SecurityWeek published a piece on a new domain blocking service. It’s a partnership between government agencies and the private sector.
The service MDBR seeks to block and report malicious domains, blocking connections to domain names deemed harmful.
From the article:
A new Malicious Domain Blocking and Reporting (MDBR) service will help organizations improve security by preventing IT systems from connecting to malicious domains.
Launched through a partnership between the U.S. Department of Homeland Security’s Cybersecurity Infrastructure Security Agency (CISA), Center for Internet Security (CIS), and Akamai Technologies, the MDBR service adds another layer of Domain Name System (DNS) security to help organizations protect applications.
Expected to improve the security of U.S. state, local, tribal, and territorial (SLTT) government organizations, the fully managed proactive domain security service will be free for members CIS Multi-State Information Sharing and Analysis Center (MS-ISAC) and Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC).
Read the full story on SecurityWeek.com
Charles says
So elections organizations will be empowered to influence access to domain names through a 3rd party system with no accountability. This would be an expression of the so called “trusted notifier” concept, where yet another unaccountable party decides who may be a “trusted notifier”, and thus influence access to yet another parties website. So if a competitor manages to gain status as a trusted notifier they may now exert control overt their competitors website(s).
In an election it is even more nefarious since their is a critical window of time that decisions are made, lack of access to content can be hugely influential. Its an electronic version of stealing someones election signs, except in this case you can’t be held accountable in any way.
https://learn.cisecurity.org/ei-isac-registration
“Individuals who do not support the Elections Critical Infrastructure of the United States but are employees of any other public non-federal entity are eligible and strongly encouraged to take full advantage of the services and benefits offered through the Multi-State Information Sharing Analysis Center by enrolling here.
Employees of for-profit companies or non-profits, consultants, or private citizens that are unaffiliated with an eligible entity are strongly encouraged to take advantage of our free advisories on known vulnerabilities, national webcasts, and end-user focused cybersecurity newsletters by enrolling here.”
John says
Indeed, sounds like another probable prescription and license for CENSORSHIP and SUPPRESSION.
But since you’re so “establishment oriented”yourself that’s okay, ay Elliot? 😉
John says
Oops – Looks like I accidentally thought this was Elliot’s place, Raymond. Would have commented a bit differently otherwise. 🙂