EXPERT PERSPECTIVE — On 16 June, US President Joe Biden and Russian President Vladimir Putin met for just under four hours in Geneva. This was Mr. Biden’s first meeting with Mr. Putin during his presidency and Biden is the fifth US President with whom Putin has held a summit.

Expectations for the summit were characterized as low by both sides in advance and assessed a bit more positively after the conclusion of the meeting. The meeting presented an opportunity for both leaders to present grievances and warnings to the other (and show toughness to their domestic constituencies).  Other than presenting the opportunity to blow off steam, the results of the meeting appear modest:  the agreement to return ambassadors to their posts, to resume bilateral arms control discussions, to conduct discussions on “strategic stability” and to hold unspecified consultations on cyber. In typical fashion, Mr. Putin rejected all of Mr. Biden’s assertions about Russian actions and made counter accusations referencing hostile US actions.

Of the deliverables from the summit, cyber will no doubt turn out to be the most problematic area for follow up. Mr. Biden apparently delivered to Mr. Putin a list of 16 US critical infrastructure sectors that should be considered “off limits” for cyberattacks, e.g., “red lines” not to be crossed without the risk of significant retaliation. For his part, Mr. Putin asserted that it is Russia that is the victim of cyberattacks originating from the territory of the US and it’s NATO partners and also is the victim of  attempts to interfere with Russian elections.  The challenge in cyber discussions going forward will center around three areas:  differing interpretations of the relevance of deterrence theory in today’s cyber environment, attribution, and control.

Mr. Biden’s firm comments to Mr. Putin on recent cyberattacks against the US such as the ransomware attack on Colonial Pipelines (Mr. Biden is said to have asked Mr. Putin how he would react if Russia’s pipelines were hit?) and his provision of a list of “off limits” US infrastructure entities suggests a deep belief in this administration that Russia can be deterred from engaging in future conduct of cyber operations against US targets or “sanctioning” attacks originating from the territory of the Russian Federation by criminal groups.

Unfortunately, it is highly likely that either Mr. Putin nor those who control the levers of Russian cyber operations agree that deterrence theory applies.  Deterrence only works when both sides know the other is capable of – and willing to – cause significant harm to the other.

The Russian side likely believes (and may have amply demonstrated) that the US is disproportionately vulnerable to cyber risk at every level of its economic, societal, and political infrastructure whereas Russia is not.  There is a reason the use of cyber tools has become a central feature of Russian strategic doctrine. They work and seem a legitimate tool that falls short of conventional war. Hybrid warfare using cyber tools, the Russian side would argue, is no different than the economic warfare Russia is experiencing from sanctions imposed by the US its allies.

For full access to the article, sign up to become a Cipher Brief member for just $10/mo.


“The Cipher Brief has become the most popular outlet for former intelligence officers; no media outlet is even a close second to The Cipher Brief in terms of the number of articles published by formers.” – Sept. 2018, Studies in Intelligence, Vol. 62 No.

Access all of The Cipher Brief’s national-security focused expert insight by becoming a  Cipher Brief Level I Member .  

 

 

The post After Geneva: US – Russia Strategy Moving Forward appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

The planned introduction of chemical castration for serial rapists in Pakistan has been dropped due to objections from experts in Islamic law, who said such punishment would be counter to Sharia.

The controversial clause in a bill amending criminal law in Pakistan was dropped before the National Assembly voted on it on Wednesday, a parliament official said on Friday. If it were passed, it would have been unconstitutional, Parliamentary Secretary for Law and Justice Maleeka Bokhari explained. The basic law of the country requires all its laws to be in line with the Sharia and the Koran.

Bokhari said the decision to drop the clause was taken due to objections from the Council of Islamic Ideology, a constitutional body that advises the government of Pakistan on the intricacies of Islamic law.

Read more

© publicdomainpictures.net
Outrage as teen’s rapist spared jail time

The bill amends Pakistan’s Penal Code and Criminal Procedure Code to streamline investigations and prosecutions of sexual crimes as part of wider anti-rape reform. Some conservative lawmakers vocally argued against the castration clause as the piece of legislation was moving towards approval. Senator Mushtaq Ahmed from the Islamist Jamaat-i-Islami party argued that rapists should be hanged publicly, while castration was never mentioned in Sharia.

A separate bill also approved by the parliament on Wednesday introduces a system of special regional investigators for rape allegations to be appointed by the prime minister, as well as new protections for victims, and punishments for officials who fail to investigate their complaints properly. Among other things, it makes evidence that a victim is “generally of immoral character” inadmissible in court.

