Thread by @doctorow

At #disruptedtimes22, @MarietjeSchaake says we CAN regulate tech to serve democracy and the rule of law - 'yes yes yes yes'

Points out that hacking for hire isn't a Big Tech problem - NSO Group and other cyber arms dealers are smes.

Russia isn't the first autocracy that @Nokia was caught selling surveillance tools to - they were chest deep in autocrats' attacks on the Arab Spring more than a decade ago (and they haven't cleaned up their act)

Biden: most critical digital infrastructure is in private hands.

EU relied on @citrix for authentication - they were breached

Natsec is an increasingly dominant lens through which governments think about tech: procurement, etc

Regulation and oversight are hampered by black box computing - without legibility, we can't understand systems well enough to oversee them

Now Luigi Zingales asks what we can do about @NSOgroup when they'll just relocate to a cybercrime haven like #lichtenstein.

I think we could just sanction them and size their assets