I have avoided writing about the Cybersecurity Information Sharing Act (CISA), largely because the details kept changing...
...the bill encourages companies to share personal information with the government, allows them to take some offensive measures against attackers (or innocents, if they get it wrong), waives privacy protections, and gives companies immunity from prosecution.
Information sharing is essential to good cybersecurity, and we need more of it. But CISA is a really a bad law.