The reform is necessary because currently deterrence of sexual crimes in Pakistan is undermined by “poor investigation, archaic procedures and rules of evidence and delay in the trial,” the bill said.

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

As the U.S. works toward getting more 11,000 Americans, diplomats and Afghan allies out of the country, what kind of Taliban should the U.S. expect to deal with in Afghanistan?  So far, there have been assurances from the Taliban that a new regime may not be as brutal as regimes past, but few who have worked with the Taliban believe the assurances.  How might the regime work with, or shelter groups like al-Qaeda, which is the reason why the U.S. entered into Afghanistan after 9/11.  And how might a massive-scale exodus of Afghans impact neighboring countries?

The Cipher Brief sat down with the former National Intelligence Manager for Iran at ODNI, Norman T. Roule to get his expert-level perspective.

Norman T. Roule, Former National Intelligence Manager for Iran, ODNI

Cipher Brief Expert Norm Roule served for 34-years in the Central Intelligence Agency, managing numerous programs relating to Iran and the Middle East. He served as the National Intelligence Manager for Iran (NIM-I) at the Office of the Director of National Intelligence from November 2008 until September 2017.  As NIM-I, he was the principal Intelligence Community (IC) official responsible for overseeing all aspects of national intelligence policy and activities related to Iran, to include IC engagement on Iran issues with senior policy makers in the National Security Council and the Department of State.

The Cipher Brief: How would you characterize the international community’s response to the Taliban victory in Afghanistan?

Roule:  Historians of the future will likely describe the response to the Taliban victory as a strange mix of apathy and confusion.

In terms of apathy, there is extraordinary irony in the fact that after spending so much blood and treasure to defeat Da’esh efforts to establish an extremist Islamic Republic in Syria and impose its oppression over Iraqis and Syrians, the international community failed to prevent the creation of an Islamic Republic in Afghanistan. Many of the arguments behind our involvement in Syria – from a refugee crisis to the need to deny international Islamic militants a home to birth new terror groups – apply to Afghanistan. Whether or not one supported this decision, it is hard to avoid thinking that this episode will embolden militants worldwide.

In terms of confusion, we seem to be unable to accept that no one can predict the course and pace of crowd dynamics that so quickly eroded Afghan resistance. We live in a world where people acknowledge their inability to predict who will win our presidential elections but insist the Intelligence Community can somehow predict the day events will occur in a denied environment. But such a worst-case possibility should have been part of the planning deck and resourced on the ground accordingly.

The Cipher Brief: How would you expect the international community to respond in the coming days?

Roule: Absent a Taliban attack, operations at the airport should proceed more smoothly as our response architecture grows. Beyond that, much depends on how the Taliban act in the coming weeks. The group is not a monolith. Their success was highly likely as much a surprise to them as anyone. As they define their path and choose their leaders, there will be internal debates, jockeying for power, and perhaps some violent infighting.

In terms of indicators of the regime’s direction, we may want to consider the following questions:

First and foremost, how will the Taliban respond to our ongoing evacuation? Thus far, they seem willing to let us leave untouched, probably believing that the sooner we get out, the easier it will be for them to take control. At the same time, international media coverage of the evacuation will impose a strategic embarrassment on Washington.

Second, to what extent have the Taliban changed? They certainly understand that diplomacy played a role in their victory. Some of their leaders have spent hundreds of hours with foreign diplomats and traveled to multiple foreign capitals. How will these leaders merge such experiences into governance with more insular colleagues? They are likely to talk initially about compromise regarding women’s rights and inclusion of opponents in the government, but this may well be another effort to buy time. The international community has few pressure points over the group. How this plays out will be a good indicator of how they plan to run the country.

Next, how will they handle the issue of al-Qaida and other terrorists? We cannot overlook the deep connections between the Taliban and al-Qaida. If they believe the international community will limit its response to demarches, press statements, and empty sanctions, many in the group will be inclined to allow al-Qaida to reorganize.

Last, I would look at the refugee issue. They are likely to welcome external aid and allow at least some humanitarian groups to remain in country. Doing so requires no political concessions, addresses a domestic headache, and provides an opportunity for corruption. Humanitarian groups also offer a lever the Taliban can use against the West, i.e., refrain from criticizing us, or we will block your humanitarian operations. The Houthis have done this with great effect in Yemen.


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


The Cipher Brief: How do you think will China, Russia, and other adversaries will respond to the withdrawal? 

