2/ I'd say the joint statement on commercial #spyware is unprecedented.
A few years ago spyware like #Pegasus was was treated as a human rights issue.
But the dizzying speed of proliferation made big problems for governments, forcing them to prepare positions & action.
3/ The statement's commitment guardrails for accountable domestic #spyware use is important.
But devil will be in the implementations. Civil society will be watching.
(Note: issue wasn't covered in White House Spyware Executive Order on Monday, so nice to see USA commit here)
4/ Export control commitments on #Spyware. Again, important.
Worth noting, several signatories have a complex history on surveillance tech export...
So transparency about license granting & denials will be essential for accountability & to ensure commitment has teeth.
5/ Tracking & information sharing. Maybe public shaming? Norms? Again, important.
The mercenary #spyware industry has hidden from researchers & victims.
Let's hope it's harder for them to hide from governments.
6/ Commercial #spyware proliferation is now a global problem. Whether it's sold to autocrats, or to more 'democratic' governments in the EU... that wind up abusing it
But a key driver? Investment firms in the US & elsewhere. Good to see the joint statement speak to this.
8/ Spyware proliferation went too far & did too much harm.
Result? Governments are waking up & have started taking action.
But this is also a reminder of all the progress still needed on many fronts, like domestic accountability, oversight & transparency from every signatory.
9/ It remains puzzling to me as I read the joint statement on #Spyware that some EU countries are notably missing (where is #Germany?).
It also puts into stark relief that the EU Parliament's efforts on Spyware have a long way to go.
I hope there is some pressure to catch up!
β’ β’ β’
Missing some Tweet in this thread? You can try to
force a refresh
@SecMayorkas announced that @CISAgov will be developing a community protection program for orgs in the US that are targeted for digital repression by autocrats overseas.
Happy to see it.
This has been a huge gap. 1/
2/ So many human rights groups & others seek safety in the US from autocratic repression.
Yet tech has helped autocrats extend their reach across borders & export fear in to the US.
Meanwhile, these groups are chronically under resourced.
Defending themselves is hard.
3/ Even well-resourced companies have trouble when targeted with sophisticated hackers.
Think of how much harder it is for orgs that don't even have someone to fix the printer.
However bad you think the problem is... it's worse.
But @ArtemisSeaford's case may hard for them to get distance from: the message used to infect her may have been copied from a legit SMS scooped up by a traditional gov wiretap.