[ganeumann]

It has nothing to do with speed. It has to do with ability to get it done.

When faced with clear wrongdoing and public disapproval, nothing happened. It took almost a full year of constant news, almost universal disapproval from people whose opinions matter, and the changing opinion of Congressional leaders before any concessions at all were proposed.

What that says to me is that there is a very unlikely conjunction of things that needs to happen before the infosec agencies can be held to account. That unlikely conjunction is probably so unlikely that it will not happen again for decades. Now may be the only chance we (meaning you, me, Congress, and the Executive) have to change practices for a long time. Given that the infosec agencies, no matter how much we roll their power back, will struggle to regain that power and more, we better roll them back at least a few decades worth while we have the chance.