The following podcast contains advertising.

To access an ad-free version of the LawFair podcast,

become a material supporter of LawFair at patreon.com slash law fair.

That's patreon.com slash law fair.

Also, check out LawFair's other podcast offerings,

rational security, chatter, law fair no bull, and the aftermath.

And what you see here is the administration starting to say that cyber espionage,

if it is of a type that impacts thousands of private sector organizations

and creates public safety concerns and requires private sector victims

to spend millions of dollars to mitigate, that is not legitimate state craft activity.

And what I would hope to see is that as we respond to more operations

from the Russian government or elsewhere, that that kind of norm be fleshed out

so that there is a better sense of what is acceptable state craft versus not.

I'm Benjamin Wittes and this is the LawFair podcast April 28, 2021.

The Biden administration has now responded to two major cyber attacks,

one from Russia, the SolarWinds attack, and the other from China,

the so-called Half-Ney on Microsoft Exchange Server attack.

In the last few weeks, LawFair has run really interesting articles on both of these incidents,

a lengthy piece from Demetri Alparavich, and a piece from Alex Iftomey,

former Justice Department official and a lawyer at Morrison and Foster.

They both joined me in the Jungle Studio to discuss the Biden administration's response to the attacks.

Were they appropriate, both in absolute terms and in relation to each other?

...