8 ms·

With coding agents now being used for hacking, there's a decent chance we'll see a 9/11-scale hacking incident as a result of NSA/DHS negligence in securing Ame

With coding agents now being used for hacking, there's a decent chance we'll see a 9/11-scale hacking incident as a result of NSA/DHS negligence in securing American internet-connected services. Similar to how the CIA's negligence allowed 9/11 itself. The USG should be deploying thousands of security engineers armed with the latest coding models and agents, in attempt to secure systems before they're hacked. A few billion dollars spent here could save us trillions.

bjt 1mo ago
Unlike the CIA and/or FBI being in charge of preventing attacks like 9/11, NSA and DHS aren't in charge of each state's or city's infrastructure. They could run some opt-in program that local governments could then engage with, but "negligence" is a bit strong for systems they're not in charge of and have no access to.
- tony69 1mo ago
  “Not in charge of” can agree “Have no access to” I have doubts
ungreased0675 1mo ago
https://www.nsa.gov/Cybersecurity/Cybersecurity-Advisories-Guidance/ https://www.nsa.gov/Cybersecurity/Cybersecurity-Advisories-G... While that’s not the job of the NSA, they do produce a lot of good cybersecurity guides.
- jacobgold 1mo ago
  NSA's job is SIGINT, so it's at least partly their responsibility when the threat is foreign. For example, the NSA should be successfully infiltrating every major foreign hacking team in the world and monitoring and/or disrupting their activities.
  - judge2020 1mo ago
    > the NSA should be successfully infiltrating every major foreign hacking team in the world and monitoring and/or disrupting their activities. I'm sure this exists, but I'd expect CIA to be more involved in any sort of covert operations across nation state lines, especially if undercover humans are involved.
pigbearpig 1mo ago
How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies. They should provide guidance, but I’m not sure we really want the NSA inside of networks more than they already are. If voters and CEOs don’t want to spend the money required to secure their infrastructure, that’s on them.
- judge2020 1mo ago
  > How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies. It is not a duty nor their responsibility. It is however bad for nation overall if companies don't dedicate some resources to security, so a sane administration will do something to advocate for it.
- vharuck 1mo ago
  DHS has the Cybersecurity & Infrastructure Security Agency. Their job is to help organizations in the US with protecting public services and physical infrastructure. They are partially responsible for the outcomes. https://www.cisa.gov/ https://www.cisa.gov/
  - ooterness 1mo ago
    CISA was one of the first agencies gutted by the DOGE purge. https://www.cbsnews.com/news/cybersecurity-agencys-top-recruits-doge-cuts/ https://www.cbsnews.com/news/cybersecurity-agencys-top-recru...
- hulitu 1mo ago
  > How is it NSA/DHS negligence? By mandating backdoors.

bjt 1mo ago

Unlike the CIA and/or FBI being in charge of preventing attacks like 9/11, NSA and DHS aren't in charge of each state's or city's infrastructure. They could run some opt-in program that local governments could then engage with, but "negligence" is a bit strong for systems they're not in charge of and have no access to.

tony69 1mo ago
“Not in charge of” can agree “Have no access to” I have doubts

ungreased0675 1mo ago

https://www.nsa.gov/Cybersecurity/Cybersecurity-Advisories-Guidance/ https://www.nsa.gov/Cybersecurity/Cybersecurity-Advisories-G... While that’s not the job of the NSA, they do produce a lot of good cybersecurity guides.

jacobgold 1mo ago
NSA's job is SIGINT, so it's at least partly their responsibility when the threat is foreign. For example, the NSA should be successfully infiltrating every major foreign hacking team in the world and monitoring and/or disrupting their activities.
- judge2020 1mo ago
  > the NSA should be successfully infiltrating every major foreign hacking team in the world and monitoring and/or disrupting their activities. I'm sure this exists, but I'd expect CIA to be more involved in any sort of covert operations across nation state lines, especially if undercover humans are involved.

pigbearpig 1mo ago

How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies. They should provide guidance, but I’m not sure we really want the NSA inside of networks more than they already are. If voters and CEOs don’t want to spend the money required to secure their infrastructure, that’s on them.

judge2020 1mo ago
> How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies. It is not a duty nor their responsibility. It is however bad for nation overall if companies don't dedicate some resources to security, so a sane administration will do something to advocate for it.
vharuck 1mo ago
DHS has the Cybersecurity & Infrastructure Security Agency. Their job is to help organizations in the US with protecting public services and physical infrastructure. They are partially responsible for the outcomes. https://www.cisa.gov/ https://www.cisa.gov/
- ooterness 1mo ago
  CISA was one of the first agencies gutted by the DOGE purge. https://www.cbsnews.com/news/cybersecurity-agencys-top-recruits-doge-cuts/ https://www.cbsnews.com/news/cybersecurity-agencys-top-recru...
hulitu 1mo ago
> How is it NSA/DHS negligence? By mandating backdoors.