Today, U.S. Senators Amy Klobuchar (D-MN) and Ted Cruz (R-TX) announced that their bipartisan TAKE IT DOWN Act passed the House and is headed to the President’s desk to be signed into law. Representatives Maria Elvira Salazar (R-FL) and Madeleine Dean (D-PA) led the companion legislation that passed today.
The bill unanimously passed the Senate in February, and it includes the Klobuchar and Senator John Cornyn’s (R-TX) Stopping Harmful Image Exploitation and Limiting Distribution (SHIELD) Act, which addresses the online exploitation of explicit, private images and passed the Senate last July.
The TAKE IT DOWN Act would criminalize the publication of non-consensual intimate imagery (NCII), including AI-generated NCII, and require social media and similar websites to have in place procedures to remove such content within 48 hours of notice from a victim.
Category Archives: Security
Digital Footprint: Who knows what about you online – and how can you manage that.
I ran across an article a week ago entitled, What Does DOGE Know About You?. It includes a quiz; it’s interesting to check it out. If you answer a few broad questions, it will tell you what DOGE is likely to know about you. The article reminded me of a TED Talk I saw in Edinburgh in 2012 about how your phone company is watching from Malte Spitz. He sued his phone company to get the data they had on him and his interactions based on cell phone use. He created visual tools to help the audience understand not only how much data this was, but what it meant when you tracked interactions among users in aggregate in terms of what was happening in a community.
In 2022, PC Mag published an article on how much data social media and tech companies gather on users. (They used research from Security Baron, a privacy company, which I think is worth mentioning. You always want to know who paid for and wrote the report.) I like the article for our purposes now because the results are shared in an easy graphic. (At right.) As you read through the explanations, you get a feel for what these companies know. (Click to get a larger version of the image.)
What is a Digital Footprint?
All these interactions, purchases, clicks, pings from your phone to the cell tower, are things that make up your digital footprint. I think it’s important to recognize that you leave a footprint wherever you go. Important to share with your young people around you. And just like footprints in real life, they are helpful and hurtful. Footprints can help you find your way back to the cabin on a snowy day, but it means people can use them to find you. Even being found is a double edge sword. The more you know about it, the more you can make your digital footprint a positive.
How can I manage my Digital Footprint?
The Internet Society is an international nonprofit focused on empowering people to keep the Internet a force for good. They have a Top 10 list for ways to manage your digital footprint, followed by a link to videos for more information.
- Get a better understanding of the issues.
There’s a lot of information about privacy to take in. Think about the implications of what you’re sharing when you sign up for new services, or install new apps. - Develop your ‘basic hygiene” habits.
Privacy is about context. If you use one email address for home and another for work, or one credit card for online shopping and another for everything else – it will help keep different parts of your digital footprint separate.
Be mindful about what you share via social sites and elsewhere, because every selfie, retweet, or like is probably more public, and more persistent than you think. - Become a sophisticated user of your online tools and services.
Browsers, devices and apps are often set to share your personal data out of the box. Take a look at the privacy settings and see if you’re comfortable with what the default settings are.
When an application asks for “permission to send you push notifications and use your location data”, think about if that’s really what you want. Your camera and smartphone usually record your time and location in each photo you take, and when you share those photos, you could be sharing that data. - Find and use specific online privacy tools.
There are many helpful online privacy tools. Use them to protect your online privacy, and to keep track of what information you’re sharing as you surf. - Manage cookies.
Check what settings your browser(s) have for cookies; find your browser’s “cookie store” and spend some time looking through it. Notice how many of the cookies in there have been set by sites you weren’t even aware of visiting… and then see whether your browser allows you to block third-party cookies. Some browsers offer this as an easy option, but there are also a lot of plug-ins you can use to help control tracking cookies. - Check your privacy settings
Erasing cookies only goes so far. You should also know your rights when it comes to information that you share on websites, especially open services such as social networks, blogs, and photo sharing sites. It’s a lot easier to prevent your data from being shared than it is trying to remove it from an advertiser database later. Check what permissions apply to content you upload. - Understand the realities of sharing your stuff.
