Cybersecurity

Our world runs on computers and the Internet. We use them for everything, from communicating with long-lost classmates to managing our bank accounts to buying anything from cars to diapers. The effort to keep these systems secure is known as cybersecurity. Unfortunately, all too often, simple, effective cybersecurity steps are not taken, like changing passwords routinely or updating and patching holes in software. Even when they are, sophisticated hackers can sometimes get around these defenses. The government is using this threat to try to expand its power and permit companies to funnel our sensitive, personal online information to it. Learn more >>

Smashing Success: Thousands of ACLU Supporters Petition President to Veto CISPA, Get Full Page Ad in Politico

By Robyn Greene, ACLU Washington Legislative Office & Kaitlyn Newman, Campaigner, ACLU Action at 5:14pm

You did it! In the two months since Reps. Rogers (R-Mich.) and Ruppersberger (D-Md.) reintroduced their privacy-busting bill CISPA, 49,513 (and counting) ACLU supporters signed one of our biggest petitions of all time, urging President Obama to protect Americans' privacy and civil liberties and veto CISPA!

To make sure members of Congress hear your passionate plea as well, we've printed a full-page ACLU Action ad opposing CISPA in today's Politico – the go-to newspaper for the who's who of Capitol Hill! Hopefully, the president and your legislators caught a glimpse of the compelling graphic while they drank their morning coffee.

CISPA's Problem Isn't Bad PR, It’s Bad Privacy

By Robyn Greene, ACLU Washington Legislative Office at 11:28am

Representative Mike Rogers (R-MI) made the argument last week that the privacy community’s significant concerns with CISPA, the privacy-busting cybersecurity bill, don’t stem from actual problems with the bill language, but rather from a misunderstanding of the bill itself. Speaking on behalf of himself and his co-sponsor, Representative Dutch Ruppersberger (D-MD), he told The Hill, “We feel that the bill clearly deals with privacy, that the checks and balances are there, but [we] know there's still a perception and we're still trying to deal with that.”   

Hotel Lock Security Vulnerability is Reminder of Government’s Ambiguous Role in Protecting Security

By Chris Soghoian, Principal Technologist and Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:36am

This summer, at the Black Hat security conference, a security researcher presented details of a troubling security flaw: An electronic lock system, used in more than 4 million hotel rooms around the world, is vulnerable. The researcher, Cody Brocious, revealed that with less than $50 in electronic parts, a device can be built that will open one of the vulnerable locks in seconds. Just a few months after Brocious revealed the flaw, hotels in Texas reported a string of thefts by burglars from rooms, all protected by vulnerable locks.

Kicking off "Stop Cyber Spying Week"

By Mandy Simon at 12:00pm

Today we're launching a weeklong campaign called "Stop Cyber Spying Week" to draw attention to the massive civil liberties problems in H.R. 3523, better known as CISPA.

CISPA Claws Back to Life

By Michelle Richardson, Legislative Counsel, ACLU Washington Legislative Office at 1:54pm

It's baa-aaack.

The House cybersecurity bill that allows the National Security Agency (NSA) and the military to collect your private internet records is scheduled for an encore appearance on Wednesday. House Intelligence Committee Chairman Mike Rogers (R-MI) and Ranking Member Dutch Ruppersberger (D-MD) will reintroduce the Cyber Intelligence Sharing and Protection Act (CISPA), which news reports say will be the same bill that passed the House of Representatives last year.

The Political Effects of Conflating Separate Meanings of "Cybersecurity"

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 12:25pm

Washington is in the midst of debating something called “cybersecurity.” But that term actually includes several very separate and distinct problems that call for very different solutions. Not only does conflating them confuse the issue — it also has very distinct political consequences. So let’s unpack the separate meanings of the term.

1. Criminal and malicious online behavior
As every computer owner knows, internet security is a very real problem for individual households and businesses. The open architecture of computers and the internet has led to an explosion of innovation, collaboration, and creativity — but the very openness that has fuelled so much innovation has also made us vulnerable to viruses, spyware, and other forms of malware. These problems are endemic among home computers and among a surprising number of professionally managed institutional machines as well. Much of this is due to the failure to perform basic computer security.

With CISPA, "It's all just a little bit of history repeating..."

By Robyn Greene, ACLU Washington Legislative Office at 4:48pm

The Propellerheads may have been talking about fashion trends when they sang that "to me it seems quite clear that it's all just a little bit of history repeating." But that sentiment rings loud and true today when talking about the privacy-busting cybersecurity bill CISPA.

Leaders of the House Intel Committee reintroduced CISPA with the same privacy flaws as last year. While they suggested at its unveiling that they worked with the privacy community and addressed our concerns, they didn't. This is the same bill, with the same problems.

Intel Officials Admit "Cyber Pearl Harbor" Unlikely Soon, Agree Cyber Should be Kept in Civilian Hands

By Robyn Greene, ACLU Washington Legislative Office at 4:27pm

Privacy protection, and the debate about whether to house information-sharing programs in a civilian or military agency, dominated three congressional hearings on cybersecurity this week.

In separate hearings Tuesday in the Senate Select Committee on Intelligence and the Armed Services Committee, leaders of the intelligence community called cyberattacks the greatest threat to the U.S. at this time—but admitted that the kinds of catastrophic attacks imagined by reporters and cyber experts were only a "remote" possibility in the near future.

ACLU to Congress: Keep Cybersecurity Information Sharing Out of Military Hands!

By Robyn Greene, ACLU Washington Legislative Office at 4:49pm

As Congress debates cybersecurity legislation, one of the most significant questions legislators are tackling addresses where to house...

ACLU to Congress: Keep Cybersecurity Information Sharing Out of Military Hands!

By Robyn Greene, ACLU Washington Legislative Office at 4:58pm

UPDATE: Due to a winter storm approaching Washington, D.C., tomorrow's House Homeland Security Committee hearing on cybersecurity has been postponed for a later date.

As Congress debates cybersecurity legislation, one of the most significant questions legislators are tackling addresses where to house an information sharing program that would allow the private sector to hand over Americans' most private online information to the government: in a civilian or a military agency?

Statistics image