Cybersecurity as Realpolitik
summary
Proposes mandatory CDC-style reporting for high‑severity breaches plus a voluntary MITRE-like anonymized near‑miss sharing system, a two‑clause software liability regime where Clause 1: deliver buildable source and disabling rights -> refund-only liability; Clause 2: otherwise normal product liability with a five‑year sunrise, and a market plan to pay 10x bounty to buy and publicize zero‑days. Requires embedded devices to have remote management or a finite lifetime, and gives ISPs a binary choice between inspection/liability or strict common‑carrier protections.
AI-written summary · about
chapters (10)
- 0:00Start
- 11:41Why Should Cyber Security Be Any Different
- 16:48Mandatory Reporting
- 18:44Computer Fraud and Abuse Act
- 22:19Category 2 Net Neutrality
- 32:15Strike Back
- 33:28Five Resiliency
- 33:52Algorithmic Agility
- 40:16The Right To Be Forgotten
- 46:41What To Do about Abandoned Code Bases
related talks
51mCybersecurity’s Next Legal and Policy Frontier: Software Liability
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
44mThey're coming to regulate you!
39mAll your code belongs to Policy Makers, Politicians and the Law
27m4 Panel Session - Bridging Policy and Practice
34mCan Open Source be Secure by Design?
15mCybersecurity as a National Imperative
01h 12mSecuring cyber critical infrastructure.