Roule: Chinese propagandists have aggressively exploited our evacuation from Afghanistan. Its media is already claiming that these events show Taiwan that “once war breaks out in the Straits, the island’s defense will collapse in hours, and the US military won’t come to respond.” China’s press has also reportedly announced that the U.S. will not stand by Hong Kong activists.

Beijing, Tehran, and their proxies will likely point to the withdrawal as evidence that the U.S. is a declining power, unwilling or incapable of defending its friends. It will be lost on no one that whereas the U.S. has abandoned Afghanistan, Russia, China, and Iran have not wavered in support of their – admittedly few and otherwise isolated – allies.

In a worse case, if our adversaries believe the withdrawal reflects a lack of national resolve, they may be tempted to test our will on other issues. In this case, a miscalculation could lead to a conventional war in another theater.

The Cipher Brief: What would you say to those who say that the withdrawal demonstrates that the U.S. will only focus on strategic interests?

Roule:  Certainly, this argument has an appeal. It is true that our strategic adversaries like nothing better than the U.S. expending resources and diplomatic energy in such areas as Afghanistan, in part because we are, in essence, protecting their interests for free. But it does beg two questions.

First, what will happen differently next year regarding China, Russia, efforts to combat climate change, and cyber actors, now that we are out of Afghanistan? Second, what exactly is a U.S. strategic interest that we would protect? Estonia? Bahrain? Taiwan?

This argument also glosses over how others respond to such a posture. If a country perceives itself outside the international community’s protection, it will likely accommodate an aggressor. Our next call for a coalition of the willing will likely meet with less enthusiasm.

U.S. influence depends on the respect shown to us in multiple arenas. The echoes of this localized respect become self-reinforcing. We should think about what happens to collective international security if these echoes are silenced.

Last, this argument inherently argues that values are strategic interests. Unless violence directly touches Americans, we will limit our response to diplomacy and public statements. Such protests are unlikely to stop those behind a future Srebrenica massacre or the Rwandan genocide. Indeed, one can make a case that such a response might even encourage such events.

The Cipher Brief: How can the U.S. now best demonstrate its national resolve?

Roule:  As the saying goes, the best way to demonstrate national resolve is to demonstrate national resolve. Fair or not, this episode will tar the Biden administration. It doesn’t help that some allies reportedly have complained that the U.S. did not sufficiently consult with them on its decision to withdraw. Public criticism of the withdrawal decision by some of our closest European partners is growing. Adversaries will now consider their action through the lens of Afghanistan, much as the post-Vietnam malaise encouraged Soviet aggression in the 1970s.

I am not saying that we can’t reverse this situation. The U.S. withdrawal from Lebanon in 1984 caused many to question U.S. resolve. Although it did signal an end to U.S. (and international) efforts to eradicate Hezbollah, Reagan’s actions in other arenas (to include Afghanistan) restored the image of U.S. national resolve. Difficult diplomacy and a demonstration of our willingness to use military power when needed lay ahead.


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


The Cipher Brief: What does the return of the Taliban mean for al-Qaeda?

Roule:  There is little reason to believe the Taliban-Al-Qaida relationship will not resume, although al-Qaeda is a fragmented and a pale version of its original stature. Nonetheless, it is easy to imagine the delight of its remaining leadership and cadres. Elements in Iran will likely seek to return to Afghanistan, perhaps assuring Iran that in exchange for tolerance of periodic transit of Iranian territory, the group will use its influence with the Taliban to protect Iran’s interests. We should watch for any signs of a return to Afghanistan by Zawahiri’s deputy, Sayf al-Adel, who is currently in Iran with other members of the group’s leadership council.

But al-Qaeda is not the only actor on this stage. Its leader Ayman al-Zawahiri has not appeared for months and has far less influence than Osama Bin Laden. Afghanistan also hosts al-Qaeda in the Indian Subcontinent (AQIS), ISIS, and other groups. The Taliban have emptied Afghanistan’s prisons which held deeply committed and dangerous militants who may gravitate to whatever new militant leadership might arise. But a lethal threat to Americans is sure to appear. The only questions are its size, goals, and reach.

The Cipher Brief: What does the U.S. withdrawal mean for China and Russia?

Roule: Both countries have sought to undercut U.S. influence in Afghanistan. They will each be delighted with the rhetorical violence of our internal debate over the withdrawal. But they also enjoyed the stability our engagement provided in a country so close to their borders.

Both countries have developed relations with the Taliban. I believe each hosted a Taliban delegation in recent weeks. It shouldn’t be lost on us that neither country felt compelled to withdraw its personnel from Kabul. That’s a pretty good sign of their confidence in the relationship.

