[Chapter-delegates] Wannacrypt and Digital Geneva Convention: should ISOC take a position?

[Richard Hill]

I presume that people on this list know that Microsoft is calling for a
Digital Geneva Convention, in which states would agree not to conduct
cyber-attacks against civilians, see:

 
https://blogs.microsoft.com/on-the-issues/2017/02/14/need-digital-geneva-con
vention/#sm.00017arazqit2faipqq2lyngzmxx4  

According to Microsoft, the WannaCrypt/WannaCry attack reinforces the need
for such a Convention, particularly in light of the fact that that attack
used an exploit (software defect) that the NSA knew about and did not
disclose right away. NSA lost control of some of its exploits, including
that one, and it was published, which made it easier for criminals to use
it.

Here is Microsoft's statement:

 
https://blogs.microsoft.com/on-the-issues/2017/05/14/need-urgent-collective-
action-keep-people-safe-online-lessons-last-weeks-cyberattack/#sm.00017arazq
it2faipqq2lyngzmxx4 

Information on the WannaCrypt attack is at:

  https://en.wikipedia.org/wiki/WannaCry_ransomware_attack   

Should ISOC consider issuing a statement of support for Microsoft's call for
action?

Best,
Richard