“Much of the work done … [during the Trump administration] was weakened by a president who didn’t prioritize cyber-issues and who, in many cases, actively undercut any actions or messaging against our adversaries,” said @C_Painter
Many experts slammed Trump for firing @C_C_Krebs “Krebs was one of those individuals that was widely trusted outside the government. His firing is likely to reduce the trust shown by the private sector to the government regarding cybersecurity,” said @MalwareJake
Others said there wasn't enough top-level attention to cyber. @CyAlliancePrez: “The general downgrading of the topic in its importance, allowing central coordination mechanisms to atrophy...and erratic coordination with allies all headed in the wrong direction."
.@k8em0: “This administration didn’t understand the importance of cohesion across key government components that make up America’s cyber-defenses.”
Others cited Trump's baseless attacks on the election and unwillingness to criticize Russia.
.@peterwsinger: “The cold hard fact is that, due to Trump, a significant part of the American body politic now believes a repeatedly proven false conspiracy theory. For years to come, it will haunt not just election security efforts, but our broader democracy,”
Even those who said the administration took cybersecurity in the right direction, praised agency leaders, not Trump. @Riana_Crypto: “The administration took the nation in the right direction, despite the weak leader at the very top.”
.@SpauldingSez: “The cyber-successes, such as working with state and local election officials on securing the election, do not appear to be attributable to strong leadership from the White House.”
.@stewartbaker was more full throated."The Trump administration has a good record on cybersecurity compared to its predecessors, turning CISA into a real cybersecurity agency with an effective role in protecting the 2020 election and imposing significant new sanctions on Russia.”
• • •
Missing some Tweet in this thread? You can try to
force a refresh
“While elections are sometimes messy this was a secure election, off that I have no doubt,” @C_C_Krebs says at #HSGAC hearing on the 2020 contest, which has otherwise mostly been a rehash of debunked fraud claims.
Krebs is going into great detail debunking a specific phony claim about Michigan voting machines -- “There is no permission to bracket-zero-bracket” -- demonstrating how complicated it can be to call BS and how easy it is for conspiracy theorists to ignore such explanations.
If one phrase goes viral from this hearing, I hope it's @C_C_Krebs's “there is no permission to bracket-zero-bracket." And, as @SenatorCarper would say "that's the straight skinny."
And it's official. This comes after a week of rumors Trump would fire @CISAKrebs -- essentially for not backing the president's baseless claims of election fraud. He's scheduled to speak publicly at two events tomorrow. We'll see how that goes.
FWIW, Krebs has made several statements affirming the election was free of significant cyberattacks and fraud. Here's the most recent - after rumors of his imminent sacking were already swirling.
Along with @CISAgov staff, he essentially built DHS's election security program from scratch since '16, helping state election officials dramatically improve their cyber defenses in a remarkably bipartisan way. D and R Dem Secstates respect him immensely.
2. It was aimed at a few dozen cyber and election security policy folks whose tweets I sometimes embed and who I also speak w/ frequently. Most of them have told me to f*** off in the comments (I hope/ think also humorously).
3.If you don’t know me and we’ve never spoken I’ve almost certainly never embedded any of your tweets. Prove me wrong and I’ll buy you a drink of your choice.
.@RonWyden exercising the nuclear (rhetoric) option in a new Medium post. "If Congress and states don’t act immediately, our country could face an electoral Chernobyl this fall." medium.com/@RonWyden/figh…
Here's the closer: "If Americans see a repeat of what happened in Georgia across the country, many will rightfully question whether the results — and by extension, the government itself — are truly legitimate."
FWIW, I think this post reflects a problem with talking about election security and cybersecurity generally. The rhetoric and analogies started so hot (cyber-9/11; cyber-Pearl Harbor) that it's tough to draw attention to something that's truly horrifying.
@TonyaJoRiley “There are no signs that any part of our institutions are capable of providing an election that is reasonably secure from tampering and manipulation,” -- @daveaitel
@TonyaJoRiley@daveaitel “Every part of the voting process is vulnerable. This includes the voter registration process, the voting itself, the vote tabulation, and the results-reporting system,” -- @schneierblog
Just in: Treasury Sanctions Iranian Cyber Actors for Malicious Cyber-Enabled Activities Targeting Hundreds of Universities:
Cyber sanctions vs. one Iranian entity and 10 Iranian nationals.
The entity is the Mabna Institute, which "conducted massive, coordinated cyber intrusions into computer systems belonging to at least approximately 144 United States-based universities, in addition to at least 176 universities located in 21 foreign countries"