Slashdot Mirror


MI6 Terror Photos, Data Accidentally Sold On Ebay

Barence writes "In what's turning out to be a bad week for security in the UK, confidential MI6 documents, fingerprints and photos relating to suspected Al-Qaeda terrorists have been found in the memory of the second-hand Nikon Coolpix camera, which was bought on eBay for only £17. The buyer immediately went to the police, who initially treated it as a joke; when they realised he was serious, they swooped on his home and seized his camera and PC. Remember, this is the same MI6 which plans to recruit new members via Facebook, a userbase not exactly famous for its dedication to privacy, security and discretion. The news comes on the back of yesterday's embarrassment over a local council whose VPN device ended up on eBay with confidential login details left on it."

79 of 317 comments (clear)

  1. Fuck the police by Hatta · · Score: 5, Insightful

    The buyer immediately went to the police, who initially treated it as a joke; when they realised he was serious, they swooped on his home and seized his camera and PC.

    This is why you never talk to the police.

    --
    Give me Classic Slashdot or give me death!
    1. Re:Fuck the police by AKAImBatman · · Score: 2, Insightful

      According to TFA, the police replaced the camera equipment they swiped. I didn't see any mention in the article of them taking his computer. Only replacing "$1000 worth of camera equipment".

    2. Re:Fuck the police by slug359 · · Score: 5, Informative

      4th paragraph:

      "However, the police subsequently descended on the man's home, seizing his computer and camera equipment."

    3. Re:Fuck the police by JustKidding · · Score: 4, Insightful

      I still have a hard time believing the people who decide such things are really that stupid. What message does that send to the next finder of classified information or material? "just post it on Flickr via anonymous proxy?" They could have just asked for the camera, and offered a replacement for it, and a new computer with a copy of their data.

    4. Re:Fuck the police by DeadManCoding · · Score: 5, Informative

      His computer was seized as he downloaded the files, The Register has more info.

      --
      "The only constant in the universe is change." - Unknown author
    5. Re:Fuck the police by bestinshow · · Score: 5, Insightful

      1) They took his computer.

      2) They replaced the equipment, at a cost of a grand. Whether or not this was a like-for-like replacement or better is unanswered.

      Whether or not he got his personal data back is another question, as anyone knows it is the time invested in generating your own data that is the real value in your PC. I hope he had a backup.

      Knowing the British police I expect he'll be arrested for some non-related data on the hard drive like some MP3s.

    6. Re:Fuck the police by Anonymous Coward · · Score: 2, Insightful

      If I find myself in possession of classified information in this way, I _want_ the agency to confiscate and replace and as publicly as possible, thanks. I don't want anyone thinking I still have this information.

    7. Re:Fuck the police by ShieldW0lf · · Score: 4, Insightful

      Sounds like a good place to work. Clearly, they're full of incompetents, leaving lots of room to slack off and still shine brighter than everyone else. Course, after a few years of doing so, you train yourself to be as useless as the rest of em, but then you can just suck up a government cheque and pass the buck until it's time to retire.

      --
      -1 Uncomfortable Truth
    8. Re:Fuck the police by sharperguy · · Score: 5, Funny

      The buyer immediately went to the police, who initially treated it as a joke

      I'll just type it up on my invisible typewriter.

      --
      "sudo rm -rf your-face"
    9. Re:Fuck the police by KeepQuiet · · Score: 5, Funny

      He should leave negative feedback. That will teach them a lesson.

    10. Re:Fuck the police by Xiroth · · Score: 4, Insightful

      Uh, if they needed to minimise the risk of a copy of the files being left behind, what exactly should the police have done? If I reported something like this to the police, the next thing I'd do is open the doors and put on a pot of tea for the special ops chaps who'd likely be calling by momentarily. Just because they came by and siezed the relevent equipment doesn't mean they treated him like a criminal - they simply did the best they could in a bad situation, and were probably rather apologetic to him and his family. They could well have returned the computer within 48 hours - we really don't have enough information to be passing judgement about this.

    11. Re:Fuck the police by Mister+Whirly · · Score: 2, Insightful

      That's what over-the-network backup and offsite storage are for.

      --
      "But this one goes to 11!"
    12. Re:Fuck the police by mpe · · Score: 4, Interesting

      This is why you never talk to the police.

