!
Already a member? Sign In
Stewart Baker
Former government official now practicing law
Recent Activity
This episode features an interview with Mårten Mickos, the CEO of HackerOne. HackerOne administers bug bounty and vulnerability disclosure programs for a host of private companies as well as DOD’s “Hack the Pentagon” program. Mårten explains how such programs work, how companies and agencies typically get started (with “vulnerability disclosure” programs), the legal and other assurances that companies need to provide to ensure participation, and the role that bounty administration firms play – from hacker reputation management to providing a kind of midnight basketball tournament for otherwise at-risk fourteen-year-old boys. (And they are boys, at least 98% of them, an issue we also explore.) Along the way, there’s even unexpected praise for the Justice Department’s Computer Crime Section, which has produced a valuable framework for vulnerability disclosure programs. As always The Cyberlaw Podcast is open to feedback. Send your questions, suggestions for interview candidates or topics to CyberlawPodcast@steptoe.com or leave a message at +1 202 862 5785. Download the 185th Episode (mp3). Subscribe to The Cyberlaw Podcast here. We are also on iTunes, Pocket Casts, and Google Play (available for Android and Google Chrome)! Continue reading
Posted 6 days ago at Skating on Stilts
Today’s news roundup features Shane Harris of the Wall Street Journal, Brian Egan, and Alan Cohn discussing stories that Shane wrote last week. Out of the box, we work through the hall of mirrors that the Kaspersky hacking story has become. The Russian hacking story is biting more companies than just Kaspersky. Turns out that Twitter deleted all the Russian trolling accounts and tweets when the Russians asked them to. Because privacy! I put in a plug for the rule that privacy always somehow ends up protecting the powerful – in this case Vladimir Putin and, of course, Twitter itself. We also cover another Wall Street Journal story detailing North Korea’s use of (another) antivirus product to hack South Korea’s military – and US war plans. Alan unpacks the Trump Administration’s most detailed statement to date on law enforcement and technology -- Deputy AG Rosenstein’s far-ranging speech on the topic. Alan and I also touch on the emerging fight over 702 – and the media’s evergreen and credulous “discovery” that the far left and far right are surprisingly close on surveillance issues. Alan spells out the case for Kirstjen Nielsen as Homeland Security Secretary, along with what some of her... Continue reading
Posted 7 days ago at Skating on Stilts
Richard Danzig, former Navy Secretary and a serious defense and technology thinker, speaks to us about the technology tsunami and what it means for the Pentagon. Among the risks: lots more accidents, some of them catastrophic, and “emergent” interactions among systems that no one predicts or prepares for. He calls for the Department of Defense to spend more time thinking about ways in which our weapons might kill us without any enemy action. Along the way, we ask the hard questions, including whether Kim Jung Un will use gene therapy to make his people smarter, dumber, or better basketball players. In our news roundup, the House Judiciary Committee has struck the first blow in the 702 renewal debate. Paul Rosenzweig and I assess its bill and end up concluding that it does less damage to national security than expected, except for the unfortunate decision to sacrifice the possibility of conducting “about” collection. Meanwhile, a turf fight inside Treasury has gotten vicious, with FinCEN lobbing (and leaking) “intelligence scandal” epithets at its sister Office of Intelligence and Analysis. Brian Egan doesn’t seem surprised by the fighting, while expressing skepticism about the likelihood of a real scandal. In the words of our... Continue reading
Posted Oct 10, 2017 at Skating on Stilts
