Slashdot Mirror
Domain: gao.gov
Stories and comments across the archive that link to gao.gov.
Stories · 74
-
US Climate Satellite Capabilities In Jeopardy
An anonymous reader writes with this excerpt from Wired: "The United States is in danger of losing its ability to monitor key climate variables from satellites, according to a new Government Accountability Office report. The country's Earth-observing satellite program has been underfunded for a decade, and the impact of the lack of funds is finally hitting home. The GAO report found that capabilities originally slated for two new Earth-monitoring programs, NPOESS and GOES-R, run by the National Oceanic and Atmospheric Administration and the Department of Defense, have been cut, and adequate plans to replace them do not exist. Meanwhile, up until six months ago, NASA had 15 functional Earth-sensing satellites. Two of them went down in the past year, and of the remaining 13, 12 are past their design lifetimes. Only seven may be functional by 2016, said Waleed Abdalati, a longtime NASA satellite scientist now teaching at the Cooperative Institute for Research in Environmental Studies at the University of Colorado at Boulder. Taken together, American scientists will soon find themselves without the ability to monitor changes to key Earth systems at a time when such measurements could help determine the paths of the world's energy and transportation systems." -
Crunch Time For IRS Data Centers
1sockchuck writes "It's crunch time for the Internal Revenue Service. As the IRS processes the annual crescendo of returns around today's tax deadline, the state of the agency's infrastructure depends upon who you ask. IT executives at the IRS say it has made huge strides in modernizing its data centers, which processed 139 million returns and issued $298 billion in refunds in 2009. Independent tests say the IRS web site is the fastest US government site, and one of the fastest on the web. But a key government watchdog, the Government Accountability Office, says the modernization effort hasn't moved quickly enough, and continues to fault the IRS for security weaknesses." -
Feds Question Big Media's Piracy Claims
WrongSizeGlass writes "CNET is reporting that the GAO's study of big media's piracy claims has raised some questions. (Here are the study's summary, highlights [PDF], and full report [PDF].) 'After spending a year studying how piracy and illegal counterfeiting affects the United States, the Government Accountability Office says it still doesn't know for sure.... The GAO said that most of the published information, anecdotal evidence, and records show that piracy is a drag on the US economy, tax revenue, and in some cases potentially threatens national security and public health. But the problem is, according to the GAO, the data used to quantify piracy isn't reliable.'" -
Feds Question Big Media's Piracy Claims
WrongSizeGlass writes "CNET is reporting that the GAO's study of big media's piracy claims has raised some questions. (Here are the study's summary, highlights [PDF], and full report [PDF].) 'After spending a year studying how piracy and illegal counterfeiting affects the United States, the Government Accountability Office says it still doesn't know for sure.... The GAO said that most of the published information, anecdotal evidence, and records show that piracy is a drag on the US economy, tax revenue, and in some cases potentially threatens national security and public health. But the problem is, according to the GAO, the data used to quantify piracy isn't reliable.'" -
Feds Question Big Media's Piracy Claims
WrongSizeGlass writes "CNET is reporting that the GAO's study of big media's piracy claims has raised some questions. (Here are the study's summary, highlights [PDF], and full report [PDF].) 'After spending a year studying how piracy and illegal counterfeiting affects the United States, the Government Accountability Office says it still doesn't know for sure.... The GAO said that most of the published information, anecdotal evidence, and records show that piracy is a drag on the US economy, tax revenue, and in some cases potentially threatens national security and public health. But the problem is, according to the GAO, the data used to quantify piracy isn't reliable.'" -
IRS Security Faults Leave Taxpayer Data At Risk
coondoggie writes "In this tax season, when billions of dollars and tons of personal information is relayed to and from the government, it's more than disconcerting to hear that the Internal Revenue Service is still struggling to keep private information secure. A report out Friday from watchdogs at the Government Accountability Office says about 69% of the tax agency's previously noted security flaws remain unfixed and continue to jeopardize the confidentiality, integrity, and availability of the IRS's systems (PDF). The problems put the IRS at increased risk of unauthorized disclosure, modification, or destruction of financial and taxpayer information, the GAO concluded." -
Brain Drain, Admin Failures Threaten the FCC's Role