      Better off to do as the person who found the stuff on the train did. Go to the press ensure that any handover is as public as it can possibly be.

    13. Re:Fuck the police by hedwards · · Score: 2, Insightful

      If it didn't before, I'm sure it does now. I mean they do have to justify seizing the computer after all. The fact that the person reported it to the police before there were any suspicions clearly can't indicated honesty.

    14. Re:Fuck the police by Hatta · · Score: 4, Interesting

      You're right, the police probably had little choice other than to confiscate his equipment. It was a completely predictable reaction, and that is why the person in question shouldn't have gone to the police.

      Even if they did return the equipment,I hope he's comfortable with some thug poring over his personal and private data. You know, searching through his email to see who he might have spoken with about these records. Looking at every single image file on the drive, etc.

      --
      Give me Classic Slashdot or give me death!
    15. Re:Fuck the police by Pvt_Ryan · · Score: 2, Interesting

      ahh the old "subconsiously I wanted to be caught"

      how remiss of me

    16. Re:Fuck the police by Richard+W.M.+Jones · · Score: 5, Insightful

      This is why you never talk to the police.

      Sadly you may be right, although for all the wrong reasons. In civilised parts of the world we recognise that society exists because of cooperation, and that includes cooperation with the police.

      Unfortunately in cases like these, the police are undermining that cooperation. As another example, it's rumoured that if you report child porn on the internet to the relevant authorities in the UK, you should expect a visit from the coppers and all your computer equipment to be taken away. Which is why I wouldn't report this, even though child abuse is a terrible thing and it should be reported.

      Now, if I found "terror photos" (whatever they are) on a second hand laptop or camera, I won't be reporting that either. Just scrubbing any info off the device and get on with my life.

      Rich.

    17. Re:Fuck the police by apodyopsis · · Score: 2, Funny

      its a sad,sad state of affairs when this is modded "funny".

      its is naive to label them a bunch of C&nts and then hope they are nice to you later on.

    18. Re:Fuck the police by Richard+W.M.+Jones · · Score: 5, Funny

      Whether or not he got his personal data back is another question, as anyone knows it is the time invested in generating your own data that is the real value in your PC. I hope he had a backup.

      It's OK, he can just buy them back when they turn up on ebay ...

      Rich.

    19. Re:Fuck the police by widman · · Score: 2, Interesting
    20. Re:Fuck the police by necro81 · · Score: 4, Informative

      A clarification: the cost of replacement equipment was £1,000, not $1,000.

    21. Re:Fuck the police by ubercam · · Score: 2, Insightful

      Yeah, and what happens if one of these named terrorists has a buddy who works for the BBC, or better yet, works there himself?

      One would think that a terrorist cell coming across detailed intel on their daily movements and stuff would be like gold to them. They would then know exactly what the gov't knows about them, and what they don't know. At the same time, they know how the gov't tracks them and all kinds of other details that might help them evade surveillance efforts on their group.

      Think of how many people at the BBC actually get to look at that stuff, make copies, sell it to other news outlets, etc? I'm sure it would go around the office a few times.

    22. Re:Fuck the police by Not_Wiggins · · Score: 4, Insightful

      Whether or not he got his personal data back is another question, as anyone knows it is the time invested in generating your own data that is the real value in your PC. I hope he had a backup.

      Actually, in a case like this, having a backup isn't going to help. Likely, the police would want to grab that, too. 8/

      --
      Diplomacy is the art of saying, "Nice doggie!" until you can find a rock.
    23. Re:Fuck the police by harrkev · · Score: 5, Insightful

      You clearly know nothing about how the government deals with classified data. Classified data is considered kind of like a virus, not the computer kind, but the biological kind. If the classified data was in a memory card in the camera, the camera itself is contaminated. If the camera was plugged into a computer, then the computer itself is contaminated. Anything electronic device that the computer touched is then considered to be contaminated. Even if you "KNOW" that it is not possible for your mouse to story encrypted data, your mouse is still assumed to be contaminated. This type of "blanket" policy that makes no exceptions is actually pretty smart, as it is the exceptions that will come back and bite you in the butt.