Episode 182 features a panel of experts on attribution of cyberattacks. I moderated the panel at the Georgia Tech 15th Annual Cyber Security Summit in Atlanta on September 27, 2017. Panel members included Cristin Goodwin of Microsoft, Rob Knake of the Council on Foreign Relations, Hannah Kuchler of the Financial Times, and Kim Zetter, author of a 2014 book on the Stuxnet attack. It’s a wide-ranging and compelling discussion of how we’re doing in attributing cyber intrusions and what more is needed in the field. Special thanks to Michael Farrell, Co-Director of Georgia Tech’s Institute for Information Security & Privacy (IISP) and the organizer of the Summit, for all the work and assistance that made this episode possible. As always The Cyberlaw Podcast is open to feedback. Send your questions, suggestions for interview candidates or topics to CyberlawPodcast@steptoe.com or leave a message at +1 202 862 5785. Download the 182nd Episode (mp3). Subscribe to The Cyberlaw Podcast here. We are also on iTunes, Pocket Casts, and Google Play (available for Android and Google Chrome)! Continue reading
Posted Oct 7, 2017 at Skating on Stilts
Was the Equifax breach a nation-state attack? Nick Weaver parses the data, and I explore the surprising upside for Equifax if it was. Twitter comes to Capitol Hill to talk Russian election interference; it goes home with a flea in its ear and plenty of homework to do. Stephen Heifetz and I ask why the Foreign Agent Registration Act could not be used to discipline nation states' use of social media. Twitter isn't alone in getting sideways with the government. The Justice Department says that Google is defying court orders on disclosure of data -- while building a system to make compliance impossible. Nick gives the company a chutzpah award. Jim Comey is still taking hits from the Hill, months after his departure from public life. Sens. Wyden and Lee are hoping to call him a liar, and they'd like the DNI's help. The good news for Jim Comey is bad news for Section 702, since the attack on Comey is really a way of paving the ground for a major reduction in the kinds of intelligence collection the government can conduct using section 702. Bet you never thought you'd hear the phrase "Bush-Obama Consensus," but the Trump administration's CFIUS... Continue reading
Posted Oct 2, 2017 at Skating on Stilts
In a delightfully iconoclastic new book, Jeremy Rabkin and John Yoo take the air out of 75 years worth of inflated claims about the law of war. They do it, not for its own sake, though God knows that would be enough, but as prelude to discussing how to use the new weapons – robots, space, and cyber -- that technology makes possible. Brian Egan and I interview Jeremy Rabkin about these and other aspects of “Striking Power: How Cyber, Robots, and Space Weapons Change the Rules for War." In the news roundup, cell tower simulators, aka stingrays, take another hit as a divided DC Court of Appeals says warrants are required before they can be used. Maury Shenk sees good news for industry in the recent meetings between Commissioner Jourova and Secretary Ross; the European Commission is giving every sign of wanting to avoid yet another fight over Privacy Shield, though hotter heads in Europe may yet prevail. Brian Egan opines on Robert Strayer’s appointment as deputy assistant secretary of state for cyber and international communications and information policy – and the reorganization that his appointment cements for now. Stewart and Jeremy unpack the implications of the CCleaner attack,... Continue reading
Posted Sep 26, 2017 at Skating on Stilts
Our interview is with Jeanette Manfra, DHS’s Assistant Secretary for Cyber Security and Communications. We cover her agency’s binding directive to other civilian agencies to purge Kaspersky software from their systems, and her advice to victims of the Equifax breach (and to doctors who think that Abbott Labs’ heart implants don’t need a security patch because no one has been killed by hackers yet). I also ask how she’s doing at expanding civilian agency security from intrusion prevention to monitoring inside networks – and the future of her agency at DHS. CFIUS is back in the news as President Trump kills his first deal on national security grounds. Stephen Heifetz explains what he did and what it means for roughly 15 more deals caught in CFIUS’s toils. For those who are following the 702 Upstream issue from last week’s episode, a bipartisan group of House Judiciary members have come down on Liza Goitein’s side of the debate, saying they’ll abolish upstream collection “about” terrorists. Whether they can sell the moderates of both parties on that, especially in the Senate, remains to be seen. Jennifer Quinn-Barabanov explains how bad things have gotten for Equifax: a delayed patching process that will be... Continue reading
Posted Sep 18, 2017 at Skating on Stilts
