What Does This Say

…about Federal bureaucrats and their…managers? And no, I’m

not talking about a Deep State or an Administrative State.

The Biden administration on Wednesday issued a sweeping new order mandating that nearly all federal agencies patch hundreds of cybersecurity vulnerabilities that are considered major risks for damaging intrusions into government computer systems.

And

The new requirement is one of the most wide-reaching cybersecurity mandates ever imposed on the federal government. It covers about 200 known security flaws identified by cybersecurity professionals between 2017 and 2020 and an additional 90 discovered in 2021 alone that have generally been observed being used by malicious hackers. Those flaws were listed in a new federal catalog as carrying “significant risk to the federal enterprise.”

What does this say about the proactivity, the willingness to act on their own recognizance, of the bureaucrats running these agencies and of the bureaucrats responsible for IT in these agencies?

It gets worse.

A significant majority of the flaws being published on the DHS catalog are ones that weren’t covered under previous orders, a senior official said.

Where’s the initiative? The lack is as appalling as it is unacceptable. Waiting—needing—to be told what to do? Really?

These are people who Know Better and passive-aggressively obstruct actions and orders with which they personally disagree. They’re in the way and need to be terminated.

These are other people who are unable to make the office cultural change necessary. They’re also in the way and need to be terminated, albeit with more favorable rationales than that first category.

These are yet other people who’ve simply had their weak performance tolerated out of misguided efforts at being nice. They’re also in the way and need to be retrained—and terminated if the training doesn’t lead to improved performance.

But most of all, those office managers and IT honchos shouldn’t have had to be told to do this critical part of their jobs. They need to be replaced, and their replacements better vetted.

If cybersecurity officials at a certain agency fail to comply with a directive, DHS [for instance] can notify the agency’s senior leaders, who are then responsible for resolving the noncompliance.

This is entirely too slow. Those failing to perform need to be corrected promptly, and if necessary, terminated promptly.

Cybersecurity isn’t just a matter of national security. It’s a matter of national survival.

A Second Amendment Case

The Wall Street Journal‘s editors opined on the New York State Rifle and Pistol Association v Bruen, a gun rights vs gun control case currently before the Supreme Court. That case centers on whether New York State gets to allow or not allow a citizen of New York (and so a citizen of the United States) to carry a firearm outside his home based on a bureaucrat’s personal view of the “need” for the citizen to carry.

In the course of that piece, the Editors exposed their own misunderstanding.

Regular citizens in New York face an almost insuperable bar if they want to bear a firearm for personal defense.

There’s nothing in the 2nd Amendment that authorizes Government to specify any purpose, personal defense or other, for an American to keep and bear Arms:

A well regulated Militia, being necessary to the security of a free State, the right of the people to keep and bear Arms, shall not be infringed.

On top of that, the 9th and 10th Amendments bar Government from making one up.

The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.

And

The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.

(The courts already have made clear the relationship between this individual right and a Militia.)

Misleading—And Potential Fraud?

Getting an adverse reaction—of any sort—from an employer-mandated or -encouraged Wuhan Virus vaccination? The Biden-Harris OSHA doesn’t want to hear about it.

The Department of Labor’s pledge Monday to publish an “emergency temporary standard” on COVID vaccine mandates “in the coming days” threatens to worsen the skewed picture federal regulators have been getting from employers for five months.

29 CFR Part 1904 – RECORDING AND REPORTING OCCUPATIONAL INJURIES AND ILLNESSES, among other things as JtN puts it requires employers to “record and report work-related fatalities, injuries, and illnesses[.]” OSHA, though, is exempting employers from reporting Wuhan Virus-related adverse reactions.

And this:

[T]he exemption is a “welcome reprieve to employers” because their insurance could have jumped based on recordkeeping logs of adverse reactions to vaccines, which have “little to no correlation” with an unsafe workplace, [labor lawyer Keith Wilkes of Hall Estill] told Just the News.