Outside of Afghanistan, each will use the withdrawal to increase their influence with Central Asian actors – including Turkey. Coordination on terrorism and narcotics issues will come most easily. For example, Uzbekistan will worry that the Taliban will renew support of the violent Islamic Movement of Uzbekistan, which has long maintained a presence in Afghanistan.

China’s concerns will be threefold. Beijing will use economic and diplomatic inducements to ensure that the Taliban do not encourage unrest among China’s oppressed Uighur population, let alone support the East Turkistan Islamic Movement or other Chinese militants in Xinjiang province. Next, Beijing will want to explore the Belt and Road access Afghanistan offers. Last, China will likely test whether it can achieve a commercially viable deal to mine Lithium and other minerals. In that mine operations require many years to develop and a vast amount of capital to construct, such arrangements are likely to be few given Afghanistan’s unpredictable political and security environment.

As for Russia, the U.S. withdrawal offers a chance for greater influence in Central Asia. We should watch for signs of new Russian military bases in the region. Moscow’s concern that Afghanistan will once more become a sanctuary for anti-Russian terrorists will also drive its relationship with the Taliban.

The Cipher Brief: What about Iran and Pakistan?

Roule: Iran has long maintained a relationship with Taliban elements. Reportedly, this involved sanctuary and provision of some weaponry. Tehran’s goals were to hedge its bets in Afghanistan, influence the enemies of the U.S., and protect the Shi’a of Afghanistan.

On the last point, Iran may have much work to do. Taliban personnel reportedly tore down Shi’a posters as they entered Kabul. Tehran must now contend with the consequences of refugees and the rise of warlords on its border.

The current head of Iran’s Qods Force, Esmail Qaani, has considerable experience on Afghan issues, and I expect he will play a prominent role in Iran’s response. We should watch to see how the Qods Force deploys its seasoned Afghan Fatemiyoun proxies from Syria.

Pakistan’s long-time relationship with the Taliban will give it more influence over the group than other countries. But Islamabad also will be on the receiving end of a flood of refugees, renewed militant terrorism in its loosely-controlled border areas, and Western pressure for its support of the Taliban. Ties to the Taliban may also complicate Islamabad’s relationship with India and China.

The Cipher Brief: What does this mean for the U.S. intelligence community?

Roule: The counterterrorism cadre of the US intelligence community and its partners have achieved extraordinary successes in the last years. But their work is now more complicated but no less urgent. For example, our withdrawal has reduced collection streams and potential access when the Afghanistan-based terrorist threat has only begun to grow. This challenge arrives as we shift counterterrorism resources from al-Qaeda to domestic extremists, cyber threats, and China.

The Cipher Brief: Any final comments?

Roule: If I may, I would like to close with a couple of brief comments.

First, we need to do everything we can to support personnel on the ground in Afghanistan. They – and their support teams at home – are trying to restore order in the middle of a hurricane. We are watching heroism at its best.

Next, the narrative of Afghanistan is unsurprisingly partisan. But politics shouldn’t obscure the truth. For more than twenty years, thousands of American and coalition partners volunteered to risk their lives in Afghanistan. We didn’t come to colonize. We didn’t steal Afghan resources. The operational goals were to bring Bin Laden to justice, destroy al-Qaeda, and prevent Afghanistan from becoming a haven for the group in the future. We also worked to transform Afghan society. The need for this last effort wasn’t apparent at the outset of our invasion. But it was likely unavoidable if we hoped to satisfy our values and enable Afghan society to confront its militant population. This effort represents the best of our values, and we owe all who served in this arena our most profound respect. Afghans who have participated in their country’s efforts during the past two decades will endure tremendous suffering. But they remain Afghanistan’s best hope and they deserve our support. Last, we need to end the fiction that Afghans didn’t fight for their country. Tens of thousands of Afghans were killed and wounded in the fight against al-Qaeda. Many involved in this fight are reportedly being sought door-to-door by the Taliban. Discounting their efforts may serve a political narrative, but it does them a terrible injustice.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

 

The post What Should the U.S. Expect from the ‘New’ Taliban Regime? appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

The Funniest Clothing Labels Ever – When was the last time you read the label on your favorite shirt or most comfortable pair of jeans? Maybe it’s time to take a look, your clothing tags may hide a funny message.

The Perfect Gift For Someone You Hate – Hungry AND tired? You can rest on this soft body pillow shaped like smoked pig’s feet! What really amazes us are the details, it looks so real… and so disgusting.