Today, the Cyberlaw Podcast kicks off a series exploring section 702 – the half-US/half-foreign collection program that has proven effective against terrorists while also proving controversial with civil liberties groups. With the program due to expire on December 31, we’ll examine the surveillance controversies spawned by the program. Today, we look at the “upstream” collection program under section 702. We talk to Becky Richards, NSA’s Civil Liberties and Privacy and (whew!) Transparency Officer as well as Liza Goitein of the Brennan Center for Justice. In the news, Equifax is taking a beating both for a massive and serious data breach and for a series of missteps in its mitigation effort. Michael Vatis lays out the gory details. Speaking of ugly, the climate for the online ad business is getting a lot worse, or so I predict, as Russia's use of social media ads and trolls gets attention in Washington. Had enough? Nope. Now the European Court of Human Rights is piling on, limiting employers' right to monitor employees. Maury Shenk explains the law; and I marvel at the court’s ability to take an obligation imposed on governments and turn it into a code of conduct for private employers. But wait,... Continue reading
Posted Sep 12, 2017 at Skating on Stilts
In Episode 177, fresh from hiatus, we try to summarize the most interesting cyber stories to break in August. Paul Rosenzweig kicks things off with the Shunning of Kaspersky. I argue that the most significant – though unsupported – claim about Kaspersky is Sen. Shaheen’s assertion that all of the company’s servers are in Russia. If true, that’s certainly an objective reason not to let Kaspersky install sensors in non-Russian computers. The question that remains is how much due process companies like Kaspersky should get. That’s a question unlikely to go away, as DOD is now comprehensively shunning DJI drones, issuing guidance that sounds a lot like Edward Snowden demanding that users uninstall all DJI apps and remove all batteries and storage media. Speaking of companies the US government can’t trust, Paul and I note that Apple has lost control of its secure enclave software. At the same time, Apple has pulled VPN apps from the Apple store at the direction of the Chinese government. Tim Cook explains that this makes perfect sense because Chinese law is on the Chinese government’s side but US law was not on the US government’s side. Right. Sounds like Tim is as good at... Continue reading
Posted Sep 5, 2017 at Skating on Stilts
Everybody’s a critic, and everybody’s a censor, at least if you judge by today’s episode: Maury Shenk tells us the European Court of Justice will soon rule on its authority to censor what Americans read. Markham Erickson discusses the Ninth Circuit decision upholding national security letter gag orders. And Maury says that China is getting impressively good at deleting images it doesn’t like from citizens’ phones in real time. In other news, Congressional sanctions on Russia look like a done deal; Anthony Rapa explains (contra the NYT) that the sanctions weren’t watered down in the House – and the fuss they’re likely to cause among our European trading partners. Speaking of sanctions, how long before Putin decides to sanction the extended Trump family by going after their property, either with legal decrees or illegal hacks? The Trump hotels are already prime targets for credit card hacks; adding doxing and bricking to the mix wouldn’t be hard. In fact, that’s a lesson Hollywood seems to have absorbed. To keep from getting hacked a la Sony, it looks as though other studios are airbrushing Vladimir Putin from their upcoming films. Meanwhile, Reuters and others report that Silicon Valley’s Big Tech seems to... Continue reading
Posted Jul 24, 2017 at Skating on Stilts
This episode is dominated by IT procurement news. And it’s as irresistible as a twelve-car pileup on the Beltway. We open the news with an exploration of the federal de-listing of Kaspersky Labs, and how seriously government contracts lawyers take such an action (h/t to Michael Mutek for that). Then, in the interview, Eric Hysen, formerly of the DHS Digital Service, lays out his view of how DHS’s effort to bring agility and speed to big IT contracts came a cropper, with plenty of color commentary from procurement law guru, Michael Mutek. If you care about reforming federal IT purchasing (and you should), this interview is a cautionary tale. In other news, as Steptoe summer associate Quentin Johnson lays out, the Knight First Amendment Institute has brought a lawsuit to declare @realDonaldTrump a public forum from which trolls and griefers may never be excluded. Gus Hurwitz overcomes his inclination to snark and instead treats the claim seriously, which only makes it sound more ridiculous. Still, I’m looking forward to seeing White House press briefings moved to the Rose Bowl. Alan Cohn and I note that Booz Allen has come up with the best explanation yet for NotPetya’s weirdly self-defeating ransomware... Continue reading
