DAN VERTON▊
- OPERATION
- Computerworld security journalist; author, Black Ice: The Invisible Threat of Cyber-Terrorism (McGraw-Hill/Osborne, 2003) FACT
- THE CLAIM
- Cyber-terrorism is an "urgent national security matter" — his words, to the United States Senate FACT
- HABITAT
- The post-9/11 threat-assessment circuit: book tours, hearing rooms, the quotable-expert rolodex
- RECORD
- No charge, no docket, no credential-fraud finding — this file is a body of published criticism, not an adjudication
- STATUS
- PUNDIT CIRCUIT — per the research file
- DISPOSITION
- attrition.org Charlatan List: file opened, a dated index running 2000–2008, still online ATTRIBUTED
The specimen, observed 2003–2004 across book jackets and hearing rooms, forecast an invisible threat. The reviewers went looking for the threat. What they reported finding was the forecast.
What you are about to observe is a rarer specimen than the credential fabricator: the genuine journalist who found a warmer climate. No forged degree, no invented title, no indictment anywhere in this file. Instead, a display behavior the field calls threat inflation — and the fascinating question of where reporting ends and forecasting begins.
It is impossible for a normal functioning human to keep track of who predicted what, and when, and whether it ever arrived. That is why the archive exists. Every event below carries its receipt. Both sides get the microphone.
the drama timeline
ACT I — THE BEAT (BEFORE THE BOOK)
Every display begins with real plumage. Watch closely: the early feathers are genuine, which is what makes the later coloration so difficult for the casual observer to grade.
-
PRE-2003
The working journalist
Verton covers the security beat for Computerworld "for several years," per The Register. The Washington Post's reviewer calls him "as credible a digital Cassandra as you can get — he is a former intelligence officer," and credits his "superb investigative journalism" with forcing American Airlines to fix lax wireless security around its bag-checking systems.
-
JUN 2001
The index remembers the earlier position
Attrition.org's dated file carries an entry for June 25, 2001: "Not so long ago, Verton thought cyber-war was hyperbole." The watchdogs log the position before the pivot.
ACT II — BLACK ICE (2003)
The book arrives in the second summer after the towers, when the market for dread is at its historic peak. Observe the reviewers circling. They are not hostile. They are checking.
-
2003
The book ships
Black Ice: The Invisible Threat of Cyber-Terrorism, McGraw-Hill/Osborne, 312 pages. Its thesis, per the Post's summary: terrorists are developing "swarming attacks" — a physical strike intensified by a simultaneous cyber attack on hospitals, power, and phones.
-
AUG 2003
The Post checks for the smoking gun
Clive Thompson's Washington Post review grants the credentials, then reports the hole: "In the end, Verton never offers up a smoking gun." The al-Qaeda hackers are never met "via any first-hand reporting"; the author "rarely seems to leave his desk"; the government reports he relies on are "maddeningly hypothetical." Thompson's hedge is also on the record: "It's possible that Verton is simply wrong. But if he's right . . ."
-
2003
The Vmyths file grows
The watchdog index fills with dated entries: Vmyths' "Where's that 'megaworm' you warned us about, Dan?" (April), "'Iraq will destroy us by computer,' the experts screamed" (May), and attrition's own March item alleging he "pads resume, ignores team members" — the watchdogs' characterizations, on their file, never tested anywhere else.
A megaworm that does not arrive is, to the forecaster, merely postponed. To the people keeping the file, it is data.
ACT III — THE RECORD AND THE REVIEWS (FEB–MAR 2004)
In a single week the specimen achieves the two peaks of the display: a seat before the Senate, and a review that will follow the book forever. They arrive one day apart.
-
FEB 24 2004
Before the Senate
Verton testifies at the Senate Judiciary Subcommittee hearing "Virtual Threat, Real Terror: Cyberterrorism in the 21st Century." His statement opens with a candor the file must record: "Although I do not consider myself a technical expert, I have a professional background in intelligence and information security." It then argues for "a new, more flexible definition of the term cyber-terrorism" and warns "there is no longer such a thing as an insignificant vulnerability." He notes the book is endorsed by "the president's two former chief cyber security advisors, Richard Clarke and Howard Schmidt."
Mark the definitional maneuver. When the observed phenomenon declines to appear, one may wait for it — or one may widen the definition until something already happening qualifies.