      This is the way that the US government does things in real life (and presumably the UK does the same thing). When developing systems that handle classified data, you have to maintain strict "red/black" separation, and the only interface allowed between red and black are things like *APPROVED* encryption units.

      Things are actually a little more complicated than this, but this is the general idea.

      --
      "-1 Troll" is the apparently the same as "-1 I disagree with you."
    24. Re:Fuck the police by Hel+Toupee · · Score: 2, Funny

      If I had mod points, this post would be +1 funny. Unfortunately, +1 insightful would also apply.

      --
      PERL:
      All of the power of Voodoo with most of the understandibility!
    25. Re:Fuck the police by electrictroy · · Score: 3, Insightful

      >>>they swooped on his home and seized his camera and PC.

      How nice. You try to be an honest citizen, and they steal your stuff. I wouldn't be surprised if they next decide to charge him for "trafficing" in playboy photos, illegal music, and/or downloaded movies.

      --
      The government is not your daddy. Its purpose is not to raid middle-class neighbors' wallets and give it to you.
    26. Re:Fuck the police by NotBornYesterday · · Score: 2, Informative

      Note to whomever at MI6: next time, boot to linux cd; man wipe; man dd. Hint: you will probably find the following helpful -

      wipe -rfc /dev/usb/[stupidfsckingcamera]

      and just for grins and giggles -

      dd if=/dev/zero of=/dev/usb/[stupidfsckingcamera] bs=4096

      Or, better yet, decide that recouping a few quid on ebay isn't worth it, and just destroy the damn camera.

      --
      I prefer rogues to imbeciles because they sometimes take a rest.
    27. Re:Fuck the police by ultranova · · Score: 5, Insightful

      Anything electronic device that the computer touched is then considered to be contaminated.

      Well, since the computer was likely connected to the Internet, we're having a pandemic by now.

      --

      Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

    28. Re:Fuck the police by NotBornYesterday · · Score: 4, Insightful

      Excellent info. However, just to be a wiseass, let me just say how glad I am that there is no worldwide series of interconnected electronic devices that might indirectly connect his home computer to mine or yours.

      --
      I prefer rogues to imbeciles because they sometimes take a rest.
    29. Re:Fuck the police by dgatwood · · Score: 3, Insightful

      This type of "blanket" policy that makes no exceptions is actually pretty smart, as it is the exceptions that will come back and bite you in the butt.

      No, a smart policy would prevent precisely what they are trying to prevent. A smart policy would say that any device that is capable of permanent retention of data, once contaminated, cannot be resold. That means hard drives, flash cards, and any camera that contains flash memory if such photos were ever stored in the built-in flash memory at any time.

      Preventing resale of devices that cannot retain data is idiotic. It only makes sense under the assumption that the people working for your IT department are too inept to know the difference.

      There will always be problems of people screwing up and selling things that they shouldn't, but at least by setting sane policies, you reduce the risk of such things being sold due to people desperate for a bigger department budget by reducing the list of things that can't be sold but don't really matter.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    30. Re:Fuck the police by jasmak · · Score: 2, Interesting

      I believe you are missing something in your argument. I agree with what you said but the government agent actually LOST the camera, someone FOUND it on a train and then sold it on ebay.

      --
      It is the mark of an educated mind to be able to entertain a thought without accepting it.
    31. Re:Fuck the police by mmalove · · Score: 2, Insightful

      My guess is that if you look deep down into the policy the US government has around classified information, you probably aren't legally allowed to sell media that at some point came into contact with classified information.

      Trouble is, much like gun control, not everyone listens. Much like death, information sharing is irreversable, with exception to the latter often closes the former. Three can keep a secret if two of them are dead, and all that.

      I think in a lot of ways the saying is true - information wants to be free. If the government has a particular piece of knowledge they don't want shared, maybe it's time to start reconsidering what information we develop and gather in the first place. The best way to prevent rogue countries from developing a nuclear bomb would have been to never invent it. The best way to keep them from stealing one would be to not own one. Yet, we still spend billions each year, learning about newer more effective ways to kill people, ultimately dooming ourselves to one day facing enemies with the same deadly and devasting arsenal.

      --
      You can get 15 minutes of fame, but you can go down in history for infamy.
    32. Re:Fuck the police by Gizzmonic · · Score: 3, Funny

      Well, I guess it's a good thing you didn't buy a digital camera that had a flash disk full of classified information, isn't it?