Posted Jul 20, 2017 at Skating on Stilts
In this episode, we interview Jim Miller, co-chair of a Defense Science Board panel that reported on how the US is postured for cyberconflict and the importance of deterrence. The short answer: deterring cyberconflict is important because our strategic cyberconflict posture sucks. The DSB report is thoughtful, detailed, and troubling. Jim Miller manages to convey its message with grace, good humor, and clarity. In the news, Brian Egan and I find ourselves unable to turn away from the Trump-Putin meeting in Warsaw. Bottom line: by raising concerns with election hacking, Trump did and said more or less what any President would have said and done – except he failed to stick the landing with a self-serving debrief. Even the joint computer security unit comes in for some surprising, if faint, praise. File this under dog bites man: Europeans are beating up on Google. The UK data protection commissioner says it was unlawful for the National Health Service to share medical data with Google’s DeepMind subsidiary, even if the goal was to provide new medical insights. And the EU’s massive fine for Google’s abuse of its dominant position leads to musings on the regulatory foundations of some competition law doctrines –... Continue reading
Posted Jul 10, 2017 at Skating on Stilts
Today we deliver the second half of our bifurcated holiday podcast with an interview of Richard Ledgett, recently retired from his tour as NSA’s deputy director. We cover much recent history, from Putin’s election adventurism to questions about whether NSA can keep control of the cyberweapons it develops. Along the way, Rick talks about the difference between CIA and NSA approaches to hacking, the rise of NSA as an intelligence analysis force, the growing effort to keep Kaspersky products out of sensitive systems, and the divergence among intel agencies about whether Putin’s attack on the American election was intended mainly to hurt Hillary Clinton or to help Donald Trump. As always the Cyberlaw Podcast is open to feedback. Send your questions, suggestions for interview candidates or topics to CyberlawPodcast@steptoe.com or leave a message at +1 202 862 5785. Download the 173rd episode (mp3). Subscribe to the Cyberlaw Podcast here. We are also on iTunes, Pocket Casts, and Google Play (available for Android and Google Chrome)! Continue reading
Posted Jul 10, 2017 at Skating on Stilts
In this news-only episode, we cover the irresistible story of the week: Trump, Russia, and the Media. It’s especially irresistible for us because we’ve had two of the protagonists on as guests. I make the bold prediction that Shane Harris’s stories on Russia collusion and the Trump campaign will be seen as the moment when the media OCD fascination with Russia collusion finally jumped the shark. Though in this case, the shark had already consumed at least one Pulitzer-prize winning journalist, Eric Lichtblau. (And for the record, CNN, I am not advocating that more journalists should be eaten by sharks, and I refuse to accept the blame when they are.) Unfortunately, journalists chasing nonstories can’t devote any attention to some very real stories involving government and IT. So we do it for them. Stephen Heifetz reports on the CFIUS logjam that is blocking close to a dozen transactions because the administration has not filled the subcabinet positions that could sort through the filings with a coherent policy in mind. In other cyberwar logjam news, the UN Government Group of Experts (GGE) has failed to produce a consensus report following up on earlier reports endorsing some application of the law of... Continue reading
Posted Jul 3, 2017 at Skating on Stilts