When you post something on the internet, it’s out there forever. Deleting online content often only removes it from public view, it can be stored in archives and databases forever. Even deleting your account isn’t a guarantee that your content will be deleted. It may still be accessible through other means - Think about the trade-off between convenience and privacy.
OK, one is instant gratification and the other is a long-term intangible… but the choice is still up to you. Maybe a little inconvenience is worth it, to regain some control over your digital footprint. - Understand the “bargain” you make with online service providers.
“Free” doesn’t mean “free”: it usually means you pay through the monetization of data about you. “Freemium” doesn’t mean your data isn’t monetized: it usually means you don’t see advertisements in that service, app or game. - “There is no app for this”.
That’s the bottom line. We can inform you and suggest some privacy tools, but the reality is that there’s no one-click answer: in the long term, the best way to improve your privacy is to change your online habits. We’re here to help, but you hold the key.
Want to know more? Watch our got tutorials on managing your digital footprint.
7 communications-related bills getting attention in US House now
The Benton Institute for Broadband & Society report…
On March 4, the House of Representatives’ Commerce Committee, chaired by Rep. Brett Guthrie (R-KY), held a full committee markup to consider twelve bills in total––the committee’s first legislative markup of the 119th Congress.
“This Committee has a rich, bipartisan history, which we will continue in that spirit with the bills we are considering today,” said Rep Guthrie in his opening remarks. “Each of these bipartisan pieces of legislation was passed by the House last Congress, and I am proud that we will be moving these forward again today.”
Here, we look at the seven communications-related bills that are now teed up for a vote from the full House.
I am just going to include the list – the original article offer more detail…
- Precision Agriculture Satellite Connectivity Act
- Institute for Telecommunication Sciences (ITS) Codification Act
- NTIA Policy and Cybersecurity Coordination Act
- Promoting United States Wireless Leadership Act of 2025
- Trans-Atlantic Submarine Fiber Optic Cable
- Understanding Cybersecurity of Mobile Networks Act
- Critical Infrastructure Manufacturing Feasibility Act
MN House looking at cybersecurity support cities and towns for $20 million
A bill moving through the Minnesota House looks to help local communities bolster their cybersecurity through a new grant program.
Graham Berg-Moberg is with the Minnesota Association of Townships….
“We are collecting things like W2s, W4s, Social Security numbers. We do not have a whole lot of infrastructure in place presently to protect that sort of thing given the way the world is working, the increased pressure of online only reporting systems, we would expect more townships to become vulnerable to cyber security over time.”
The program would draw $20 million from the state’s General Fund. The bill was laid over for inclusion in a possible omnibus bill.
MN HF140 (Cyber security support for cities, towns and townships) is laid over
Today the MN House Committee State Government Finance and Policy discussed MN HF140 (Cyber security support for cities, towns and townships). The bill was laid over.
HF140(Bahner)
State-funded county and city cybersecurity grant program established, report required, and money appropriated.
Representative Bahner:
- Amendment A1: tech changes to conform with Senate and adding townships with population of 5000.
Passed. - Cyber incidents are on the rise especially with AI
- We need to be vigilant – MNIT does a great job
- Smaller cities and towns do not have staff or expertise that MNIT has and they need to upgrade
- It matters to everyone because the networks interact with bigger networks. We’re only as strong as our weakest link
Daniel Lightfoot (MN League of Cities)
- This is a critical need – this bill would help. We are a small city state but they manage a wide range of public works.