-
FEB 25 2004
The Register's review lands the next day
Thomas C Greene: the book "soon loses its balance and tips increasingly in the direction of paranoid speculation," retails "dire predictions from paranoid bureaucrats," and treats cyber-terror — "something that has never occurred" — always as fiction. The line Greene says cost the author his sympathy is Verton's own, page 96: "we can safely discard the opinions of those who argue that cyber-terrorism … is impossible." Greene's prescription: read Bruce Schneier's Beyond Fear instead.
-
MAR 4 2004
The profession answers back
The Register publishes, in full, a letter from Jay G. Heiser of Information Security magazine, responding to Verton's counterattack on his critics — which, as Heiser quotes it, had called the skeptical position "intellectually bankrupt" and diagnosed "a cultural reluctance to accept terrorist organizations as thinking enemies." Heiser's reply for the risk profession: after 9/11, "watch out for the carpet baggers."
-
EPILOGUE
The circuit continues
The research file's status column reads: pundit circuit. Attrition's last dated entry, September 2008, logs Vmyths on "Russia used cyber hype as a weapon against Georgia." The file remains online. The archive keeps the tape running.
both sides, on the record
The reviewers' findings (theirs, not ours): cyber-terror rendered only as fictional scenario; sources "almost exclusively himself, and bureaucrats"; "no sceptical voices"; no smoking gun, no first-hand reporting, a desk rarely left [3] [4].
His own words: skeptics can be "safely discard[ed]" (p. 96, as quoted by Greene); the skeptical position "intellectually bankrupt" (as quoted by Heiser); and to the Senate, "a new, more flexible definition of the term cyber-terrorism" from a witness who "do[es] not consider [him]self a technical expert" [1] [3] [5].
The watchdog file: attrition.org's dated index, 2000–2008 — the megaworm that never arrived, the Iraq cyber-doom that never arrived, the earlier position that cyber-war was hyperbole [2].
The credentials are real. A former intelligence officer, per the Post's reviewer, with years on the Computerworld security beat — and the same review that found no smoking gun called his American Airlines wireless investigation "superb investigative journalism" that forced an actual fix [4]. This is not a fabricated résumé case.
His position, at full strength: the physical and cyber worlds had merged; a physical attack could be intensified by a simultaneous cyber strike on hospitals, power, and communications; the infrastructure was privately owned, indifferent, and soft. The book carried endorsements he cited to the Senate from Richard Clarke and Howard Schmidt, the president's two former cyber-security advisors [1]. And he told the Senate up front he was not a technical expert — disclosure, not concealment [1].
Scope of the record: nothing here is adjudicated. No court, no charge, no credential-fraud finding — the case against him consists of signed book reviews and a watchdog's index. Even his harshest mainstream reviewer hedged: "It's possible that Verton is simply wrong. But if he's right . . ." [4]. Being wrong about a forecast is not fraud.
YOU DECIDE
Scoped to the claim, never the man. The claim — cyber-terrorism as a threat so established that skeptics could be "safely discard[ed]" — rests on a book whose cyber-terror passages its own reviewers found "always in the form of a fictional scenario," and it entered the congressional record from a witness who, by his own opening sentence, was not a technical expert. None of it was ever the kind of claim a court would test, and no court has.
Weigh the costly signals: the reviewers signed their names and printed the praise alongside the pan; Vmyths asked, in public, where the megaworm was. The answer on the record, per Heiser, was "intellectually bankrupt."
The archive does not judge. The archive merely keeps the tape running.
evidence locker
PRIMARY RECORD
PRESS & REVIEWS
The Washington Post — Clive Thompson's review of Black Ice (Aug 10, 2003), preserved in the ISN mailing-list archive ATTRIBUTED — the review in full, praise and pan alike; the original wp-dyn URL has rotted, the archive copy has not.
seclists.org/isn/2003/Aug/25
THE DISCOURSE
The standard. Everything above is sourced to the subject's own Senate testimony, two signed reviews in named publications, and the attrition.org documentary archive. Facts are stated as facts; critiques are stated as critiques and wear their reviewer. Nothing in this file is adjudicated, and the file says so. The defense is presented at full strength, including the genuine journalism and the endorsements. No motive is asserted, no private character diagnosed. The burden of proof is on us, not the subject. If it couldn't survive a defamation challenge, it wouldn't be on this page.