coondoggie writes "The Federal Communications Commission has brain drain and administration problems that could decrease its effectiveness at a time when advanced service technologies such as wireless and broadband present significant regulatory challenges. On the brain drain front, a report out today (PDF) from watchdogs at the Government Accountability Office stated that from fiscal year 2003 to 2008, the number of engineers at the FCC decreased by 10%. Similarly, the overall number of economists decreased by 14%. While the total number of engineers and economists in the workforce has decreased from 2003 to 2008, the percentages remained the same. The GAO also criticized the FCC's public comment policy, saying, 'While FCC relies heavily on public input to inform its decisions, it tends to do so without giving the public access to the actual text of a given proposal. If parties are able to submit vague summaries that may not fully reflect meetings between FCC officials and outside parties, then stakeholders will continue to question whether commission decisions are being influenced by information that was not subject to public comment or rebuttal and that, in some cases, is submitted just before a commission vote.'" -
NASA's Space Plans Take Another Hit
coondoggie writes "The folks at the Government Accountability Office have not been all that kind to NASA in recent years, and today they issued another damning report on the future of the manned space flight program. NASA is still struggling to develop a solid business case — including firm requirements, mature technologies, a knowledge-based acquisition strategy, a realistic cost estimate, and sufficient funding and time — needed to justify moving the Constellation program, which includes the two main spaceflight components, the Ares I Crew Launch Vehicle and the Orion Crew Exploration Vehicle, forward into the implementation phase, the GAO stated." -
Can Commercial Space Tech Get Off the Ground?
coondoggie writes "While NASA's commercial partners such as SpaceX and Orbital have made steady progress in developing space cargo transportation technology, they have recently fallen behind their development schedules. Combine that with the fact that the most critical steps lie ahead, including successfully launching new vehicles and completing integration with the space station, and you have a hole that will be tough to climb out of. Those were the two main conclusions of a Government Accountability Office report (PDF) on the status of the commercial space world this week. The GAO went on to say that after the planned retirement of the space shuttle in 2010, NASA will face a cargo resupply shortfall for the International Space Station of approximately 40 metric tons between 2010 and 2015." Speaking of SpaceX, reader Matt_dk sends along an update on the company's Falcon 9 flight efforts. "Six of the nine first stage flight engines have completed acceptance testing and all nine flight engines are on schedule to complete acceptance testing by mid-July." -
DHS Seeks "Ethical Hackers" To Protect Federal Net Infrastructure
Death Metal sends this excerpt from an AP report: "General Dynamics Information Technology put out an ad last month on behalf of the Homeland Security Department seeking someone who could 'think like the bad guy.' Applicants, it said, must understand hackers' tools and tactics and be able to analyze Internet traffic and identify vulnerabilities in the federal systems. In the Pentagon's budget request submitted last week, Defense Secretary Robert Gates said the Pentagon will increase the number of cyberexperts it can train each year from 80 to 250 by 2011. With warnings that the US is ill-prepared for a cyberattack, the White House conducted a 60-day study of how the government can better manage and use technology (PDF) to protect everything from the electrical grid and stock markets to tax data, airline flight systems, and nuclear launch codes. ... Nadia Short, vice president at General Dynamics Advanced Information Systems, said the job posting for ethical hackers fills a critical need for the government." -
GAO Reports Bailout and Tech Firms Love Tax Havens
theodp writes "Most of America's largest publicly traded corporations and Federal contractors — including those receiving billions of dollars from US taxpayers to finance their recovery — have set up offshore operations that could help them avoid paying US taxes, according to a GAO study released yesterday. Of the 100 largest public companies, 83 do business in tax-haven hot-spots like the Cayman Islands, Bermuda, and the British Virgin Islands. The report found that Citigroup, a recipient of $45B in bailout funds so far, has set up 427 subsidiaries in tax-haven countries, including 91 in Luxembourg, 90 in the Cayman Islands, and 35 in the British Virgin Islands. Household names on the lists from the tech sector include Apple (1 tax haven subsidiary), Cisco (38), Dell (29), HP (14), Intel (6), IBM (10), Microsoft (8), Motorola (4), and Oracle (77)." -
Taxpayer Data At IRS Remains Vulnerable
CWmike writes "A new Government Accountability Office report (PDF) finds that taxpayer and other sensitive data continues to remain dangerously underprotected at the IRS. The news comes less than three months after the Treasury Inspector General for Tax Administration reported that there were major security vulnerabilities in two crucial IRS systems. Two big standouts in the latest finding: The IRS still does not always enforce strong password management rules for identifying and authenticating users of its systems, nor does it encrypt certain types of sensitive data, the GAO said." -