Every Cat at 3AM – If you currently have or have ever had a cat, you’ll be able to relate to Gus Johnson’s video, in which he demonstrates one of the many ways in which our furry friends can be a-holes.

The Funniest Dog Videos Of All Time – We understand the value of a good funny dog video, so here’s a list of our six best viral pup videos of all time. You’re welcome.

Mildly Infuriating Things In Life – Sometimes the internet shows you a photo that’s ever so slightly wrong that it sticks in your brain forever…

Funny Images Showing How Differently Men and Women Act – Yup, we’re different and there is no denying that fact. We have different bodies, different brains and different ways of using both.

Dads Who Didn’t Want The Damn Dogs In Their Lives – Dad logic is a weird thing. They say they hate dogs, and then you end up with a gallery like this…

Random Funny Pictures – What do you do when you are bored at work? You just mindlessly scroll through random funny pictures, of course!

Mr. Bean Playing Every Role In Hollywood – When one thinks of a rugged, versatile actor capable of elevating any role given to them, Mr. Bean naturally springs to mind. And yet he was never cast as Frodo Baggins or Indiana Jones, which in our eyes is one of the saddest tragedies of modern filmmaking.

Funny Thanksgiving Cake Fails – Thanksgiving is a day to reflect and enjoy time with family… and sometimes to FAIL.

Still bored to tears and want to see more funny and entertaining links? You should check out Linkiest, Leenks, or Fark!

The post This Month’s Funniest Internet Finds first appeared on .

find more fun & mates at SoShow now !

Greece will soon prohibit unvaccinated residents from entering a litany of public spaces, the country’s prime minister has announced, claiming its current Covid outbreak is largely fueled by those who haven’t received the jab.

Starting next week, the unvaccinated will be barred from entry to restaurants, cafes, theaters, bars, gyms and museums, among other indoor public places, PM Kyriakos Mitsotakis said on Thursday, noting that a negative Covid-19 test will no longer be accepted as an alternative to proof of vaccination.

“This is indeed a pandemic of the unvaccinated,” he said as he announced the move in a televised address, adding “Greece is mourning unnecessary losses because it simply does not have the vaccination rates of other European countries.”

The new rules are set to take effect on Monday, and will require Greeks to present vaccine certificates to businesses and other indoor establishments to be allowed inside. Those attending religious services mark a rare exception, however, as they will only be asked to present a negative test in order to enter a church or other place of worship.

Read more

People wait in front of a vaccination after Austria's government has imposed a lockdown on people who are not fully vaccinated, in Vienna, Austria, November 18, 2021. © Reuters /Leonhard Foeger
Austria may lock down the vaccinated too

In a bid to encourage booster vaccinations among the elderly – a population much more vulnerable to Covid-19 – citizens over the age of 60 will be made to renew their certificate after a period of seven months.

While officials had hoped to hit a full vaccination figure of 70% for Greece’s population of 11 million by autumn, the number currently stands at about 62%, according to Reuters. As its weekly case counts continue to soar to record highs, the country reported 7,317 new Covid-19 infections and 63 deaths on Thursday, bringing the totals to more than 860,000 cases and some 17,000 fatalities since the pandemic kicked off in late 2019.

The new restrictions in Greece mirror similar policies implemented elsewhere in Europe, with Austria, Germany, Italy, France, the Czech Republic and Slovakia each imposing limits on public life for the unvaccinated. Though the Austrian government recently imposed a full lockdown for millions of residents who have not received the shot, some officials in that country are pushing for even harsher policies, including a national stay-at-home order on the jabbed and non-jabbed alike.

Think your friends would be interested? Share this story!

find more fun & mates at SoShow now !

The children of families who were affected by the massive earthquake which devastated large parts of south-west Haiti in August this year are receiving free hot meals at school as part of an initiative by the UN’s World Food Programme (WFP) to support the recovery of the country’s most vulnerable communities.

Read the full story, “Hot meals helping Haiti’s children recover from the earthquake”, on globalissues.org

find more fun & mates at SoShow now !

The annual migration of red crabs has brought traffic to a standstill on an Australian island. Apart from the epic journey, the species is also notorious for eating its own young.

