Header graphic for print
Steptoe Cyberblog

Category Archives: Cybersecurity and Cyberwar

Subscribe to Cybersecurity and Cyberwar RSS Feed

Episode 269: A McLaughlin Group for cybersecurity

Posted in Cybersecurity and Cyberwar, International, Security Programs & Policies

  Our interview guests are Dick Clarke and Rob Knake, who have just finished their second joint book on cybersecurity, The Fifth Domain. We talk about what they got right and wrong in their original book. There are surprising flashes of optimism from Clarke and Knake about the state of cybersecurity, and the book itself… Continue Reading

Episode 265: Cheapfakes and the end of blackmail

Posted in China, Cybersecurity and Cyberwar, International

  Paul Rosenzweig leads off with This Week in China Tech Fear – an enduring and fecund feature in Washington these days. We cover the Trump Administration’s plan to blacklist up to five Chinese surveillance companies, including Hikvision, for contributing to Uighur human rights violations in the West of China, DHS’s rather bland warning that… Continue Reading

Episode 256: National Bloviation Strategy

Posted in Cybersecurity and Cyberwar, International, Security Programs & Policies

  I know. That could be any national strategy written in the last 15 years. And that’s the point. In our interview, Dr. Amy Zegart and I discuss the national cyber strategy and what’s wrong with it, along with the culture clash between DOD and Silicon Valley (especially Google), and whether the Mueller report should… Continue Reading

Episode 253: Where angels fear to tread: NewsGuard takes on fake news

Posted in Cybersecurity and Cyberwar, International, Russia

  Our interview is with two men who overcame careers as lawyers and journalists to become serial entrepreneurs now trying to solve the “fake news” problem. Gordon Crovitz and Steve Brill co-founded NewsGuard to rate news sites on nine journalistic criteria. Using, of all things, real people instead of algorithms. By the end of the… Continue Reading

Episode 252: In the cyber adversary Olympics, it’s Russia for the gold and North Korea (!) for the silver

Posted in China, Cybersecurity and Cyberwar, International, Russia

  We interview Dmitri Alperovitch of CrowdStrike on the company’s 2019 Global Threat Report, which features a ranking of Western cyber adversaries based on how long it takes each of them to turn a modest foothold into code execution on a compromised network. The Russians put up truly frightening numbers – from foothold to execution… Continue Reading

Episode 245: “Pay no attention to the guns, the flashbang, and the handcuffs. You’re free to go at any time.”

Posted in AI, China, Cybersecurity and Cyberwar, Data Breach, International

  Nate Jones, David Kris, and I kick off 2019 with a roundup of the month of news since we took our Christmas break. First, we break down the utterly predictable but undismissable Silicon Valley claim that the administration’s new export control strategy will hurt the emerging AI industry.

Episode 243: Tech World Turned Upside Down Down Under

Posted in China, Cybersecurity and Cyberwar, International

  In the News Roundup, Nick Weaver and I offer very different assessments of Australia’s controversial encryption bill. Nick’s side of the argument is bolstered by Denise Howell, the original legal podcaster, with 445 weekly episodes of This Week in Law to her credit. Later in the program, I interview Rep. Jim Langevin (D-RI), who’s… Continue Reading

Episode 234: The California Turing Test

Posted in China, Cybersecurity and Cyberwar, International, Russia

  Bloomberg Businessweek’s claim that the Chinese buggered Supermicro motherboards leads off our News Roundup. The story is controversial not because it couldn’t happen and not because the Chinese wouldn’t do it but because the story has been denied by practically everyone close to the controversy, including DHS. Bloomberg Businessweek stands by the story. Maybe… Continue Reading

Stewart Baker Appears on This Week in Law

Posted in Cybersecurity and Cyberwar, European Union, International, Security Programs & Policies

Earlier this month, Stewart appeared as a guest on Episode 434 of This Week in Law with Denise Howell. Members of Congress want to know the potential impact of deepfakes, India’s Aadhaar ID database is hacked, EU could fine companies for not removing terrorist content in an hour, U.S. policy on Cyber warfare, vending machines… Continue Reading

Episode 232: “I’m afraid you can’t say that, Dave.” Will AI save the Internet from Vladimir Putin – and Matt Drudge?