      I think you should cheer up! Now sing along!

      You're gonna go to that store and buy a backup disk! YEAH!
      You're gonna get over your ex and score with a hottie real quick! ALL RIGHT!
      And if the government man wants to take your flash drive, tell him that it's all right!
      Cause you've got a backup drive and a hot chick tonight! (GUITAR SOLO!)

      --
      (-1, Raw and Uncut is the only way to read)
    33. Re:Fuck the police by CmdrSammo · · Score: 2, Interesting

      There have been cases (all the links I can find at the moment point to out of date news URLs) in the UK at least where people have at least been detained for having things like the Anarchists Cookbook on their machine.

    34. Re:Fuck the police by CmdrSammo · · Score: 3, Interesting
      Spank me for double posting but I've found a source for you: http://www.mirror.co.uk/news/top-stories/2008/09/20/gcse-terrorist-jailed-over-manual-of-hate-115875-20745014/

      Munshi was arrested after police found an instruction manual on making grenades and napalm downloaded to his computer from the internet.

      The guy got two years for this and also running a website selling knives and Islamic flags, so yeah reading material can get you in trouble, at least here in the UK. Who needs liberties!

    35. Re:Fuck the police by sjames · · Score: 2, Insightful

      Uh, if they needed to minimise the risk of a copy of the files being left behind, what exactly should the police have done?

      A very polite MI6 operative should have shown up with a damned nice computer ( MUCH better than the existing one) and personally transfer the citizen's legitimate data and apps to the new machine. Then leave with the old one. He should have had an immunity document with him clearly outlining that nothing he might see in the data transfer would ever be used as evidence nor would he ever tell anyone about any of it. Just to be thorough, they should have talked to his employer to get him the day off (with full pay) so he could watch all of this take place and verify that nothing was missing.

      That may seem excessive, but the alternative is the current situation. Anyone who has read about any of this and then finds themselves in a similar situation will be sorely tempted to just erase the memory card (perhaps) and keep quiet about it (almost certainly).

      In comparison, the scenario I laid out is dirt cheap to implement and could only improve the government's relationship with the people.

      It's very simple really. Do they want a Citizen finding such data to say to himself "JACKPOT! I'll just turn this in to the authorities!" or "delete delete delete. Now shut up!" or worse, "I'd better give this to a reporter anonymously and let him turn it in"

    36. Re:Fuck the police by earlymon · · Score: 2, Insightful

      If only it were that easy. Remember - in the land of blind men, a one-eyed man is king; in the land of idiots and fools, a wise man is put to death.

      So it is at government agencies - I know.

      --
      Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
    37. Re:Fuck the police by floydian · · Score: 3, Insightful

      Exactly. Few people realize that the basic problem with government is that you can't fire the coasters. OK, it's not impossible, but it's such an uphill challenge that pretty soon you get tired and decide to move on to a job where what you do actually accomplishes something.

      Talented and hardworking folks don't usually last long in gov gigs, they become increasingly frustrated at the generalized apathy and incompetence. Even though the pay might be good and the work easy, if you give at least a bit of a shit, you'll soon decide to move on to a place that's intellectually challenging before the pervasive rust starts to creep in.

      Granted, you can't generalize, and I'm sure not all gov agencies are like that. But after working in government for some years, I would feel safe betting on the fact that most government agencies (in any part of the world) attract and harbour the kind of people who just want to get through their day without exerting unduly pressure on themselves and having the near-certainty of a never-ending paycheck.

      Sad, really.

    38. Re:Fuck the police by ShieldW0lf · · Score: 2, Interesting

      My post was intended as a cynical joke. Seriously though, when it comes to government, I've always been more concerned about the prospect of pouring months and years of my time and effort into creating something only to have it discarded because someone else got elected than about security and high pay. I've spoken to a few people who had that happen to them repeatedly and it sucked the soul right out of them, left a real impression on me. Building sandcastles that get wiped out every time the tide comes in doesn't sound like a very fulfilling life, no matter how well it pays...

      --
      -1 Uncomfortable Truth
    39. Re:Fuck the police by Xtifr · · Score: 2, Interesting

      And how are they going to prove that you deleted the data, not the person who sold you the camera?