Tens of millions of crustaceans are swarming Canberra-governed Christmas Island, which is almost a thousand miles northwest of the Australian mainland. Parks Australia, a government body in charge of wildlife conservation on the island, has deployed its staff to manage traffic, rake crabs off roads and provide advisories to local residents regarding road closures. Authorities are well-prepared to deal with the epic crab march as it repeats every year, usually in October and November. There are even special bridges and tunnels in place, built over and under busy roads so as to minimize the number of crabs crushed by cars. The sight of millions of these creatures making their perilous trek has become one of Christmas Island’s main tourist attractions.

The exact timing of the red crabs’ journey from forest to ocean is defined by rainfall and lunar phases. The march is led by male crabs, which are later joined by females. On reaching the ocean, they mate and spawn, with each female capable of producing as many as 100,000 eggs. However, most of the young crabs never make it back to the forest as they end up being eaten by fish and whale sharks for whom this is a veritable feast. To make matters worse, the crab larvae that do make it to the beach are often devoured by returning adult crabs of the very same species, hence one of their names – the cannibal crab.

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

Sports goods retailer Decathlon has said it won’t be selling canoes in its stores in northern France anymore because the light vessels are increasingly being used by migrants trying to cross into England.

“Given the current context… the purchase of canoes will no longer be possible” in Decathlon stores in Calais and Grande-Synthe, outside Dunkirk, the French retailer announced.

The two cities overlook the Strait of Dover, which is the narrowest point in the English Channel. Thousands of migrants have been using this spot in recent years to try to make the dangerous 34-kilometer-long sea journey from France to the UK.A lot of canoes aren’t being purchased for their original sporting purpose, Decathlon complained.

Read more

FILE PHOTO. ©REUTERS/Peter Cziborra
London & Paris trade barbs over Channel crossings

They “could be used to cross the Channel” and as a result of this, “people’s lives would be endangered,” it pointed out.

“We are committed to never putting our customers at risk in the use of our products, whatever the circumstances,” the company said. 

The initiative to remove canoes from the shelves came from the stores themselves and was backed by the head office, according to the retailer. However, Decathlon will keep selling the vessels online and in its other shops across France.

Last Thursday, two canoes were found adrift in the Channel near Calais, while two migrants were rescued from the water. The next day, three more people were reported missing after attempting to get to England using canoes.

Tensions between London and Paris are high after a record number of migrants – 1,185 – were able to cross the Channel a week ago. 

Britain said it was unacceptable” that France had let so many people slip through, but the French government insisted they were “neither their collaborators nor their assistants” and blamed the soaring crossings on the smugglers and the UK’s labor market, which makes the country attractive to people eager to work at low cost.”

Like this story? Share it with a friend!

find more fun & mates at SoShow now !

Chris Inglis’ new White House office has a startup feel to it. There are desks, a few chairs, a coffee maker and a poster hanging on the wall.  But as the head of the newly established Office of the National Cyber Director, Inglis has to make due with what he has while still advising President Joe Biden on the smartest ways for the US to prevent and respond to cyberattacks.

Inglis has already had numerous conversations with the president, who has made clear that the government has a role to play in the defense of the private sector and in assisting the private sector in defending critical infrastructure.  And the president knows, says Inglis, that means the government needs to get its own cyber house in order. 

But like any real startup, Inglis’ resources are scarce.  More than three months after being confirmed by the Senate, he still doesn’t have the full staff he needs to take on his timely and critical mission.  That’s because the funding for his office – some $21 million, part of the $1 trillion infrastructure bill making its way through Congress – is still stuck in the political spin cycle.  Why does it matter?

“The threat is greater than I can ever remember,” Inglis told me during last month’s AFCEA and INSA Intelligence & National Security Summit in National Harbor, Maryland. “The audacity, the brazenness, the thresholds that have been crossed at every turn; we’re in a difficult place.”

While he’s waiting for Congress to act, he says he’s spending about fifty percent of his time defining his role, being careful not to duplicate the work already being done by other agencies and departments, while spending another fifty percent building relationships that will be important later.  Eventually, he’s expected to have a staff of some 75 people who will be expected to work hand in glove with CISA, the National Security Council’s cyber staff, the OMB and others.  The remaining fifty percent of his time, Inglis jokes, is spent figuring out how to attract the country’s best talent.   

“People are starting to flow into the organization. I’m confident that we’re coming up to a breakout moment, not for the National Cyber Director, but the contribution that we can and should make. I’m sobered by the nature of the challenge, I’m optimistic we can make a difference.”

Optimistic he is.  And he’s not even complaining about being given a critical task for US national security and then having to wait for politics to play out before being able to act on it.

“It has been a semi-silver lining in that we would not have had time to think about how we want to apply the resources coming our way.”

