Monday, July 27, 2026

Review - SLTT cUAS Authority IFR – Authorized Personnel

This is the third in a series of blog posts about the interim final rule (IFR) published last week by DHS and DOJ on “Counter-UAS [cUAS] Authority for State, Local, Tribal, and Territorial Law Enforcement and Correctional [SLTT] Agencies”. This post will look at the personnel that would be authorized by this rule to take cUAS actions. 

Previous posts include:  

SLTT Level Authority 

Section 124.3 provides authority for SLTT law enforcement or correctional agencies to take detection, warning, and mitigation actions “that are necessary to address or eliminate a credible threat that a UAS or unmanned aircraft poses to the safety or security of people, a facility, or an asset; a venue or set of venues used for large-scale public gatherings or events; critical infrastructure; or a correctional facility.” 

Authorized Personnel  

Section 124.4 establishes the requirement that cUAS activities authorized under 6 USC 124n(a)(2) may only be conducted by employees of an SLTT agency. It specifically prohibits contractors from operating cUAS detection or mitigation systems that require relief from limitations under section 46502 of title 49 or sections 32, 1030, 1367 and chapters 119 and 206 of title 18, notwithstanding the laws of any particular State, local, Tribal, or territorial jurisdiction. 

Training and Certification  

Section 124.5 establishes the training and certification requirements for conducting cUAS mitigation operations under 6 USC 124n(b)(1) including disrupting control, seizing or exercising control, and use of reasonable force. Possession of Detection and Warning Certification is a prerequisite for mitigation training and certification. Personnel holding a Mitigation Certification issued by the NCUTC before the effective date of this part must complete the detection and warning curriculum by September 29, 2026. 

Mitigation training will be conducted in person at the NCUTC operated by the FBI. A basic Mitigation Certification training course is required, and additional training at the NCUTC may extend the scope of that certification to additional mitigation technology categories. The certification training will include instruction on the legal, operational, and technological aspects of C-UAS operations. 

Looking Back – 3-8-2011 – KingView Exploit

Nearly every morning I start my computer time by looking at information from Google about what happened in my blog in the previous 24 hours. Google, and blogspot.com is a Google service, provides interesting pieces of analytical data about my blog readership. One item of particular interest is the top ten blog posts each day. As you would expect, most of those posts were from the last couple of days, but with 16 years of publishing this blog, every once-in-a-while, a blog post from ancient history rises into that list. 

Today, a blog post from March 8th, 2011, ICS-CERT Alert for WellinTech KingView, made the list. The ICS Alert briefly describes a vulnerability in the WellinTech KingView v6.53. Not much in the way of details about the vulnerability beyond the fact that it affected KVWebSvr.dll and an exploit was available. Interestingly, neither the alert nor the follow-up advisory provide a CVE for the vulnerability.  

It turns out that the supporting CVE (CVE-2011-3142) was not published until August 16th, 2011, and MITRE was the CNA not ICS-CERT (they became a CNA in 2012). Two separate exploits are listed in the NVD.NIST.gov record, but neither link works. In fact, none of the links referenced on the NVD site work. Ancient history, so I guess it really is not important.... 

Friday, July 24, 2026

Short Takes – 7-24-26 - Federal Register Edition

OSHA Comment Extensions  

OSHA published comment extension notices on following notices of proposed rule makings making changes to existing chemical safety standards: 

1, 3-Butadiene, 

1,2-Dibromo-3-Chloropropane, 

13 Carcinogens (4-Nitrobiphenyl, etc.), 

Acrylonitrile, 

Asbestos 

Cadmium, 

Ethylene Oxide 

Formaldehyde, 

Inorganic Arsenic (1),  

Inorganic Arsenic (2), 

Lead 

Methylene Chloride 

Methylenedianiline 

Vinyl Chloride. 

Space Geek Notice  

Agency Advisory Circular: AC 413.13-1A Guidance on Submitting an Application for a Part 450 Vehicle Operator License. FAA notice of availability. Summary: The Federal Aviation Administration (FAA) is seeking public comments on its revised draft advisory circular (AC) for the Guidance on Submitting an Application for a Part 450 Vehicle Operator License. This revised AC provides guidance on demonstrating compliance with the requirements of a license application in accordance with §§ 413.11 and 413.13 of title 14 of the Code of Federal Regulations (14 CFR). It details the criteria for submitting an application and the FAA's evaluation of the application for a license determination under 14 CFR part 450. 

 
/* Use this with templates/template-twocol.html */