Citing a lack of federal investment, California governor Gavin Newsom stated “California can either wait for the next crisis, or we can build the kind of defenses this moment demands. We are choosing to build.”
In politically charged environments where unifying goals are not present, defensive postures become fragmented out of necessity. California, once again, takes a forward-looking leadership role to establish cybersecurity controls to protect its critical infrastructure and citizens. We have seen this in the past with protective privacy regulations, innovative investigation processes, and validated criminal procedures. AI is the next big mountain that will impact the security, safety, privacy, and trust of digital systems and information.
California will lead the way. There may be setbacks, but something is needed to push forward for the protection and benefits of digital innovation. California has the economy, talent, forethought, and grit to do what is needed and carve a path for other states to follow. Let’s fuel AI innovation for its great advantages while proactively managing the risks to acceptable levels.
Just because you have hacking skills and believe yourself to be a cybersecurity professional, you should not think you are entitled to use them at your discretion to cause harm or inconvenience to others.
Real cybersecurity PROFESSIONALS respect boundaries, exhibit discretion, and apply common sense. This incident may seem like a prank to those involved, but it is not. It undermines the trust and reputation of our industry and showcases poor collective judgement by those participating or encouraging others.
If this incident turns out to be true and DEF CON attendees did hack the on-board wi-fi with a de-authentication attack and gather passenger data, from Delta flight 591 from Las Vegas to Atlanta, then I believe that actions should be taken against those responsible.
I hope they are: - Prosecuted by the FAA - Banned for life from travelling on Delta - Placed on the US No-Fly list - Banned from all future DEF CON conferences - and their employers act in accordance to their policies for acceptable behaviors of their workers and security representatives
There are rare times that cybersecurity is required to act in extraordinary ways with measured actions, but such a pointless prank as this undermines the reputation of our community. We are here to act responsibly in the protection of our digital world or we represent the very enemy thereof.