There have been several reports in the past of how hackers in China have been hacking into the systems of US companies and stealing their data. So far not much can be done save for going after them legally, but sometimes that can be a long and drawn out process, and by then the information stolen could have easily been distributed.
So what else can be done besides increase security? Is revenge a possibility? Turns out that is an option that the US could be considering. According to a report from Associated Press, the U.S.-China Economic and Security Review Commission has suggested that maybe US-based companies should be allowed to “hack back” these hackers from China.
The idea behind this is that the companies can then recover their data or at least erase the data so that the hackers will not be able to use it or sell the information to others. Basically an eye-for-an-eye kind of deal, which we have to admit sounds like a good idea but a rather controversial one at that.
The report goes on to suggest that maybe a separate court should be created so that evidence can be heard from companies who got hacked, and so that a decision can be made as to whether this would warrant a counter-hack. According to Richard Bejtlich, chief security strategist at FireEye, the onus should fall to the US government.
Bejtlich says, “We need to get our hackers to go after their hackers to put pressure on them and disrupt their operations. We need to start with more government pressure, not put the private sector in that role.” Like we said it’s an interesting proposition, but we have to wonder if it could end up creating more problems than solving them, but what say you?