Report Rips Government Wireless Network Effort
coondoggie writes with this excerpt from NetworkWorld: "Like a bunch of children in a sandbox unable and perhaps unwilling to share their toys, multiple key government agencies cannot or will not cooperate to build a collaborative wireless network. The Government Accountability Office report (PDF) issued today took aim at the Departments of Justice, Homeland Security, and the Treasury which had intended what's known as The Integrated Wireless Network (IWN) to be a joint radio communications system to improve communication among law enforcement agencies. However IWN, which has already cost millions of dollars, is no longer being pursued as a joint development project, the GAO said. By abandoning collaboration on a joint implementation, the departments risk duplication of effort and inefficient use of resources as they continue to invest significant resources in independent solutions. Further, these efforts will not ensure the interoperability needed to serve day-to-day law enforcement operations or a coordinated response to terrorist or other events, the GAO said." -
Government Report Examines Alternative Energy Research
coondoggie points us to a NetworkWorld story about the Government Accountability Office's report on the state of advanced energy technology. The report notes that despite continued funding [PDF], U.S. reliance on oil has only dropped from 93% to 85% since 1973. It goes on to evaluate how the most prominent fields of research have developed in that time period, and where they are likely to go in the future. -
Bogus Company Obtains Nuclear License
i_like_spam writes "As reported in the NY Times, undercover investigators from the Government Accountability Office set up a bogus company and received a license to purchase dirty-bomb nuclear materials from the Nuclear Regulatory Commission. The GAO's investigation shows that the security measures put in place after 911 are not sufficient for protecting the American people." From the article: "Given that terrorists have expressed an interest in obtaining nuclear material, the Congress and the American people expect licensing programs for these materials to be secure, said Gregory D. Kutz, an investigator at the accountability office, in testimony prepared for the hearing." -
Many Domains Registered With False Data
bakotaco writes "According to research carried out by the US Government Accountability Office (GAO) many domain owners are hiding their true identity. The findings could mean that many websites are fronts for spammers, phishing gangs and other net criminals. The report also found that measures to improve information about domain owners were not proving effective." From the article: "The GAO took 300 random domain names from each of the .com, .org and .net registries and looked up the centrally held information about their owners. Any user can look up this data via one of the many whois sites on the net. The report found that owner data for 5.14% of the domains it looked at was clearly fake as it used phone numbers such as (999) 999-9999; listed nonsense addresses such as 'asdasdasd' or used invalid zip codes such as 'XXXXX'. In a further 3.65% of domain owner records data was missing or incomplete in one or more fields." -
Many Domains Registered With False Data
bakotaco writes "According to research carried out by the US Government Accountability Office (GAO) many domain owners are hiding their true identity. The findings could mean that many websites are fronts for spammers, phishing gangs and other net criminals. The report also found that measures to improve information about domain owners were not proving effective." From the article: "The GAO took 300 random domain names from each of the .com, .org and .net registries and looked up the centrally held information about their owners. Any user can look up this data via one of the many whois sites on the net. The report found that owner data for 5.14% of the domains it looked at was clearly fake as it used phone numbers such as (999) 999-9999; listed nonsense addresses such as 'asdasdasd' or used invalid zip codes such as 'XXXXX'. In a further 3.65% of domain owner records data was missing or incomplete in one or more fields." -
Patent Examiners Flee USPTO
john-da-luthrun writes "Soaring numbers of patent applications for software and business processes is not only leading to the ludicrous patents for the likes of Amazon and Microsoft. The stress of dealing with vast numbers of applications is leading to an exodus of patent examiners from the USPTO, reports FCW.com. A US Government Accountability Office report (PDF) says that the USPTO has made progress in hiring examiners, 'but challenges to retention remain'. The IP Kat blog quotes Jason Schulz of the EFF, who comments that 'The incredible surge of patent applications, especially in the software and internet business method arena, is just crushing them, and the management problems are rising to the surface with greater visibility for those reasons. Where anything under the sun is patentable, it puts an unbelievable amount of pressure on the patent office'." -
Has the Data Security Problem Become an Epidemic?