While Inglis has been waiting, he and his small team have had time to think about the four things they’d like to focus on right away. 

First, is streamlining the roles and responsibilities in government of who handles what when it comes to protecting the public and private sectors from cyberattacks.  He also spoke during his confirmation hearing about the importance of allocation of resources and while the Office of the National Cyber Director doesn’t have the authority to move money, it does have what Inglis calls the responsibility to account for cyber money.

“One of the most critical gaps in cyber is that the physical digital infrastructure is not built to a common standard. The executive order related to this requires that within a certain amount of time we have to install basic procedures like multifactor authentication and encryption of stored material. That is a challenge and a potential vulnerability for us. We need to make sure that we make these investments necessary to buy down the lack of investment for years.

The second gap is in talent related to number of people required to occupy these jobs. It’s not simply the folks with IT or cyber in their name, but general cyber awareness. There is some expenditure of resources of time, attention, and money to get awareness right on the part of the truly accountable parties like agency and department heads. We have to make sure they don’t see cyber as a cost center, but an enabler on the part of all the users as they understand what their roles are and what the accountability is.

He admits there is still a level of education needed within government to get there.

That is usually the case in both the government and the private sector,” he said.  “We need to think this way about cyber and invest in cyber so that we can enable the mission, not hold it back. I think that education is the most important and effective way to handle this. Then, it is to make sure that the accountability is aligned and harmonized. We tend to take risk in one place and expect someone in another place to be the mitigator of a risk they don’t understand was taken in the first place. We need to operate in a collaborative fashion and get away from divisions of effort which are an agreement not to collaborate and allow adversaries to pick us off one at a time.”

Inglis says that unity of effort must start at home.  “The executive order issued in May has begun to lay out common expectations about the hardware, software, and practices that we need to begin in those spaces,” he said.  “Externally, if we have sector risk management agencies who engage the private sector for the purposes of supporting and engaging the critical components of that infrastructure, we need to make sure you don’t need a Ph.D. in government to know who to deal with and what you’re going to get from them.”

He is arguing for the government to also put ‘valuable material’ on the table.  “That could be our convening power,” said Inglis. “We could perhaps address and reduce liability or give companies a clue as to what might be around the corner because the government has access to exquisite intelligence. If that setup is possible, we also need a venue where collaboration takes place. Information doesn’t collaborate, people do.”

Inglis likes to point to the example of CISA and the Joint Cyber Collaborative.  “They put people from the private sector and the public sector side by side to co-discover threats that hold us at common risk. That project sets up the possibility of implicit collaboration in what we then do with that common operational picture. The government could take ideas that private sector companies turn into proprietary systems and enrich and classify them to deal with it in their system.”

Using what he calls “all the tools in the toolkit,” Inglis also notes the importance of international relationships, which fits nicely into the White House’s International Summit on Ransomware last week in Washington, which zeroed in on tighter cryptocurrency standards, among other things. “Beyond the Five Eyes, what do other like-minded nations think about what is expected behavior in this? What are governmental actions that are appropriate,” he asked.  

Inglis has been an active participant in the president’s recent actions in cyber.  He took part in a White House meeting with tech leaders in August that was hosted by President Biden, who Inglis says, spent the first hour sharing his vision about how the country should focus on collaborative integration.  “The companies represented weren’t only companies like Microsoft and Apple, but people who operate in the critical infrastructure space,” said Inglis.  “The people component, educators, were represented reflecting the president’s view that cyberspace is not just technology, it is also the people component. They are a major link in the chain, and we need to get the roles and responsibilities right.”

While he’s waiting for the funding he needs to get his office fully staffed, Inglis said he’s also putting thought into reconciling resources with aspirations.  Managing expectations is going to be important.  Frustration has been growing for years over what some see as a lack of government response to some of the largest hacks in history.  The phrase ‘time and place of our choosing’ as a definition of response has grown old and some Americans are weary of a government that isn’t responding in a more public way to the beating it sees the US taking in cyberspace.

So, I asked Inglis whether there should be red lines in cyber.

“Red lines are both good and bad,” he answered.  “They are clear and crisp, and everybody knows what they are. The downside is that because of that, an adversary knows exactly how far they can go. It means that you set up a somewhat permissive environment. Red lines also don’t have context; sometimes there is a reason that a defender would make the ransomware payment. As a matter of policy, the U.S. government does not pay ransomware, but I imagine there will be a situation at some point where a hospital is against the Russian state and actual life and safety is at risk. If there is no other way to get the material back, in order to get back in the business of saving lives, they would want to rethink if a red line is a red line in that particular situation. I think the right thing to do here is not to establish hard thresholds of things with scripted responses, but outline what we are prepared to defend and what principles we will exercise in defense of those things. We commit to defending the private sector when it is held at risk by a nation state in cyberspace as much as in the kinetic space and make that clear to adversaries. I think that would be more helpful in changing decision calculus and creating a useful ambiguity about when and where we will come in.”

