Forgot your password?
typodupeerror

Comment Re:Membership Open for Face-Eating Leopards Club (Score 1) 46

Ukraine can only use Starshield because of Musk; if he hadn't built the network, they wouldn't be doing nearly as well as they are. As a SpaceX shareholder, I'd rather not have the Starlink network be a legitimate military target at all, and Ukraine can destroy energy infrastructure without US help.

Comment A little background (Score 0, Troll) 56

Trump isn't doing this on his own; there are valid criticisms of these memos. Here's a quick writeup (thanks Claude):

Analysis of OMB Memoranda M-22-18 and M-23-16

Who's criticizing these memoranda?

Industry and vendor concerns (from the implementation period):

Suppliers and vendors faced variations in conformity assessment expectations from agency to agency, with each agency potentially taking different approaches to the self-attestations. The attestation requirements had to be obtained for every major version change, creating ongoing compliance burdens.

Officers of companies signing the attestation form faced potential criminal liability under 18 U.S.C. 1001 for willfully providing false or misleading information, which created significant legal exposure for vendors.

The Trump administration (January 2026):

OMB's January 2026 memorandum noted that M-22-18 imposed unproven and burdensome software accounting processes that prioritized compliance over genuine security investments and diverted agencies from developing tailored assurance requirements. This was the stated reason for rescinding the policy.

Implementation examples:

Successes:

USDA successfully implemented phishing-resistant authentication using FIDO capabilities for seasonal workers and lab employees who couldn't use PIV cards, leveraging their centralized ICAM architecture and "always be piloting" philosophy.

Challenges:

Timeline extensions were needed - M-23-16 in June 2023 extended deadlines because the final attestation form wasn't ready, and OMB representatives indicated they needed more time to standardize SBOM processes.

Hardware security keys cost $20-$50 per user plus licensing fees, creating budget challenges especially for small and medium-sized businesses, along with logistical challenges distributing keys to remote workforces.

Current status:

Important: Both M-22-18 and M-23-16 were rescinded in January 2026 through memorandum M-26-05, which adopted a risk-based approach instead of the universal attestation requirement. Agencies can now choose whether to use CISA's Common Form or develop their own approaches.

Conclusion:

These were technically sound policies with real security merit, but execution had legitimate friction - vendor burden, legal liability concerns, timeline slippage, and agency-by-agency variation. The rescission suggests the new administration viewed the compliance costs as outweighing benefits, though software supply chain security remains a stated priority.

Comment 50 years of stagnation (Score 1) 146

It's too bad so little progress has been made on nuclear energy plants in the last 50 years. We could have had cheap, clean energy, which would have been great to prevent global warming, especially as other countries industrialize. The protestors who were scared of the word nuclear got the US government to add so many regulations, and we're living in the future they created.

Slashdot Top Deals

UFOs are for real: the Air Force doesn't exist.

Working...