telstar asks: "Lately, it seems like an almost weekly occurrence: confidential customer data is exposed online, despite the assurance that security measures were in place to prevent such a problem. ChoicePoint Inc., LexisNexis, and DSW Inc. were all victims of online security breaches. Ameritrade and Bank of America both admitted lost physical data tapes containing confidential client account information. Recently, Carnegie Mellon notified 19,000 students, alumni, faculty and staff that their confidential information may have been compromised. An April 2005 GAO report found that though the IRS is making progress fixing security holes in systems that it operates, they aren't keeping pace with new vulnerabilities, risking exposure of sensitive financial data of the taxpaying population of the country. To top things off, these are only the cases that we're aware of, which begs the question of how many security breaches have gone unnoticed, or unannounced. What about companies like Google? As they expand their service offerings with GMail and Google Search History, where they are increasingly responsible for retaining client data, will they become a bigger target for attackers? This is the problem. What is the solution? Are there any tips for people to help protect their identity and confidential financial information? What firms go above and beyond the call of duty to ensure that their client data is secure?" -
GAO Studies U.S. Government Data Mining
securitas writes "Total Information Awareness is alive and thriving. eWEEK's Caron Carlson reports on a new General Accounting Office study that says TIA-style data mining programs are rampant in federal agencies with 199 projects at 52 of 128 agencies. The Defense Intelligence Agency/DoD is the single largest user of these data mining projects (eg. Verity K2 Enterprise). The story was first reported by Reuters' Andy Sullivan (ZDNet UK mirror) and the NYT's Robert Pear, who wrote that at least 122 projects used personally identifying information like names, e-mail addresses, Social Security and driver's license numbers. The 'actual numbers are likely to be much higher' because the report excludes classified projects. Wired News' Kim Zetter writes that, in addition to government databases, federal agencies mine private databases of credit rating agencies, bank account numbers, student loan applications, etc. This week the Center for Democracy and Technology (CDT) released a report with privacy guidelines for data mining technology (PDF) development and use. Guidelines include data anonymization, government data access authorization and audit trails. Cynthia (Cindy) Webb's 'Total Information Dilemma' at the Washington Post is an excellent survey of media coverage of TIA, MATRIX and the GAO report 'Data Mining: Federal Efforts Cover a Wide Range of Uses' (mirror, both in PDF format). More at GCN, GovExec and the Guardian/AP." -
GAO Studies U.S. Government Data Mining
securitas writes "Total Information Awareness is alive and thriving. eWEEK's Caron Carlson reports on a new General Accounting Office study that says TIA-style data mining programs are rampant in federal agencies with 199 projects at 52 of 128 agencies. The Defense Intelligence Agency/DoD is the single largest user of these data mining projects (eg. Verity K2 Enterprise). The story was first reported by Reuters' Andy Sullivan (ZDNet UK mirror) and the NYT's Robert Pear, who wrote that at least 122 projects used personally identifying information like names, e-mail addresses, Social Security and driver's license numbers. The 'actual numbers are likely to be much higher' because the report excludes classified projects. Wired News' Kim Zetter writes that, in addition to government databases, federal agencies mine private databases of credit rating agencies, bank account numbers, student loan applications, etc. This week the Center for Democracy and Technology (CDT) released a report with privacy guidelines for data mining technology (PDF) development and use. Guidelines include data anonymization, government data access authorization and audit trails. Cynthia (Cindy) Webb's 'Total Information Dilemma' at the Washington Post is an excellent survey of media coverage of TIA, MATRIX and the GAO report 'Data Mining: Federal Efforts Cover a Wide Range of Uses' (mirror, both in PDF format). More at GCN, GovExec and the Guardian/AP." -
GAO Recommends Cookie Policy For U.S. Govt.
