Wassenaar Arrangement Implementation (updated)
The Latest (08.01.2015) – Proposed Rules Pulled for Rewrite:
Pardon the “Intrusion” – Cybersecurity Worries Scuttle Wassenaar Changes – Lexology
Unusual Re-do of US Wassenaar Rules Applauded – Kaspersky Lab Threat Post
The US is Rewriting its Controversial Zero-day Export Policy – The Verge
Proposed Implementation:
Bureau of Industry and Standards’ Wassenaar Arrangement 2013 Plenary Agreements Implementation: Intrusion and Surveillance Items (pdf; 49 pages)
BIS FAQs on the Intrusion and Surveillance Items Implementation
Background:
Wassenaar Arrangement – Wikipedia
The International Rules that Have the Security World on Alert – The Verge
Analysis and Opinion:
Why an Arms Control Pact has Security Experts Up in Arms – Kim Zetter in Wired
Proposed U.S. Export Controls: Implications for Zero-Day Vulnerabilities and Exploits – Mailyn Fidler at LawFare
Changes to Export Control Arrangement Apply to Computer Exploits and More – Jennifer Granick and Mailyn Fidler at JustSecurity
What Is the U.S. Doing About Wassenaar, and Why Do We Need to Fight It? – EFF
Also from the EFF: Commerce Department FAQ on Proposed Wassenaar Implementation Gives Answers, Raises More Questions
Why Changes to Wassenaar Make Oppression and Surveillance Easier, Not Harder – ADD/XOR/ROL blog
Why You Should Fear the New Regulations More Than You Think – Dave Aitel
Related:
Regulating the Zero-Day Vulnerability Trade: A Preliminary Analysis (pdf; 78 pages) – academic paper by Mailyn Fidler forthcoming in “I/S: A Journal of Law and Policy for the Information Society”