- They are a target for ransomware
- 702 cities don’t’ have dedicated IT staff; average staff size is 7 TFE but some have only one
- We provide insurance
Graham Momberg (Townships)
- We support the need for cyber security
- We don’t manage as much as cities but we do manage some
- 1185 towns collect personal data and we don’t always have the expertise to manage it
- We know this is a budget compromise year – but we’re glad to see some towns are included
Questions
Q: Does Eligible city, township and town with population over 5000 means each has to population over 5000 or only the township?
It targets only townships.
Bill introduced in MN House HF1606: prohibiting access to nudification technology
Stephenson introduced:
H. F. 1606, A bill for an act relating to commerce; prohibiting access to nudification technology; proposing coding for new law in Minnesota Statutes, chapter 325E.
The bill was read for the first time and referred to the Committee on Commerce Finance and Policy.
I am unlikely to follow this closely, but I wanted to make folks aware as I see this as a digital awareness and security issue. The bill as introduced…
A bill for an act
relating to commerce; prohibiting access to nudification technology; proposing
coding for new law in Minnesota Statutes, chapter 325E.BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:
Section 1.
[325E.91] PROHIBITION ON NUDIFICATION TECHNOLOGY.
Subdivision 1.
Definitions.
(a) For the purposes of this section, the following terms have
the meanings given.(b) “Intimate part” has the meaning given in section 604.32, subdivision 1, paragraph
(d).(c) “Nudify” means the process by which:
(1) an image or video is altered to reveal an intimate part not depicted in the original
unaltered image or video; or(2) the depiction is so realistic that a reasonable person would believe the depiction
reveals an intimate part of an identifiable individual.Subd. 2.
Nudification prohibited.
A person who owns or controls a website, application,
software, or program must not allow a user to access, download, or use the website to nudify
an image or video.Subd. 3.
Civil action; damages.
An individual injured by a violation of this section may
bring an action for:(1) compensatory damages, including mental anguish or suffering, in an amount up to
three times the actual damages sustained;(2) punitive damages;
(3) injunctive relief;
(4) reasonable attorney fees, costs, and disbursements; and
(5) other relief the court deems just and equitable.
Subd. 4.
Penalties.
The attorney general may enforce this section under section 8.31.
In addition to other remedies or penalties, a person that violates this section is subject to a
civil penalty of not less than $500,000 for each unlawful access, download, or use under
subdivision 2.EFFECTIVE DATE.
This section is effective August 1, 2025, and applies to causes
of action accruing on or after that date.
EVENT Feb 20: Seante Committee meeting on (SF379) cyber security and (SF608) data centers
A meeting happening tomorrow (Feb 20) with two topics of potential interest…
Committee on State and Local Government
Chair: Sen. Tou Xiong
12:30 p.m.
Room 1200 Minnesota Senate Bldg.*Agenda items may be added or removed. Please submit documents to mikayla.mtanous@mnsenate.gov by Wednesday, February 19, 2025 at 12:00pm. Late submissions may not be posted in advance of the hearing or included in prepared materials for committee members. TESTIMONY: Testimony is limited. The number of testifiers and length of time permitted is at the discretion of the chair and is subject to change. Please plan accordingly. If you would like to testify, please email the Committee Administrator, mikayla.mtanous@mnsenate.gov by Monday, February 19, 2025 at 12:00pm. Requests for Zoom testimony must be made at least 24 hours in advance. Include the bill number, your name, title and/or organization where applicable, and whether your testimony will be in support of or opposition to the bill. WRITTEN TESTIMONY AND HANDOUTS: Written testimony is encouraged. To submit written testimony or hand-outs, email Committee Administrator, mikayla.mtanous@mnsenate.gov by Monday, February 19, 2025 at 12:00pm. Please email the submission in following pdf format: yearmonthday_bill number_organization_testimony-or-handout Example: 20250329_SF2373_MinnesotaOrganizationName_Testimony
Agenda:
Call to Order
S.F. 379-Wiklund/Wiklund: State-funded county and city cybersecurity grant program establishment.
S.F. 483-Rasmusson/Rasmusson: Motor vehicle loss of consciousness of voluntary control provisions modifications.
