Nov 13, 2018

U.S. hasn't signed cyber principles — yet

French President Emmanuel Macron appears with President Trump before a lunch at the Elysee Palace in Paris on Nov. 11. Photo: Jacques Demarthon/AFP via Getty Images

The United States has not signed the Paris Call for Trust and Security in Cyberspace, a pact between 51 countries and hundreds of the important companies in tech, nonprofits and universities. At least, not yet.

The big picture: Signatories tell Axios that the U.S. hasn't shut the door on the agreement of general principles for internet security. The agreement, a first-of-its-kind document involving both the public and private sector, could be a significant step toward a global understanding of what countries are and aren't permitted to do online — but that's likely only if the U.S. lends its heft.

What they're saying: "It is a missed opportunity for the U.S., especially because the agreement is nonbinding," Peter Singer, a strategist and senior fellow at the New America Foundation, told Codebook via email.

The Paris Call is a handshake establishing principles, including:

  • Human rights should extend to online spaces.
  • Countries should work together to prevent the theft of intellectual property (as China is accused of doing), election tampering (as Russia is accused of orchestrating) and destabilizing the core of the internet (as China may have done through BGP hijacking).
  • Countries should never release malware causing indiscriminate harm to the public (as Russia and North Korea are accused of doing with NotPetya and WannaCry).
  • The private sector will not risk collateral damage by "hacking back" their hackers.

Other odds and ends: It also stipulates:

  • Disclosure programs and other basic cybersecurity measures are generally good.
  • The private sector must play a role in comprehensive security plans.

Who didn't sign: The U.S. is not the only nation that didn't sign the Paris Call. But many of the other nonsignatories skew in an unflattering direction: They include North Korea, Russia, Iran and China.

  • 3 out of 5 of the nations in the powerful Five Eyes alliance signed the accord. (The U.K., Canada and New Zealand did. The U.S. and Australia did not.) Israel didn't sign, either.

The intrigue: The United States appears to have two motivations not to sign.

1. Trump hates these things. President Trump likes deals, not agreements. He likes bilateral, transactional things where he feels like the U.S. comes out ahead. This is more of a zero-sum affair, where everyone in the world benefits because everyone gives something up.

  • "The problem is that so many threats to U.S. security simply can't be solved in that way. Whether it is cybersecurity or environmental or nuclear nonproliferation issues, they are multilateral and multilayered," said Singer.

2. Big dogs don't like fences. And nearly all the major cyber powers (U.S., North Korea, China, Iran, Russia and Israel) stayed out of the agreement, likely hesitant to place even nonbinding restrictions on how they act. One exception is the United Kingdom, who signed the agreement.

  • "While the goal of the Call is laudable, and the list of industry signatories in particular is impressive, without the U.S. and other offensive-minded states as signatories, it feels a bit like the players on the sidelines telling the ones in the game to stop playing," said Betsy Cooper, a one-time attorney and adviser at the Department of Homeland Security who was just named director of the new Aspen Tech Policy Hub.

Go deeper

Coronavirus dashboard

Illustration: Aïda Amer/Axios

  1. Global: Total confirmed cases as of 10:30 a.m. ET: 5,618,829 — Total deaths: 351,146 — Total recoveries — 2,311,404Map.
  2. U.S.: Total confirmed cases as of 10:30 a.m. ET: 1,681,793 — Total deaths: 98,933 — Total recoveries: 384,902 — Total tested: 14,907,041Map.
  3. Public health: Fauci says data is “really quite evident” against hydroxychloroquine for coronavirus — Nearly half of Americans say someone in their household has delayed medical care.
  4. Tech: Zipline drones deliver masks to hospitals; vaccines could be next
  5. Business: The downsides of remote work could diminish recent gains — PPP failed to get money to industries and areas most in need.
  6. 🏒Sports: NHL unveils 24-team playoff plan to return from hiatus.
  7. What should I do? When you can be around others after contracting the coronavirus — Traveling, asthma, dishes, disinfectants and being contagiousMasks, lending books and self-isolatingExercise, laundry, what counts as soap — Pets, moving and personal healthAnswers about the virus from Axios expertsWhat to know about social distancingHow to minimize your risk.
  8. Other resources: CDC on how to avoid the virus, what to do if you get it, the right mask to wear.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.

Updated 53 mins ago - Politics & Policy

Fauci: Data is "really quite evident" against hydroxychloroquine for coronavirus

Anthony Fauci told CNN Wednesday that the scientific data "is really quite evident now about the lack of efficacy" of hydroxychloroquine as a coronavirus treatment.

Driving the news: The comments came in response to news that France on Wednesday banned the use of hydroxychloroquine to treat the virus, after a large retrospective study in The Lancet found an increased risk of heart problems and death among coronavirus patients who took the anti-malarial drug.

Trump has turned Big Tech's speech rules into a political football

Illustration: Lazaro Gamio/Axios

Twitter made headlines Tuesday after labeling two election-related tweets from President Trump as potentially misleading — the company’s first action against the president’s tweets, which often test its policies on misinformation and abuse.

The big picture: Twitter's unprecedented move, which swiftly drew Trump's fury, was just one of four controversies over the last 24 hours involving tech platforms grappling with free speech issues. And all of them, Axios' Sara Fischer and I report, reflect what a partisan issue the policing of social media content has become.