Deputy AG Rod Rosenstein is about to deliver remarks at a Georgetown Law/DOJ cybercrime conference. 
Rosenstein talking about the risks of new technology.
“We need to place security on the same footing as novelty and convenience, and design technology accordingly.”
Offers cars as an example.
“We need to place security on the same footing as novelty and convenience, and design technology accordingly.”
Offers cars as an example.
Rosenstein: “We cannot accept a culture in which technology companies considers it part of their responsibility to defeat legitimate law enforcement” activities.
"Thwarting harmful, destructive activities enabled by technology is a moral imperative," Rosenstein says.
After discussing ransomware, Rosenstein says, “Without a concerted effort to alter our trajectory, the malicious use of technology … will be more pernicious and more pervasive tomorrow than it is today, and even more difficult to combat.”
Rosenstein addressing IoT vulnerabilities: “Being the first to market is a goal of every technology. … Building secure devices requires additional testing and validation [that] slows production times, and it costs more money.”
Interesting to listen to Rosenstein simultaneously urge tech companies to build with security in mind and urge them to build in what cryptographers consider deliberate insecurity in the form of encryption backdoors.
Rosenstein, pulling no punches: When you hear companies complain about LE demands, "it’s important to understand that what is good for a technology company in terms of bottom-line profits is not necessarily good for America. Their interests are not always aligned with yours."
Rosenstein: “It is not inconsistent to value both securing devices against illegal intrusions and providing lawful access with judicial orders.”
Rosenstein says, "We encourage technology companies to develop responsible encryption — effective, secure encryption that resists criminal intrusion but allows lawful access with court authorization."
Well, there's an interesting analogy for the encryption debate.
Rosenstein says we require buildings to disable elevators in the event of a fire, but we also require firefighters to be able to reactivate them.
Rosenstein says we require buildings to disable elevators in the event of a fire, but we also require firefighters to be able to reactivate them.
Hoo boy.
Rosenstein: “Some technology experts castigate colleagues who engage with law enforcement to address encryption and similar challenges. Just b/c people are quick to criticize you does not mean that you are doing the wrong thing.”
"Take it from me," he adds to laughs.
Rosenstein: “Some technology experts castigate colleagues who engage with law enforcement to address encryption and similar challenges. Just b/c people are quick to criticize you does not mean that you are doing the wrong thing.”
"Take it from me," he adds to laughs.
Citing Ray Ozzie's proposal for a secure encryption workaround, Rosenstein says, “We should not let ideology or dogma stand in the way of constructive academic engagement.”
Rosenstein: I want everyone to "keep searching for constructive solutions that will enable us to harness the wonder of new advances without descending into technological anarchy."
Q: What do this week's cybercrime indictments reflect?
Rosenstein: "First of all, they reflect our capability. And I think that’s a really important point.” Says that’s why DOJ held a press conference. “Our goal is to send a message that we can catch you.”
Rosenstein: "First of all, they reflect our capability. And I think that’s a really important point.” Says that’s why DOJ held a press conference. “Our goal is to send a message that we can catch you.”
“Number two," Rosenstein says, "the cases illustrate our commitment in terms of resources.”
Says there are "scores of lawyers" at DOJ CRM, NSD, and USAO offices who are cybercrime experts.
Says there are "scores of lawyers" at DOJ CRM, NSD, and USAO offices who are cybercrime experts.
On social media disinformation and the companies' responsibility to police it, Rosenstein says, “They do have the ability and incentive to self-regulate in order to avoid the kind of hostile regulation that might impede their business models.”
Q: You're briefed on a lot of cyber threats. What keeps you up at night?
Rosenstein: “Do I have to answer this honestly?”
Rosenstein: “Do I have to answer this honestly?”
Rosenstein's staff swept him right to the elevator and out of the building as soon as his talk was over. Sadly I did not get a chance to ask him what he thinks of the president suggesting that he should be imprisoned.
I suppose I am duty-bound to retweet this.
