#SaltTyphoon forces #FCC's hand on making #telecoms secure networks
Proposal pushes stricter #infosec after #China's state baddies expose vulns
Proposed draft Declaratory Ruling that puts a new interpretation on section 105 of Communications Assistance for Law Enforcement Act (CALEA) requiring telcos lock down their networks. FCC wants service providers to submit an annual certification they have created, updated, and implemented a #cybersecurity risk management plan.
https://www.theregister.com/2024/12/06/salt_typhoon_fcc_proposal/
Salt Typhoon forces FCC's hand on making telcos secure their networks

Proposal pushes stricter infosec safeguards after Chinese state baddies expose vulns

The Register

@BenjaminHCCarr when vendors push out sw developed using 70s sw development practices & heavily restrict security controls through contracts, try locking that shit down. Sure you can build a bottle around it but we've all seen how that doesn't really work in practice.

You think VPN appliances are bad, you ain't seen shit. I'd much rather see some serious gov pressure on the vendors and then push it down to telcos... maybe then we would actually improve the situation.