White House Chronicle

News Analysis With a Sense of Humor

Crime, War and Mischief Are the Internet Norms

by Leave a Comment

By Llewellyn King

The big news coming out of the G7 meeting in Japan will not be about establishing international norms for cybersecurity. That will only get an honorable mention at best. But maybe it should get greater attention: the threat is real and growing.

Consider just these four events of the recent past:

The electric grid in Ukraine was brought down last Dec. 23 by, it is believed, the Russians. Because of its older design, operators were able to restore power with manual overrides of the computer-controlled system.

The Hollywood Presbyterian Medical Center in Los Angeles was ransomed. This crime takes place when a hacker encrypts your data and demands a ransom, often in untraceable bitcoin, to unlock it. The hospital paid $17,000 rather than risk patients and its ability to operate.

While these ransom attacks are fairly common, this is the first one believed to have been launched against a hospital. Previously hospitals had thought patient records and payment details were what hackers would want, not control of the operating systems. Some of the ransoms are as low as $3,000, with the criminals clearly betting that the victims would lose much more by not settling immediately, as did the medical center. The extortionists first asked for $3.6 million.

In a blockbuster heist on the Internet, the Bangladesh central bank was robbed of $81 million. The crooks were able to authorize the Federal Reserve of New York to release the money held in an account there. They would have got away with another $860 million, if it were not for a typing mistake. In this case, the money was wired to fraudulent accounts in the Philippines and Sri Lanka.

Target, the giant retailer, lost millions of customer records, including credit card details, to an attack in February 2014. Since then, these attacks on retailers to get data have become common. Hackers sell credit card details on what is known as the “black web” to other criminals for big money.

Often the finger is pointed at China, which will not be at the G7. While it may be a perpetrator, it also has victim concerns. There is no reason to think that Chinese commerce is not as vulnerable as that in the West.

China, with the help of the Red Army, is blamed in many attacks, particularly on U.S. government departments. But little is known of attacks Chinese institutions sustain.

Governments want to police the Internet and protect their commerce and citizens, but they are also interested in using it in cyberwar. Additionally, they freely use it in the collection of intelligence and as a tool of war or persuasion. Witness U.S. attempts to impede the operation of the centrifuges in Iran and its acknowledged attacks on the computers of ISIS.

As the Net’s guerilla war intensifies, the U.S. electric utility industry, and those of other countries, is a major source of concern, especially since the Ukraine attack. Scott Aaronson, who heads up the cybersecurity efforts of the Edison Electric Institute, the trade group for private utilities, says the government’s role is essential, and the electric companies work closely with the government in bracing their own cyber defenses.

Still, opinions differ dramatically about the vulnerability of the electric grid.

These contrasting opinions were on view at a meeting in Boston last month, when two of the top experts on cybersecurity took opposing views of utility vulnerability. Juliette Kayyem, a former assistant secretary for intergovernmental affairs at the Department of Homeland Security who now teaches emergency management at Harvard’s Kennedy School of Government, said she believed the threat to the electric grid was not severe. But Mourad Debbabi, a professor at Concordia University in Montreal, who also has had a career in private industry, thinks the grid is vulnerable — and that vulnerability goes all the way down to new “smart meters.”

The fact is that the grid is the battleground for what Aaronson calls “asymmetrical war” where the enemy is varied in skill, purpose and location, while the victims are the equivalent of a standing army, vigilant and vulnerable. No amount of government collaboration will stop criminals and rogue non-state players from hacking out of greed, or malice, or just plain hacker adventurism.

Governments have double standards, exempting themselves when it suits from the norms they are trying to institutionalize. Cyber mischief and defending against it are both big businesses, and the existential threat is always there. — For InsideSources

Hail to America’s Microbusinesses

by Leave a Comment

To hear the members of Congress tell it, small business – which exists in a mythical place in America along with mummy and apple pastries – has just two problems: marginal tax rates and government regulation.
 
For most small businesses, these aren't the problems at all. It's the complexity of taxes and regulations that is the problem.
 
To understand the predicament of small business today, one needs to get a grip on what it is. The Small Business Administration defines small businesses as those with 500 or less on the payroll. But to most small businesses, the bar is lower by a factor of about 10. Most owners think they have moved to a different place if they can number their payroll in the dozens.
 
Really small businesses, also more appropriately called microbusinesses, according to the National Association for the Self-Employed (NASE), are those with about 12 employees. These are the businesses that create jobs fast when the economy improves. This is where the rubber of entrepreneurism meets the road of reality.
 
These are Americas real entrepreneurs; these are the people who “go on their own,” preferring self-employment to job security. They aspire to make a living first; making a fortune is a distant second.
 
They may repair cars, make artisan bread, book travel, sell yarn, repair computers, print menus, stage events, publish newsletters, houseclean, landscape, stuff sandwiches, shop for others, manage other peoples’ eBay accounts, test for pollution, paint houses and bird dog the paperwork on import-export.
 
Their governmental enemy is not the rate of taxation, as we were told in the debate that led to the fiscal cliff agreement, but rather the complexity of the tax code. Likewise with regulation, licensing and permitting
 
Keith Hall, who advises the 150,000 member-strong NASE, on tax issues says that microbusinesses are overburdened by the complexity of the tax code and have to spend money they can't afford on accounting fees; or, if they enter into the tax labyrinth themselves, risk making mistakes that can lead to costly audits, and as often as not overlook legitimate deductions.
 
The tax code is a war zone for the single entrepreneur, Hall says. Worse, he says, it favors big business both in the way taxes are calculated and in the deductions allowed. Big companies routinely claim deductions that wouldn't be allowed for microbusinesses: “The playing field is not level,” Hall says.
 
One of the biggest problems centers on health care. The unincorporated entity — say, Jim Smith trading as Gold Limousine — cannot deduct his health insurance. The various forms of incorporation have their own penalties, and all involve time and the need for professional help to administer them.
 
Incorporation is not a panacea for the self-employed. Its primary purpose is to limit liability to the incorporated entity and to facilitate a possible sale of the company, or the taking of equity capital.
 
The distress over the tax code is equaled by employment regulations,environmental mandates and rules about working conditions.
 
But all this is nothing compared to the real enemy of small business: big business.
 
Big businesses, particularly chain retailers and restaurants crush small businesses. They crush them every day. The arrival of Walmart, Home Depot, Target or Staples spells death for dozens of small businesses in the neighborhood.
 
The redevelopment of old neighborhoods, where small businesses flourish, also can be fatal. The local mall is a sanctuary for big retail and a mass grave for small endeavors.
 
The lot of the new business, the small new business, is harder today than it has been historically, as there are fewer fields where the behemoths are not dominant. Also banks lend on formula not character, landlords favor the big and established over the new and enterprising.
 
Yet the urge to be in business continues; the lure is freedom, maybe success and the knowledge that you tried. If you want to see the entrepreneurial spirit at work, visit a decayed strip mall. There you'll find rents that are low and hopes that are high.
 
Of course, you could go to a business school and see the creation of another kind of entrepreneur: the corporate animal learning about business plans, return on equity, takeover strategy and how to get a window office.
 
I say the real entrepreneur is the guy with a fishing boat in Maine, or the single mother with a staffing agency in Oregon. — For the Hearst-New York Times Syndicate