Jim Madison writes: "The General Accounting Office (GAO) has issued a report today 'Internet Privacy: Implementation of Federal Guidance for Agency Use of "Cookies".' In it, they recommended that Federal agencies abide by a four point standard for the use of cookies: (1) clear notice (2)compelling need (3) public stated privacy safeguards for tracking info, and (4) approval by agency head. Only 8 of 65 agencies they checked in the study use persistent cookies, of which 4 did not even have privacy policies and none met the entire 4 point test. All agencies have agreed to comply; it sounds like a step in the right direction to me at least. What's the harm in the government collecting that info anyway, right?" Personally, I think the government should have to ask nicely before gathering any information via cookies, like Sen. Robert Torricelli has proposed for private firms. Other than that, these guidelines seem blandly sensible. -
Making PKI Work
Vegigami writes: "The U.S. General Accounting Office (GAO) has released this 80+ page PDF report on Information Security: Advances and Remaining Challenges to Adoption of Public Key Infrastructure Technology. Some good straight talk about what its going to take to get PKI to really work on a large scale. The obstacles seem formidable." -
GAO On ICANN
Nater writes "I guess it's official now that ICANN is the authority on domain names in the U.S. This article is about a report made by the General Accounting Office that validates the Department of Commerce's authority to designate ICANN. According to the article, the report was prompted by certain members of Congress who didn't like that Commerce put the DNS in the hands of an international body." Not too many surprises in this. Here's the GAO report itself.Interestingly, the report waffles on whether the government actually has the authority to transfer ownership of the A root server to ICANN. Here's their 180-word answer:
"The question of whether the Department has the authority to transfer control of the authoritative root server to ICANN is a difficult one to answer. Although control over the authoritative root server is not based on any statute or international agreement, the government has long been instrumental in supporting and developing the Internet and the domain name system. The Department has no specific statutory obligations to manage the domain name system or to control the authoritative root server. It is uncertain whether transferring control would also include transfer of government property to a private entity. Determining whether there is government property may be difficult. To the extent that transition of the management control to a private entity would involve the transfer of government property, it is unclear if the Department has the requisite authority to effect such a transfer. Since the Department states that it has no plans to transfer the root server system, it has not examined these issues. Currently, under the cooperative agreement with Network Solutions, the Department has reserved final policy control over the authoritative root server." (p. 4)
Translation:
"Nobody knows."
That second-to-last sentence is interesting. It's repeated on p. 45 more explicitly:
"The Department also states that it has no current plans to transfer policy authority for the authoritative root server to ICANN, and therefore it has not developed a scenario or set of circumstances under which such control would be transferred."
I'd assumed, perhaps like many, that ICANN wanted to end up with some kind of control over the A root server itself. Whoever knows that machine's root password controls the internet. But there are a lot of other ways that control can be had; I suppose it's possible that a private corporation like NSI will continue to administer the machine, with ICANN exerting the force of law from a distance.
On the other hand, as TBTF comments:
"This may only reflect the reality that NSI's contract with Commerce runs for another three years before the question of control of the root server even comes up again."
Or hey, if you're in the mood for conspiracy theories, it might mean something else. Set phasers to speculate.