Posted in AI, China, Cybersecurity and Cyberwar, European Union, International, Russia

  Our guest is Peter W. Singer, co-author with Emerson T. Brooking of LikeWar: The Weaponization of Social Media. Peter’s book is a fine history of the way the Internet went wrong in the Age of Social Media. He thinks we’re losing the Like Wars, and I tend to agree. It’s a deep conversation that turns contentious… Continue Reading

Thinking the unthinkable about responding to cyberattacks

Posted in China, Cybersecurity and Cyberwar, Russia

We need better, more aggressive options to deter cyberattacks, since the ones we’ve come up with so far are clearly not deterring our adversaries. I would like to inspire more ambition, aggressiveness, and creativity in the American response. As the first stage in that effort, here’s an op-ed I published recently in the Washington Post: The… Continue Reading

Bonus: Interview with Bruce Schneier (2015)

Posted in Cybersecurity and Cyberwar, Privacy Regulation, Security Programs & Policies

  We’re still on hiatus, but we’re back again this week with another bonus episode. Our next season will feature an interview with Bruce Schneier, cryptography, computer science, and privacy guru, about his latest book, Click Here to Kill Everybody: Security and Survival in a Hyper-connected World. So it only seems appropriate to revisit my… Continue Reading

Episode 228: Best idea yet for derailing the Kavanaugh nomination

Posted in CFIUS, China, Cybersecurity and Cyberwar, European Union, Privacy Regulation, Security Programs & Policies

Our guest for the interview is Noah Phillips, recently appointed FTC Commissioner and former colleague of Stewart Baker at Steptoe. Noah fields questions about the European Union, privacy, and LabMD, about whether Silicon Valley suppression of conservative speech should be a competition law issue, about how foreign governments’ abuse of merger approvals can be disciplined,… Continue Reading

Episode 227: Defending against deep fakes with lifelogs, watermarks … and tatts?

Posted in China, Cybersecurity and Cyberwar, European Union

In this episode, Bobby Chesney explains the rapid emergence of undetectably forged videos. They’re not here yet, but before we’re ready the Internet will be awash with fake revenge porn, fake human rights atrocities, and fake political scandals. Our talk revolves around a recent paper by Bobby and Danielle Citron. I confess to having seriously… Continue Reading

The Cyberlaw Podcast – News Roundup

Posted in China, Cybersecurity and Cyberwar, International, Uncategorized

Episode 221: Daugherty’s Revenge The 11th Circuit’s LabMD decision is a dish served cold for Michael Daugherty, the CEO of the defunct company. The decision overturns decades of FTC jurisdiction, acquired over the years by a kind of bureaucratic adverse possession. Thanks to the LabMD opinion, practically all the FTC’s privacy and security consent decrees are… Continue Reading

The Cyberlaw Podcast – News Roundup

Posted in Cybersecurity and Cyberwar, European Union, International, Privacy Regulation

Episode 220: GDPR and the Typhoid Marys of the Internet GDPR has finally arrived, Maury Shenk reminds us, bringing both expected and unexpected consequences. Among the expected: New Schrems lawsuits for more money from the same old defendants; and the wasting away of the cybersecurity resource that is WHOIS, as German courts ride to the rescue… Continue Reading

The Cyberlaw Podcast – Interview with Nicholas Schmidle

Posted in Cybersecurity and Cyberwar, Privacy Regulation, Security Programs & Policies

Episode 215:  The Zelig of Hacking Back Our interview is with Nick Schmidle, staff writer for the New Yorker. His report on cybersecurity work that goes to the edge of the law and beyond turns up some previously unreported material, including the tale of Shawn Carpenter, a cybersecurity researcher with a talent for showing up… Continue Reading

The Cyberlaw Podcast — News Roundup

Posted in China, Cybersecurity and Cyberwar, Privacy Regulation, Russia

214: Dumbest privacy issue of the decade? This episode features a new technology-and-privacy flap. The police finally catch a sadistic serial killer, and the press can’t stop whining about DNA privacy. I argue that DNA privacy is in the running for Dumbest Privacy Issue of the Decade. Because privacy is all about making sure the police can’t… Continue Reading

The Cyberlaw Podcast — News Roundup

Posted in Cybersecurity and Cyberwar, European Union, Privacy Regulation

Episode 213: RSA in 5 minutes In a news-only episode, we get a cook’s tour of the RSA conference from attendees Paul Rosenzweig, Jim Lewis, and Stewart Baker. Short version: Top trends we saw at RSA: more nations attacking cybersecurity firms over attribution, more companies defending themselves outside their own networks (aka hackback), and growing (if still… Continue Reading