Our guest, Ellen Nakashima, was coauthor of a Washington Post article that truly is a first draft of history, though not a chapter the Obama administration is likely to be proud of. She and Greg Miller and Adam Entous chronicle the story of Russia’s information operations attack on the 2016 presidential election. Want to know how it feels to have Donald Trump tweeting your article and taunting the last administration? Don’t worry, we ask. We also ask why the NSA was only moderately confident Putin was trying to help Trump win, and how the Obama administration managed to “choke” at every turn. Jim Comey makes a cameo appearance, ironically refusing to go public with his agency’s assessment of the hack because it might look like he was trying to influence the election -- well, whew! – that’s a bullet dodged! We dwell on the Obama administration’s bad luck in announcing its judgment on Putin’s hack half an hour before the Access Hollywood story broke and an hour before Podesta’s emails were released. Sometimes you win the news cycle; sometimes the news cycle wins you. Finally, Ellen talks about the plan to implant cyberweapons in Russian infrastructure and where it stands.... Continue reading
Posted Jun 26, 2017 at Skating on Stilts
This week’s episode is a news roundup without an interview. We lead with the Senate’s overwhelming adoption of unexpectedly tough Russia sanctions along with the Iran sanctions bill. The mainstream press has emphasized that the bill will lock the Obama sanctions into legislation, but Anthony Rapa explains that the bigger story is just how tough the bill will be on investors in Russia’s energy sector, including European and other third-country firms. This is going to put heavy pressure on the House and its Republican majority, where enthusiasm for punishing Russia has been more tepid. In other legislative news, the Freedom Caucus has announced that it doesn’t know what it wants from 702 renewal, but it wants something. At least that’s how I read the Caucus’s two sentence press release on section 702 renewal. In its entirety, the release says, “Government surveillance activities under the FISA Amendments Act have violated Americans’ constitutionally protected rights. We oppose any reauthorization of the FISA Amendments Act that does not include substantial reforms to the government’s collection and use of Americans’ data.” In a rare show of Cyberlaw podcast consensus, Michael Vatis agrees. Meanwhile, NSA and GCHQ are now linking WannaCry to North Korea. The... Continue reading
Posted Jun 19, 2017 at Skating on Stilts
In the news roundup, Benjamin Wittes makes a cameo appearance, defending Jim Comey (but not the FBI) from my suggestion that leaking has a long and unattractive history at the Bureau. Brian Egan takes us deep on federal records law. Next, Ben actually finds himself to my right as we try to negotiate a quick resolution to the growing impasse over section 702. I will never live it down. Nor will Ben. Maury Shenk explains what the UK election means for tech. Who knew? The Unionists actually have a tech platform. Maury and Brian muse on what the Qatar crisis tells us about cyberattacks – they may turn out to be much more effective as short-term one-offs than as sustained campaigns. China has found a way to use its new cybersecurity law — to investigate Apple, naturally. A better target would be the Chinese company Rafotech, which has installed something that looks a lot like spyware on 250 million machines worldwide. I’ll be at the Irish government’s Data Protection Summit later this week, and I’ll be asking why the EU is wasting its data export capital on fights with the US instead of China. Finally, we cover Ukraine’s unusual new... Continue reading
Posted Jun 12, 2017 at Skating on Stilts
Episode 168 features the Tinkers-to-Evers-to-Chance of global censorship, as Filipino contractors earning minimum wage delete posts in order to satisfy US tech companies who are in turn trying to satisfy European governments. Really, what could go wrong? In addition to Maury Shenk, our panel of interlocutors includes David Sanger, Chief Washington Correspondent for the New York Times, and Karen Eltis, Professor of Law at the University of Ottawa. Even if you think that reducing Islamic extremist proselytizing on line is a good idea, I argue, that’s not likely to be where the debate over online content ends up. Indeed, even today, controls on hate speech are aimed more at tweets that sound like President Trump than at extremist recruiting. Bottom line: no matter how you slice it, the first amendment is in deep trouble. In other news, I criticize the right half of the blogosphere for not reading the FISA court decision they claim shows that President Obama was spying illegally at the end of his term. Glenn Reynolds, I’m talking about you! The EU, in a bow to diplomatic reality, will not bother trying to improve the Safe Harbor deal it got from President Obama. Instead, it will try... Continue reading
