#579 Joshua Steinman on Preventing Ransomware Attacks In Future

— Joshua Steinman's background spans military intelligence (Navy, two Iraq tours), Defense Innovation Unit work bridging DoD and Silicon Valley, and National Security Council staff roles in cyber, supply chain, and telecom policy.

— The National Security Council functions as a coordinator of interagency decision-making, organizing meetings and drafting memos to help principals (cabinet members) reach consensus before presidential decisions on complex issues.

— A major shift is underway from centralized, narrative-driven institutions (credentialism, authority by title) toward decentralized systems where reputation and verifiable contributions (GitHub commits, Stack Overflow history) increasingly matter more than traditional credentials.

— Ransomware and industrial control system attacks are escalating, with adversaries targeting critical infrastructure (water treatment, pipelines, meat processing) rather than just corporate networks; the Tampa Bay water facility incident showed direct attempts to alter chemical parameters.

— Short-term defense against cyber attacks relies on basic hygiene—network segmentation, not connecting operational systems directly to the internet, regular updates—while long-term solutions involve continuous monitoring, anomaly detection, and machine learning to spot abnormal behavior in baseline operations.

— Bitcoin and cryptocurrency represent a natural outcome of decentralization trends; Steinman views them as inevitable responses to currency debasement and loss of institutional trust, with security innovations like on-chain bug bounties potentially transforming how software vulnerabilities are identified and rewarded.

— Cities and states may adopt Bitcoin on their balance sheets before the U.S. federal government does, creating a "laboratory of democracy" where jurisdictions compete on crypto-friendliness; watch for municipal treasuries testing this first rather than waiting for federal action.

— Organizations that publish clear, verifiable, immutable facts (especially cryptographically verifiable data) will win trust more effectively than those relying on authority or credentials alone; transparency about operations, supply chains, and decision-making becomes a competitive advantage.

— Industrial control systems remain critically vulnerable despite decades of warnings; audit whether your organization has properly segmented operational networks, controls physical access to critical equipment, and monitors baseline behavior for anomalies—basic hygiene prevents most attacks.