      I agree that it's an ugly situation, but if we take this line of paranoia to extremes, then you should never ever buy any second hand gear, because it might once have had classified material on it, and the gov't might trace the sale to you and assume that you're the one who deleted the data and toss you in Gitmo.

    40. Re:Fuck the police by ukyoCE · · Score: 2, Insightful

      C'mon, the guy came to the police voluntarily to give them back their camera and confidential pictures. They should have sent an IT guy to his house to sit *with* the guy at his computer, delete all of the pictures (if they weren't already), verify they're deleted, check any media nearby (that would be confiscated in an overreaction), and run a wiping utility to fully wipe the pictures from the hard drive.

      Would have taken an hour and not scared citizens away from cooperating with the police to avoid losing all their own personal computers and data to be stored forever at police HQ and rifled through by complete strangers.

      This guy went to the police voluntarily, any common sense dictates that he would also cooperate with an on-site technician to verify the files are deleted and wiped. If the guy is hiding a copy somewhere, it's still hidden whether or not they confiscate all of stuff and go through his private data.

    41. Re:Fuck the police by zobier · · Score: 2, Insightful

      That's a good argument for off-site backups, or if you want to get creative, something like encrypted Usenet posts.

      --
      Me lost me cookie at the disco.
  2. Tinker, Tailor, Soldier, Tard by Rand+Race · · Score: 3, Funny

    George Smiley would whip out a light-saber and... oh, wrong Alec Guiness film. Sorry.

    --
    Insanity is the last line of defence for the master diplomat. But you have to lay the groundwork early.
  3. So I just have to wonder. by LWATCDR · · Score: 5, Interesting

    Just how many people buy hard drives just to mine them for data?
    1. Buy the drives on Ebay
    2. Scan drives for valuable data.
    3. Sell cleaned drives on Ebay and sell data to the highest bidder.
    4. Profit.

    --
    See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    1. Re:So I just have to wonder. by JustKidding · · Score: 5, Funny

      With just 2 people doing this, there would be a whole lot of clean drives going back and forth between them. You need something like a TTL to prevent a complete DoS.

    2. Re:So I just have to wonder. by kestasjk · · Score: 4, Insightful

      Slashdot articles may give the impression that every piece of 2nd hand electronics contains nuclear silo passcodes or celebrity porno tapes but I don't think that's actually the case

      --
      // MD_Update(&m,buf,j);
    3. Re:So I just have to wonder. by Anonymous Coward · · Score: 3, Funny

      Not to hard just don't drives twice from anybody that sells you clean drives.

      I accidentally the whole drive?

    4. Re:So I just have to wonder. by NotBornYesterday · · Score: 5, Funny

      That depends on your definition of "important". If by "important" you mean, has the most value to the person who received it, then I'd personally have to go with sex vids/pics. Those I can use right away, as often as I want, and then trade to get more nudie pics.

      WTF am I going to use nuclear bomb codes for? I'm no longer in the nuclear blackmail business, and all my former henchmen are employed elsewhere. Mostly at Oracle and Microsoft. We still send each other xmas cards, and talk about getting together for a reunion, but it's hard to get all our schedules to line up, especially since most of us have young families now anyway. Back in the day when we were all single, it was easy to commit all our waking hours to work (building a massive underground fortress in a dormant volcano, etc.), but none of us really have the time anymore. Sigh. I guess you really can't go back to the glory days once they're gone.

      --
      I prefer rogues to imbeciles because they sometimes take a rest.
    5. Re:So I just have to wonder. by NotBornYesterday · · Score: 4, Funny

      The money is there, but the competition got to be too much. In the mid-90's we were doing great. Our business plan was solid, and we were swimming in venture capital. We even considered an IPO at one point. Then in the late 90's, Microsoft got wind of what we were doing, and met with us to discus a merger. The rest of the story is fairly predictable: sell to them at a discount, or they would simply "embrace and extend" our blackmail model and include it as a free feature in the next version of Windows.

      After we sat back, talked it over amongst ourselves and considered it, we agreed to sell to them. Looking back, I'm not so sure that was really the right thing to do, but at the time the ground was littered with companies who had crossed them and lost. Anyway, a few of us got buyout packages and moved on elsewhere, but most stayed with Microsoft for awhile at least. It's not a bad place to work. Nice campus and all, but it sure wasn't as cool as the supersecret lair was.