Posted Jun 5, 2017 at Skating on Stilts
Episode 167 sees blockchain take over the podcast again. With Stewart traveling, Alan Cohn hosts another of the podcast’s periodic deep dives into all things blockchain and digital currency. Our guest is Meltem Demirors, Director of Development at Digital Currency Group. Podcast regular Maury Shenk joins members of Steptoe’s Blockchain and Digital Currency Practice, including financial regulation practitioner Matt Kulkin, tax guru Cameron Arterton, and author of several recent smart contracts blog posts Jared Butcher, in breaking down the current state of affairs in the blockchain world. Our episode begins by looking at the brewing controversy in the tax world. Cameron skillfully takes us through IRS Notice 2014-21, which provided initial guidance for how virtual currencies would be treated for tax purposes, as well as the charmingly-named TIGTA Virtual Currency Report, released in September 2016, which told the IRS that it hadn’t done much beyond issuing this guidance to flesh out what it actually meant to consumers and businesses. The IRS responded with the notorious Coinbase Summons, a John Doe summons that requested records of over 500,000 Coinbase subcribers. Needless to say, this led to Coinbase users challenging the summons in court and moving to quash, while Congressional leaders question... Continue reading
Posted Jun 2, 2017 at Skating on Stilts
In episode 166, we interview Kevin Mandia, the CEO and Board Director of FireEye, an intelligence-led security company. FireEye recently outed a new cyberespionage actor associated with the Vietnamese government. Kevin tells us how FireEye does attribution and just how good the Vietnamese are (short answer: surprisingly good but apparently small in scale). Along the way, we also cover questions such as whether China has its own set of forensic cybersecurity firms, how confident we should be about the attribution of WannaCry to North Korea, and whether PLA Unit 61398 should treat its designation as APT1 as a prestige designation, sort of like having “bob@microsoft” as your email address. Episode 166 is the interview that goes with episode 165’s news roundup, released separately to ensure the timeliness of the news. As always, the Cyberlaw Podcast welcomes feedback. Send an email to CyberlawPodcast@steptoe.com or leave a message at +1 202 862 5785. Download the 166th episode (mp3). Subscribe to the Cyberlaw Podcast here. We are also on iTunes, Pocket Casts, and Google Play (available for Android and Google Chrome)! Continue reading
Posted May 26, 2017 at Skating on Stilts
Episode 165 is a WannaCry Festivus celebration, as The Airing of Grievances overtakes The Patching of Old Machines. Michael Vatis joins me in identifying all the entities who’ve been blamed for WannaCry, starting with Microsoft for not patching Windows XP until after the damage was done. (We exonerate Microsoft on that count.) Another candidate for WannaCry Goat of the Year is (of course) NSA for allegedly letting a powerful hacking tool fall into the hands of the Shadow Brokers, who released it in time for WannaCry’s authors to drop it into their worm. Private industry’s fingerpointing at NSA has led to introduction of the PATCH Act, which tries to institutionalize (and tilt) the vulnerability equities process. I raise a caution flag about trying to prevent harmful vulnerability leaks by spreading information about the vulnerabilities to a new batch of civilian agencies. I also ask whether a rational equities process should require that companies get the benefit of the process only if they agree to patch their products promptly and if they cooperate to the extent possible with law enforcement rather than forcing agencies to hack their products just to carry out lawful searches. Somehow I’m guessing that will cool Silicon... Continue reading
Posted May 22, 2017 at Skating on Stilts
