Almost exactly two years ago, "Five Eyes" intelligence agencies discovered a successful and ongoing cyber attack on critical US infrastructure by a state-sponsored actor based in China. This group, associated with the People's Liberation Army and known as Volt Typhoon, was tasked with quietly gaining persistent remote access to critical systems including water, power, communications, and transportation systems, as well as ports and government networks. The goal was to deter the US from interfering with a future invasion of Taiwan by China, either by crippling the US infrastructure or threatening to. Despite dire warnings from the four top cyber officials in a Jan 2024 Congressional hearing, the US is still woefully unprepared for such attacks. Josh Corman is leading an effort labeled UnDisruptable27 to greatly improve the resilience of our critical systems before 2027, the year China seems to be targeting to make their move.
Interview Notes
UnDisruptable27: https://securityandtechnology.org/undisruptable27/
Critical Effect conference (DC): http://critical-effect.org/
Congressional hearing, CCP cyber threat to national security: https://selectcommitteeontheccp.house.gov/committee-activity/hearings/hearing-notice-ccp-cyber-threat-american-homeland-and-national-security
Josh’s RSA talk (2024): https://www.youtube.com/watch?v=dhJvslRRlFc
UnDisruptable27 video 1: https://www.youtube.com/watch?v=GnozKc3gFsM
UnDisruptable27 video 2: https://www.youtube.com/watch?v=d8UsrMRvt14
Cyber Resilience Corps: https://cltc.berkeley.edu/program/cyber-resilience-corps/
Cyber Volunteer Resource Center: https://www.cisa.gov/audiences/high-risk-communities/cybervolunteerresourcecenter
Further Info
My book: https://fdsd.me/book
My newsletter: https://fdsd.me/newsletter
Support the mission: https://fdsd.me/support
Give the gift of privacy and security: https://fdsd.me/coupons
Recommend news stories: send to news [at] firewallsdontstopdragons.com
Send me your questions! https://fdsd.me/qna
Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch
Table of Contents
0:00:00: Intro
0:03:49: Lingo explanations
0:07:26: What is UnDisruptable27 and why did you start it?
0:16:47: How does this relate to China's intention to invade Taiwan?
0:22:00: What at the psychological impacts of this sort of attack?
0:25:31: How long might it take to recover from this sort of attacK?
0:33:12: If this threat is so dire, why aren't we scrambling to address it?
0:37:24: Do Russia, Iran and North Korea pose similar threats?
0:41:32: How can we surface single points of failure from secondary sources?
0:49:21: Can't we also do this to our adversaries? Is that a deterrence?
0:53:45: What should our government be doing about this?
0:58:39: How can we incentivze private companies to take action?
1:01:55: What can we do, at home and in our communities?
1:07:19: What's next for UnDisruptable27?
1:10:47: Some final thoughts
1:15:03: Patron bonus content
1:15:29: Looking ahead
Interview Notes
UnDisruptable27: https://securityandtechnology.org/undisruptable27/
Critical Effect conference (DC): http://critical-effect.org/
Congressional hearing, CCP cyber threat to national security: https://selectcommitteeontheccp.house.gov/committee-activity/hearings/hearing-notice-ccp-cyber-threat-american-homeland-and-national-security
Josh’s RSA talk (2024): https://www.youtube.com/watch?v=dhJvslRRlFc
UnDisruptable27 video 1: https://www.youtube.com/watch?v=GnozKc3gFsM
UnDisruptable27 video 2: https://www.youtube.com/watch?v=d8UsrMRvt14
Cyber Resilience Corps: https://cltc.berkeley.edu/program/cyber-resilience-corps/
Cyber Volunteer Resource Center: https://www.cisa.gov/audiences/high-risk-communities/cybervolunteerresourcecenter
Further Info
My book: https://fdsd.me/book
My newsletter: https://fdsd.me/newsletter
Support the mission: https://fdsd.me/support
Give the gift of privacy and security: https://fdsd.me/coupons
Recommend news stories: send to news [at] firewallsdontstopdragons.com
Send me your questions! https://fdsd.me/qna
Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch
Table of Contents
0:00:00: Intro
0:03:49: Lingo explanations
0:07:26: What is UnDisruptable27 and why did you start it?
0:16:47: How does this relate to China's intention to invade Taiwan?
0:22:00: What at the psychological impacts of this sort of attack?
0:25:31: How long might it take to recover from this sort of attacK?
0:33:12: If this threat is so dire, why aren't we scrambling to address it?
0:37:24: Do Russia, Iran and North Korea pose similar threats?
0:41:32: How can we surface single points of failure from secondary sources?
0:49:21: Can't we also do this to our adversaries? Is that a deterrence?
0:53:45: What should our government be doing about this?
0:58:39: How can we incentivze private companies to take action?
1:01:55: What can we do, at home and in our communities?
1:07:19: What's next for UnDisruptable27?
1:10:47: Some final thoughts
1:15:03: Patron bonus content
1:15:29: Looking ahead
Activity