The moderator of this interview with @RGB_Lights at a U.S. Chamber of Commerce event just asked Joyce if "white-hat hacker" is an oxymoron, in case you're wondering how much he knows about cybersecurity. 
Joyce on the Bloomberg story about Supermicro: "I have pretty good understanding about what we’re worried about and what we’re working on from my position. I don’t see it."
Joyce: "There’s no there there yet. I have grave concerns about where this has taken us. I worry that we’re chasing shadows right now."
Joyce: "Do I have confidence that there’s some there there on this story? I don’t. I worry about the distraction that it is causing."
Now the moderator is arguing that the National Cyber Strategy "lays to rest" the idea that the Trump White House doesn't care about cybersecurity.
...
...
Joyce pushes back on the notion that Trump has unleashed Cyber Command for lots of new operations.
Says rescission/replacement of PPD-20 "is not an indicator that the needle has moved from where we were to a whole bunch of hacking. That is not the case."
Says rescission/replacement of PPD-20 "is not an indicator that the needle has moved from where we were to a whole bunch of hacking. That is not the case."
Joyce: "There was some debate about how much overhead and bureaucracy was associated with [offensive cyber ops], and were we able to do the things in the timeframes and at the pace we needed? And we weren’t. And so there’s been some work to adjust that."
Joyce reiterates his opposition to letting companies hack back and says "a bunch of the leadership across the community I work with" agrees that it's a bad idea.
Says hacking is an inherently government activity and there are too many risks for companies to do it.
Says hacking is an inherently government activity and there are too many risks for companies to do it.
Joyce: It may feel good to let companies punch back, but “I’d rather have our resources, whether it’s in the executive, whether it’s in Congress, focused on fixing things that are going to be systemically solving the problem rather than contributing to noise.”
Joyce, back on Bloomberg story: "If somebody has first-degree knowledge, can hand us a board, can point to somebody in a company that was involved in this as claimed, we want to talk to them. ... Because we really need to understand it."
"I have pretty great access," Joyce says. "I don’t have a lead to pull from the government side. We’re just befuddled."