Episode 164 features Stewart Baker’s startling change of heart on the question of cyberspace norms. Credit goes to our interview guest, Tim Maurer, Fellow and co-director of the Cyber Policy Initiative at the Carnegie Endowment for International Peace. And perhaps as well to Brian Egan, former Legal Adviser to the State Department and now a partner at Steptoe. Tim and Brian talk about Tim’s view and that of his colleagues, George Perkovich and Ariel Levite, at Carnegie that the world is ripe for an enforceable norm against hacking to corrupt financial data in the banking system. Remarkably, I agree with them, though not before casting aspersions on the United Nations and the State Department. In the news roundup, we’re joined by Paul Rosenzweig of Red Branch Consulting and the DHS Policy office. He critiques the cyber EO, which has finally been released – just in time for wCry ransomware. I note with satisfaction that the Russian government itself was burned by the worm, which it almost certainly released under the Shadow Brokers nom de guerre. Naturally, others prefer to blame the National Security Agency. Brad Smith of Microsoft is happy to blame NSA, and to claim that the crisis shows... Continue reading
Posted May 16, 2017 at Skating on Stilts
With our sound system back on line, episode 163 is already a big step up from Lost Episode 162. (Transcripts of 162 are available for those who wish by sending email to CyberlawPodcast@steptoe.com.) Our interview is with Susan Munro, of Steptoe’s Beijing office. Susan unwinds the complex spool of cyberlaw measures promulgated by the Chinese government. In the news, Maury Shenk and I note that Putin reran his US playbook in the French election, but the French were ready for him. Indeed, what we originally thought to be crude Russian forgeries may actually be Macron “honey docs” meant to look like crude Russian forgeries. If so, my hat is off to Macron’s IT team. Meanwhile, Jennifer Quinn-Barabanov spots a new trend in cybersecurity litigation. It’s nuts, but that’s not the new part. The intelligence community’s latest transparency report reveals a shocking stat about “backdoor” FBI searches of 702 for criminal cases. The bureau did that all of … one time. Those who want to clog our security services with ever more burdensome processes are going to have to find a bigger scandal. The Republicans complaining about Susan Rice and “unmasking” can find more to work with in the report. Turns... Continue reading
Posted May 8, 2017 at Skating on Stilts
In this episode, Alan Cohn and Maury Shenk look at questions in Europe and elsewhere in Stewart’s absence. Maury delves into why Google was ordered to turn over foreign data accessible from US, a decision that seems at odds with the Microsoft Ireland case. Alan considers claims made by David Sanger and William Broad in The New York Times that US blew up North Korea’s most recent missile test, and Jeffrey Lewis’s rebuttal in Foreign Policy. Alan and Maury both remain skeptical. Leaving the Korean peninsula, Maury discusses the current effort by EU data protection regulators to enact e-privacy regulations that would, among other things, put in place detailed standards for location tracking and content associated with metadata. No surprises, but potentially more headaches for US industry. And back on US soil, Alan comments on the US Justice Department’s apparent decisions to reconsider criminal charges against Wikileaks for the CIA cyber-tools leak. Maury provides some color on the Trump Administration’s (lack of) views on Privacy Shield. Finally, Alan reviews the bidding on dual-use export controls and cyber technologies, explaining both the most recent negotiations under the Wassenaar Arrangement and the EU’s efforts to amend its dual-use export controls to include... Continue reading
Posted Apr 26, 2017 at Skating on Stilts
This week the podcast features an extended news roundup with two guest commentators – Julian Sanchez of the Cato Institute and Gus Hurwitz of Nebraska Law School. We talk about the latest, mostly overhyped, Shadowbrokers dump, and whether Google Translate can be taught to render plain text into Shadowbrokerese as well as Klingon. Stephanie Roy kicks off speculation about the future of net neutrality in the Pai FCC. The future looks bright for litigators. Abbott Labs takes a short but brutal session in the woodshed from the FDA. Looks like Abbott’s now-subsidiary, St. Jude Medical, knew for years that its backdoor could be found by outsiders, but it stuck to the view that hardcoded access was a feature not a bug. Too bad Uber has already trademarked the name, because if ever there were a feature that deserved to be called “God mode,” this is it. Burger King triggers a technical battle with Google and an editing war with Wikipedia with a commercial that begins, “Okay, Google, what’s a Whopper burger?” But, law nerds that we are, all we can talk about is whether Burger King is liable under the Computer Fraud and Abuse Act. As always, the Cyberlaw Podcast... Continue reading
Posted Apr 17, 2017 at Skating on Stilts