Inglis said he’s also thinking a lot about present and future resilience.  It’s a worthwhile focus, given that the White House estimates that nearly half a million public and private sector cybersecurity jobs are currently unfilled. 

“That is a massive problem,” said Inglis. “However, the more insidious problem is that the 320 million people in the United States who use the internet who have no idea how to properly take their place on the front lines of this issue. There is an awareness issue that requires us not to make Python programmers out of them but to make sure they understand the nature of this space.”

Everyone has heard the old saying that time is money, but in Inglis’ case, time is security so I asked him point blank whether he thought government was moving has quickly as it should on the cyber problem.

“Government is moving at speed; the question is if it is at the necessary speed. I don’t think anyone is moving at the necessary speed. Some are moving at light speed, but at the end of the day, we need an integrated, collaborative approach. While we won’t have unity of command, I think there needs to be a universally felt sense of urgency so that we will all get our heads in the game.”

Congress, are you listening?  Oh, and by the way, that poster in Inglis’ office? It reads, ‘Hours Since the Last Surprise.”

As a startup with maybe too few resources at the start and who often didn’t understand how all the wickets are run, we have our occasional surprise,” said Inglis.  “When we encounter those surprises and go to someone with the deep and sharp expertise to help us navigate that, we get what we need. However, we are not a full functioning, full featured, fully capable organization yet. We’re trying to build somebody else’s airplane while we’re free falling from our own. We have a parachute, and we can land safely, but it is a bit of a challenge at times.”

Find out more about why experts like former NSA Director General Keith Alexander (Ret.), Mandiant CEO Kevin Mandia and others have joined The Cyber Initiatives Group, powered by The Cipher Brief

Read more expert national security insights, perspective and analysis in The Cipher Brief

The post Chris Inglis and the Gathering Cyber Storm appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

Scientists have used artificial intelligence to “predict” formulas for new designer drugs, with the stated goal of helping to improve their regulation. The AI generated formulas for nearly nine million potential new drugs.

Researchers with the University of British Columbia (UBC) used a deep neural net for the job, teaching it to make up chemical structures of potential new drugs. According to their study, released this week, the computer intelligence fared better at the task than the scientists had expected.

The research team used a database of known designer drugs – synthetic psychoactive substances – to train the AI on their structures. The market for designer drugs is ever-changing, since their manufacturers are constantly tweaking their formulas to circumvent restrictions and produce new “legal” substances, while cracking their structure takes months for law enforcement agencies, the researchers said.

Read more

FILE PHOTO: A man living on the streets displays what he says is the synthetic drug fentanyl, in the Tenderloin section of San Francisco, California, February 27, 2020 © Reuters / Shannon Stapleton
Drug overdose deaths in US hit all-time record

“The vast majority of these designer drugs have never been tested in humans and are completely unregulated. They are a major public-health concern to emergency departments across the world,” one of the researchers, UBC medical student Dr. Michael Skinnider has said.

After its training, the AI was able to generate some 8.9 million potential designer drugs. Afterwards, researchers ran a data sheet of some 196 new drugs, which had emerged in real life after the model was trained, and found that more than 90% of these have been already predicted by the computer.

“The fact that we can predict what designer drugs are likely to emerge on the market before they actually appear is a bit like the 2002 sci-fi movie, Minority Report, where foreknowledge about criminal activities about to take place helped significantly reduce crime in a future world,” senior author Dr. David Wishart, a professor of computing science at the University of Alberta, has said.

Identifying completely unknown substances remains an issue for the AI, the research team has noted, but they hope it might potentially help with that task, since the computer was also able to predict which formulas of designer drugs were more likely to be created and hit the market. The model “ranked the correct chemical structure of an unidentified designer drug among the top 10 candidates 72 percent of the time,” while throwing in spectrometry analysis, which is an easily obtained measurement, bumped the accuracy to some 86%.

“It was shocking to us that the model performed this well, because elucidating entire chemical structures from just an accurate mass measurement is generally thought to be an unsolvable problem,” Skinnider stated.

Think your friends would be interested? Share this story!

find more fun & mates at SoShow now !