By timothy from Slashdot's so-goes-the-nation department
An anonymous reader writes In a Sacramento Bee op-ed, (in)famous computer security researcher Ed Felten responds to the State of the Union cybersecurity proposal. He doesn't mince words: "The odds of clearing Congress: low. The odds of materially improving security: even lower. "What he suggests as an alternative, though, is a surprise. "California," he writes, "could blaze a trail for effective cybersecurity policy." He calls for the state government to protect critical infrastructure and sensitive data, relying on outside auditors and experts. It's an interesting idea. Even if it doesn't go anywhere, at least it's some fresh thinking in this area of backward policy.
From Felten's essay: Critical infrastructure increasingly relies on industrial automation systems. And those systems are often vulnerable – they keep a default password, for instance, or are accessible from the public Internet. These are not subtle or sophisticated errors. Fixing them requires basic due diligence, not rocket science. Requiring the state’s critical infrastructure providers to undergo regular security audits would be straightforward and inexpensive – especially relative to the enormous risks. Areas of sensitive data are also low-hanging cyber fruit. In health care, education and finance, California already imposes security and privacy requirements that go beyond federal law. Those legal mandates, though, are mostly enforced through after-the-fact penalties. Much like critical infrastructure, sectors that rely upon sensitive data would benefit from periodic outside auditing.
Of any state government's, California's policies also have the chance to help (or harm) the most people: nearly 39 million people
, according to a 2014 U.S. Census estimate.Read Replies (0)
By timothy from Slashdot's actually-the-robots-are-pulling-the-strings department
writes with this excerpt from Space.com: On Monday (Jan. 19), the Chinese Academy of Sciences (CAS) and the European Space Agency (ESA) issued a call for proposals for a robotic space mission that the two organizations will develop jointly. "The goal of the present Call is to define a scientific space mission to be implemented by ESA and CAS as a cooperative endeavor between the European and Chinese scientific communities," ESA officials wrote in a statement Monday. "The mission selected as an outcome of the present Joint Call will follow a collaborative approach through all the phases: study, definition, implementation, operations and scientific exploitation." The call envisions a low-budget mission, saying that ESA and CAS are each prepared to contribute about 53 million euros (U.S. $61.5 million at current exchange rates). The spacecraft must weigh less than 661 lbs. (300 kilograms) at launch and be designed to operate for at least two to three years, ESA officials wrote in the call for proposals. All proposals are due by March 16, and the peer-review process will start in April. Mission selection is expected to occur in late 2015, followed by six years of development, with a launch in 2021.Read Replies (0)