S.F. 608-Lieske: Data centers in certain districts prohibition provision.
FCC announces Cybersecurity Pilot Program Participants including 12 in MN
The FCC reports…
The Federal Communications Commission today selected 707 participants for the FCC’s Schools and Libraries Cybersecurity Pilot Program, including 645 schools and districts, 50 libraries, and 12 consortia. Participants in the three-year pilot program will receive support to defray the costs of eligible cybersecurity services and equipment and provide the Commission with data to better understand whether and how universal service funds could be used to improve school and library defenses against increasing cyberattacks. All 50 states, in addition to Puerto Rico and the District of Columbia, and several Tribal lands are reflected by the Pilot participants announced today. …
The Cybersecurity Pilot Program is part of Chairwoman Rosenworcel’s Learn Without Limits initiative to address the Homework Gap by ensuring connectivity to and within schools and libraries. This initiative includes Wi-Fi on school buses, the Wi-Fi hotspot lending program, and E-Rate support for libraries in Tribal communities.
Here are the participants in Minnesota…
| CHRIST HOUSEHOLD OF FAITH SCH | School | MN |
| ST PAUL PUBLIC LIBRARY | Library System | MN |
| SAINT PAUL PUBLIC SCHOOL DISTRICT 625 | School District | MN |
| RED LAKE SCHOOL DISTRICT 38 | School District | MN |
| HMONG COLLEGE PREP ACADEMY 4103-07 | School | MN |
| SOUTHERN PLAINS EDUCATION COOPERATIVE | School District | MN |
| COMMUNITY SCHOOL OF EXCELLENCE 4181-07 | School | MN |
| TRI-COUNTY COMMUNITY ACTION INC. | School District | MN |
| THE BEST ACADEMY | School | MN |
| NEW CENTURY SCHOOL 4240-07 | School | MN |
| BDOTE LEARNING CENTER 4226-07 | School | MN |
| Bultum Academy | School | MN |
OPPORTUNITY: Minnesota Cybersecurity Task Force 2024 seat open
An opportunity from the Secretary of State several seats open on the Cybersecurity Task Force …
Membership
The Task Force membership shall meet, at minimum, the requirements of cybersecurity planning committee as defined in Public Law 117-58, Sec. 70612.
Membership requirements are based on and conform to Public Law 117-58. In summary, membership shall consist of the following:
- The Chief Information Officer (CIO), the Chief Information Security Officer (CISO), or equivalent official of the eligible entity;
- If the eligible entity is a state (including territories), then representatives from counties, cities, and towns within the jurisdiction of the eligible entity;
- Institutions of public education and health within the jurisdiction of the eligible entity; and
- As appropriate, representatives of rural, suburban, and high-population jurisdictions.
At least one half of the representatives of the Cybersecurity Planning Committee must have professional experience relating to cybersecurity or information technology.
NTIA awards $60.6 Million in Digital Equity Capacity Grant (North Dakota gets $4.5M)
It’s not Minnesota, but during the holiday season we can celebrate with our neighbors to the west. The National Telecommunications and Infromation Administration reports…
The Department of Commerce’s National Telecommunications and Information Administration (NTIA) today has approved and recommended for award applications from Arizona, Arkansas, Colorado, Maryland, North Dakota, American Samoa, and the U.S. Virgin Islands, allowing them to request access to more than $60.6 million to implement their Digital Equity Plans.
Here’s what’s happening in North Dakota…
North Dakota will use $4,549,772 in funding to implement key digital equity initiatives, including:
-
Providing funding to state agencies to expand and/or adjusting existing digital equity programs and resources; and
-
Convening Internet service providers to establish objectives for a cybersecurity certification program, then identifying a subrecipient to finalize development of the certification program.
