Security Notes Of The Week, Part 2

Via SANS (from about 10 days ago), a GAO report is being used to justify federal cybersecurity waste.  This is one of the main problems in government regulation:  if you are not extremely explicit and cover all scenarios, people will find ways of weaseling out of what you intended the legislation or regulation to be.…