The Cyberwar comes for thee: telecommunications companies breached

You can taste the palpable salty feeling from the US Federal Government having to tell citizens they should use encrypted communications. After ages of fighting citizen’s right to private communications from the very beginning, it seems that desperate measures must be taken to prevent foreign adversaries from having access to sensitive information. This is a radical departure from the top-down message of “nothing to hide, nothing to fear.”

Telecommunications Breach

Since 2022, a hacking group presumably linked to the Chinese government categorized as “Salt Typhoon” have gained incredibly sensitive access to telecommunications infrastructure all over the world. This has recently escalated, to there being evidence of targeted spying on both 2024 presidential candidates.

What’s most troubling about this breach, is that it also included the “lawful access” backdoor wiretaps. So not only are everyone’s sensitive communications vulnerable in specific contexts, but also by anyone with the capabilities of leveraging Salt Typhoon’s intrusion. Currently, there is no announced timeline for this being addressed. There’s not a whole lot of reason to be optimistic. Last month, a Senate Judiciary Committee discussed just how logistically challenging it is to address this issue.

Never Let A Crisis Go To Waste

Naturally this kind of disaster is a great pretext for governments to push sweeping changes in impacted industries. At minimum, we can expect massive changes to be driven in cybersecurity, telecommunications, and hardware manufacturers. While many of these changes are long overdue, with security professionals rejoicing, others are not so benign.

This massive breach itself can be used as a rallying cry to consolidate control over digital products, companies, and even entire digital ecosystems. As the cyber security industry has advanced, the line between “cyber” and human problems becomes quite blurry. Serious concerns, like transnational repression can potentially be weaponized against subsets of the population. What’s more is that almost any aspect of what people currently take for granted as “digital freedom” can evaporate away as ’national security’ interests take priority.

I am not so naive to believe this is the long-overdue wake-up-call to governments that their citizen’s security matters. If anything, this is a rallying cry for control freaks to demand more top-down micromanagement of all things technological. Instead of working on strategies from the ground up to create a truly resilient and secure digital landscape, these concerns will be leveraged to seize even more control over the World Wide Web. We have the opportunity to push for a different direction, but time is vanishingly short.

Re-Introducing Civilian-based Cyber Defense

Originally, I introduced the idea in Good Governance in Cyberspace: Digital Freedom Policy Framework for Policies for the People. The idea is inspired by the idea of Civilian-Based Defense, which is a fascinating model for society-wide resilience and freedom. Bringing civilian-based defense to cyberspace is likely to be much more effective than any top-down approach and can radically transform our digital landscape for the better.

The Structural Basis of Freedom

When power is effectively diffused throughout the society among strong loci, the rulers’ power is most likely subjected to controls and limits, thus enabling the society to resist oppression, usurpation, and aggression. This condition is associated with political “freedom” When, on the other hand, such loci have been seriously weakened or their independence of action has been destroyed, when the subjects are all equally impotent and the society’s power has become highly centralized, then the rulers’ power will most like