According to its authors, the immunity sections in CISPA are necessary for companies to share information about cyberthreats with the government. But the immunity granted by CISPA is overly broad because it does more than just encourage the sharing of information. Companies don't need immunity to share technical information about threats. As an example, the recent Executive Order encourages such sharing without providing immunity to companies. Further, companies are already openly sharing information to protect against threats. In 2010 Google alerted human rights activists and companies that were targeted and infected by malware. Earlier this month, Facebook shared the signature and forensic data of a recent attack with other companies, and was also willing to speak openly about its sharing activities. And just two weeks ago, Mandiant's report on Chinese hacking included a treasure trove of information about suspected threats, the methods they used, and other technical information. These actions underline just how much information companies and security providers can share in order to protect against threats.