The National Defense Authorization Act (NDAA) set to connect barracks-type housing to broadband
The Benton Institute for Broadband & Society reports…
This week, Congress passed the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, this year’s version of the National Defense Authorization Act (NDAA). The law authorizes $895.2 billion for Department of Defense programs, defense-related activities, and national security programs in the Department of Energy and the Defense Nuclear Facilities Safety Board. Included in the law are provisions to rural telecommunications networks more secure and internet access service affordable for members of the armed service while addressing issues around artificial intelligence and cybersecurity.
This includes…
Free Internet Access for Members of the Armed Forces
The Servicemember Quality of Life Improvement and National Defense Authorization Act amends existing law to allow military departments to provide members of the armed services that reside in “military unaccompanied housing” (think a barracks or a dormitory not suitable for a dependant).
Within three months, the Secretary of Defense will issue a guidance to implement this new policy, ensuring that service members have reasonable access to 100/20 Megabits per second (Mbps) broadband internet access service that maximizes access to individual rooms and spaces with appropriate restrictions.
Internet access can play a vital role in service members’ lives including distance education for professional military education.
Ookla track biggest tech outages Q1-3 2024
Our reliance on technology is so total that for many it feels like the world is ending when a popular site or service on the internet is inaccessible, and 2024 saw many outages that reminded us how much one such interruption can disrupt the daily lives of millions. We analyzed Downdetector® data from Q1-Q3 2024 to see where that pain of disconnection was felt most acutely. Read on to revisit the largest outages of 2024 at a global level and sorted by region.
Note that while some companies experienced more than one large outage during this time period, we’ve listed only the largest incident per company in each chart.

More info on the outages, and some help to remind you of them if you were impacted…
Users of social media sites, internet providers, and gaming sites and services suffered the most disruptions this year according to Downdetector data on the world’s biggest outages. Facebook had the largest outage on our list. On March 5, over 11.1 million people across the world reported issues with the popular social media site.
The second largest global outage may be the most memorable. While CrowdStrike is not a service most people think of, we saw nearly 5 million reports to services that rely on it (or rely on Microsoft which relies on Crowdstrike), including emergency services, airlines, and ride sharing apps when a routine software update went bad on July 19.
AT&T suffered the third largest outage in the world, according to Downdetector data, when an equipment configuration error caused customers across the entire United States to lose network access for over 12 hours.
US Senate Committee secured $500M to preserve and expand the Regional Tech Hubs program
The US Senate Committee on Commerce, Science and Transportation reports…
U.S. Senator Maria Cantwell (D-Wash.), Chair of the Senate Commerce Committee and key architect of the CHIPS and Science Law, secured up to $500 million in federal investments to preserve and expand the Regional Tech Hubs program. She also secured just over $3 billion to ensure communities across the country can remove and replace Chinese-owned telecommunication equipment from U.S. networks. Together, these strategic investments will accelerate American technological innovation and create jobs, while strengthening national security and our global economic competitiveness. Sen. Cantwell secured the funding as part of the National Defense Authorization Act (NDAA), which is set to pass before the end of the year.
“Protecting both our infrastructure from foreign threats and maintaining our economic and military competitiveness is critical. Agreeing to keep U.S. innovation a high priority by investing in both Rip and Replace and Tech Hubs helps us do just that,” said Sen. Cantwell.
The Regional Technology and Innovation Hubs (Tech Hubs) program was established by the CHIPS and Science Law. While Congress authorized $12.9 billion for Tech Hubs over five years under the law, only 10 percent of authorized funding for the first two years has been appropriated. As a result, 19 of the 31 designated Tech Hubs remain without sufficient implementation funding. By securing up to $500 million, these hubs will have the opportunity to be awarded funds to implement the programs that the Department of Commerce has approved.
At the same time, our telecommunications networks—that we use daily for cell phones and internet—remain vulnerable to foreign threats. Right now, there are roughly 24,000 pieces of unsecure Chinese-made equipment in our networks across the country, with most located in rural communities or near military bases. Congress created the Secure and Trusted Communications Networks Reimbursement (Rip and Replace) program to help small telecom companies remove and replace this unsecured equipment, yet failed to approve enough funding.
