<story><title>Companies may be punished for paying ransoms to sanctioned hackers</title><url>https://www.reuters.com/article/us-treasury-cyber/companies-may-be-punished-for-paying-ransoms-to-sanctioned-hackers-u-s-treasury-idUSKBN26M77U</url></story><parent_chain><item><author>throwawaygh</author><text>&lt;i&gt;&amp;gt; It will be a long, long time before the marketplace evolves sufficient technological measures to guard against state-sanctioned&amp;#x2F;possibly-state-sponsored malicious actors operating with impunity in a lawless environment. &lt;/i&gt;&lt;p&gt;Unfortunately, the marketplace -- at least certain segments of it -- are &lt;i&gt;far&lt;/i&gt; beyond .mil&amp;#x2F;.gov in terms of capacity and sophistication. E.g., AWS&amp;#x27;s formal tools for code-level security is what DARPA&amp;#x27;s been yelling about doing for decades, but gov&amp;#x27;t contractors and the branches&amp;#x2F;agencies are unable&amp;#x2F;unwilling to catch.&lt;p&gt;I&amp;#x27;m not sure how to fix gov or mil, but a good starting point within mil is to stop making career officers with theology and polisci degrees but zero CS training the first-line managers of cyber commands.</text></item><item><author>rectang</author><text>This is a national security issue — malicious actors based in other nation-states are raiding American companies.  It seems that US defense forces are not up to the task of repelling these invaders — yet we&amp;#x27;re expecting individual companies to go up against them??&lt;p&gt;It will be a long, long time before the marketplace evolves sufficient technological measures to guard against state-sanctioned&amp;#x2F;possibly-state-sponsored malicious actors operating with impunity in a lawless environment.</text></item></parent_chain><comment><author>StrictDabbler</author><text>The first time I ran into somebody who was in charge of a technical department but had only degree in Applied Theology my jaw hit the floor.&lt;p&gt;&lt;i&gt;Applied&lt;/i&gt; theology.&lt;p&gt;By the third time I had to seek out existential comfort.</text></comment>
<story><title>Companies may be punished for paying ransoms to sanctioned hackers</title><url>https://www.reuters.com/article/us-treasury-cyber/companies-may-be-punished-for-paying-ransoms-to-sanctioned-hackers-u-s-treasury-idUSKBN26M77U</url></story><parent_chain><item><author>throwawaygh</author><text>&lt;i&gt;&amp;gt; It will be a long, long time before the marketplace evolves sufficient technological measures to guard against state-sanctioned&amp;#x2F;possibly-state-sponsored malicious actors operating with impunity in a lawless environment. &lt;/i&gt;&lt;p&gt;Unfortunately, the marketplace -- at least certain segments of it -- are &lt;i&gt;far&lt;/i&gt; beyond .mil&amp;#x2F;.gov in terms of capacity and sophistication. E.g., AWS&amp;#x27;s formal tools for code-level security is what DARPA&amp;#x27;s been yelling about doing for decades, but gov&amp;#x27;t contractors and the branches&amp;#x2F;agencies are unable&amp;#x2F;unwilling to catch.&lt;p&gt;I&amp;#x27;m not sure how to fix gov or mil, but a good starting point within mil is to stop making career officers with theology and polisci degrees but zero CS training the first-line managers of cyber commands.</text></item><item><author>rectang</author><text>This is a national security issue — malicious actors based in other nation-states are raiding American companies.  It seems that US defense forces are not up to the task of repelling these invaders — yet we&amp;#x27;re expecting individual companies to go up against them??&lt;p&gt;It will be a long, long time before the marketplace evolves sufficient technological measures to guard against state-sanctioned&amp;#x2F;possibly-state-sponsored malicious actors operating with impunity in a lawless environment.</text></item></parent_chain><comment><author>bilbo0s</author><text>&lt;i&gt;career officers with theology and polisci degrees but zero CS training the first-line managers of cyber commands.&lt;/i&gt;&lt;p&gt;Is this true?&lt;p&gt;This can&amp;#x27;t be true. Surely they must have some CS experience?&lt;p&gt;I took my last bus off a USMC base so long ago I&amp;#x27;ve raised a kid who&amp;#x27;s in med school since. Can someone with more recent experience chime in on whether or not this is hyperbole?</text></comment>