Concealing health data from the company’s health insurer could amount to insurance fraud, depending on the terms of the employer-insurer contract. It also could impact negotiations over new or renewed employer-insurer contracts, and fraudulently so if those withheld data are material to the matter being negotiated.

To be sure, OSHA still encourages employees

to file complaints when they believe their employer has exposed them to COVID or is “not taking appropriate steps to protect you from exposure.”

Which, to a candid world, would seem a bit one-sided when the employers are being told by the same OSHA to shut up about adverse reactions.

But that’s the Biden-Harris administration for you.

The Cost of Aiding and Abetting

$590 million dollars. That’s the cost of aiding and abetting ransomware criminals in the first half of this year. That’s what so-called victims of ransomware attacks paid to their putative attackers to reward them for their crimes. Moreover,

The average cost of reported ransomware payments per month in the US in 2021 was $102.3 million. If the current trend continues, the number of SARs filed in 2021 “are projected to have a higher ransomware-related transaction value than SARs filed in the previous 10 years combined,” the Treasury projects.

(The average cost and the total cost differ by about 4%, but the point remains valid.)

Andrew Lipow, Lipow Oil Associates LLC CEO, is busy ducking responsibility—and he’s sadly typical:

The anonymity of a digital currency has allowed ransomware attacks to flourish. If you can’t follow the money today, regulators need to either ban the digital currencies or implement regulations that enable the identification of people and accounts involved in these transactions—just like they would do for a real bank.

Sure. Because criminals engaged in ransomware attacks can be counted on to obey currency laws. What a copout.

Aside from that, whether digital currencies need to be regulated is wholly irrelevant. What’s required is for businessmen to stop paying the ransom, stop rewarding criminals for their crimes, stop actively aiding and abetting criminals. They’re only making their companies willing repeat targets.

Beyond that, this is more than just money out of these companies’ coffers. It’s money out of other companies’ coffers, too, those that are downstream in the supply chain from the company that decides it’s fine to reward the criminals. They have to pay the higher prices the “victim” companies charge to cover their payoffs ransom payments.

It’s also money out of the coffers of other, otherwise unrelated, companies as they must bear the added security costs accruing from having also been made targets by those putative victims so amply rewarding the crimes and the criminals engaged in them.

It’s money out of us consumers’ pockets, too, in the form of increased prices we have to pay as those company executives just treat the “ransom” payments as a cost center, a cost of doing business.

Biden-Harris Deliberate Lawlessness

This time, it’s through zir’s Homeland Security Secretary, Alejandro Mayorkas. Under the latest bit of lawlessness, Mayorkas has ordered his department’s enforcement arms to ignore existing law and not go after illegal aliens in these locations:

  • Schools, including pre-schools, primary and secondary schools, vocational or trade schools, and colleges and universities
  • Medical or mental healthcare facilities, like hospitals, doctors’ offices, health clinics, vaccination or testing sites, urgent care centers, sites that serve pregnant individuals, or community health centers
  • Houses of worship or religious studies and places where children gather, like playgrounds, recreation centers, childcare centers, before- or after-school care centers, foster care facilities, group homes for children, or school bus stops
  • Social services establishments, like crisis centers, domestic violence shelters, victims’ services centers, child advocacy centers, supervised visitation centers, family justice centers, community-based organizations, facilities that serve the disabled, homeless shelters, drug or alcohol counseling and treatment facilities, or food banks or other establishments that distribute food or other essentials of life to people in need
  • Places where disaster or emergency response and relief are provided, including along evacuation routes, where shelter or emergency supplies, food, or water are being distributed, or registration for disaster-related assistance or family reunification is underway
  • Places where funerals or other religious or civil ceremonies or observances occur, as well as ongoing parades, demonstrations, or rallies

These areas are the new Progressive-Democrat sanctuaries, within which enforcing immigration law is…illegal.

This is on top of Mayorkas’ prior lawlessness:

The fact an individual is a removable noncitizen therefore should not alone be the basis of an enforcement action against them[.]

After all, just because someone is breaking the law, that’s no reason to go and arrest them. C’mon, man.