For American households, without funding to “rip and replace” this equipment, many providers may be forced to cut off service to residents. And as many rural providers are often the sole providers in their region, local residents and any travelers through that area would be unable to contact 911 in case of an emergency, causing significant public safety issues. In Washington state, there are 63 sites across the state in urgent need of network replacement.
This just over $3 billion will put small providers back on track to securing their networks and preserving service to residents.
This includes 43 networks in Minnesota.

FCC Chairwoman Rosenworcel proposes requiring telecom carriers secure their networks
Following recent reports involving an intrusion by foreign actors into U.S. communications networks, FCC Chairwoman Jessica Rosenworcel proposed urgent action to safeguard the nation’s communications systems from real and present cybersecurity threats, including from state-sponsored cyber actors from the People’s Republic of China. The Chairwoman announced today that the Federal Communications Commission will act to ensure telecommunication companies are required to secure their networks.
“The cybersecurity of our nation’s communications critical infrastructure is essential to promoting national security, public safety, and economic security,” said Chairwoman Jessica Rosenworcel. “As technology continues to advance, so does the capabilities of adversaries, which means the U.S. must adapt and reinforce our defenses. While the Commission’s counterparts in the intelligence community are determining the scope and impact of the Salt Typhoon attack, we need to put in place a modern framework to help companies secure their networks and better prevent and respond to cyberattacks in the future.”
Chairwoman Rosenworcel has shared with her fellow commissioners a draft Declaratory Ruling finding that section 105 of Communications Assistance for Law Enforcement Act (“CALEA”) affirmatively requires telecommunications carriers to secure their networks from unlawful access or interception of communications. That action is accompanied by a proposal that would require communications service providers to submit an annual certification to the FCC attesting that they have created, updated, and implemented a cybersecurity risk management plan, which would strengthen communications from future cyberattacks.
If adopted, the Declaratory Ruling would take effect immediately. In addition, the draft Notice of Proposed Rulemaking would seek comment on cybersecurity risk management requirements for a wide range of communications providers. The proposal would also seek comment on additional ways to strengthen the cybersecurity posture of communications systems and services.
Last month, the Commission proposed cybersecurity risk management plan requirements for submarine cable landing applicants and licensees. In addition, the Commission previously proposed that participants in the Emergency Alert System and Wireless Emergency Alerts maintain cybersecurity risk management plans.
10 Steps to Help Build Broadband Resilience from Connect Humanity
One of the weird things I had to do for work a lifetime ago was create a disaster preparedness plan for the university library where I worked. I learned quickly that it was easiest to do the research and borrow heavily. Connect Humanity has made the easier for communities needing to create or deploy a broadband resiliency program. I have borrowed the recap of it from Benton Institute for Broadband & Society …
As communities across the Southeast US continue recovery efforts following the devastating hurricanes of late summer, one refrain stands out: connectivity is critical in disaster scenarios, and when the internet goes down, communities are cut off. Unfortunately, with climate-related risks increasing, many more communities are likely to face challenges in the coming decades. Resiliency in our local infrastructure—including broadband—is becoming ever more critical. Drawing from our partners and experts, these steps, ranging from immediate interventions to long-term strategies, can help communities respond now and prepare for the future by strengthening their broadband infrastructure.
- Conduct a Damage Assessment
- Prioritize Restoration of Critical Communication Points
- Identify and Leverage Federal and State Assistance
- Engage Residents and Community Groups
- Think Creatively During Infrastructure Repairs
- Prioritize Hardened, Weather-Resistant Infrastructure
- Create Redundant and Decentralized Networks
- Monitor and Strengthen Broadband Networks
- Implement Long-Term Digital Resilience
- Develop a Connectivity Plan