      Eventually, they managed to integrate some of our world-domination technology into the next build of their OS, but they never really understood it, and it was a disaster (remember ME?). At that point, I was pretty disgusted, so I left to join another start-up.

      --
      I prefer rogues to imbeciles because they sometimes take a rest.
    6. Re:So I just have to wonder. by Gazzonyx · · Score: 2, Funny

      So you're the one we have to kill for Windows ME, eh?
      I've got some friends over at Oracle that could take care of... Oh, hey, wait a minute! Small world, isn't it?

      If you see Dave, let him know I still want my 20 sided dice back.

      --

      If I mod you up, it doesn't necessarily mean I agree with what you've said, sorry.

  4. Same thing? Really? by eln · · Score: 4, Insightful

    I think an intelligence service selling a camera with highly sensitive classified data on it is just a little more serious than some local council leaving the password to their VPN on a router.

    I would expect small local agencies to either not have or ignore proper data scrubbing policies prior to selling old equipment, but national intelligence agencies? That's a whole different kettle of fish.

    1. Re:Same thing? Really? by _Sprocket_ · · Score: 4, Insightful

      I would expect small local agencies to either not have or ignore proper data scrubbing policies prior to selling old equipment, but national intelligence agencies? That's a whole different kettle of fish.

      It is curious. It would be a safe bet that proper procedures exist to handle equipment like this. Obviously they weren't followed.

      I would even hazard to guess that not only were safe disposal procedures not followed, but a whole slew of other procedures covering proper equipment were also ignored. It wouldn't surprise me that this was a personal device used on-the-job due to convenience or necessity despite regulations against such use.

      Of course, that's just a wild guess. It could also be as mundane as lost / stolen equipment. Or mis-managed inventory that ended up in some government surplus lot. The scenarios are endless.

      It also highlights a personal pet peve of mine; policies are not protection. Too often they are given the air of risk mitigation when they are simply documents. Sure - they're good things to have around. You can't expect people to do things right if you can't tell them the right way of doing things. But so much infosec within the belly of such bureaucratic beasts seems to focus on merely generating and checking those policies. There is too little effort in actually implementing them - or improving the environment to limit actual risk.

      If this was, in fact, personal gear I would hazard to guess simply making it easier to get official government kit (with all the tracking and control such kit gets) would have eliminated this eventual leak.

  5. The data bailout package by David+Gerard · · Score: 2, Funny

    The UK government has approved a 700 billion megabyte bailout to stop the Data Crunch causing the End of the Internet.

    Rather than just giving the data to those who have it already, the government is distributing everyone's information free. "We feel that there is strong bipartisan support for a bottom-up data distribution initiative, such that everyone everywhere can share in the data generated and held by government," said a spokesman whose name was lost.

    Reports that Neo-Nazi organisations are asking for "lost" data disks with the name and address of every immigrant in the country are as yet unconfirmed.

    --
    http://rocknerd.co.uk
  6. Note to self... by Anita+Coney · · Score: 4, Insightful

    The buyer immediately went to the police, who initially treated it as a joke; when they realised he was serious, they swooped on his home and seized his camera and PC.

    ... never do the police a favor in the UK.

    But then again, in the US they would have tasered him for no reason.

    --
    If someone says he and his monkey have nothing to hide, they almost certainly do.
    1. Re:Note to self... by Anonymous Coward · · Score: 5, Funny

      ... never do the police a favor in the UK.

      But then again, in the US they would have tasered him for no reason.

      You are badly misinformed. American police do NOT ever, under any circumstances taser people for no reason.

      They taser them because it is funny.

    2. Re:Note to self... by Bender0x7D1 · · Score: 2, Insightful

      The sad thing is - I think this is insightful instead of funny.

      --
      Reading code is like reading the dictionary - you have to read half of it before you can go back and understand it.
    3. Re:Note to self... by Anonymous Coward · · Score: 5, Informative

      Tasers work!

      Just the other day there was a man on a ledge and the police were afraid he'd jump.
      He wouldn't come down, so they Tasered him!

      He came down quickly after that, I assure you. http://ca.news.yahoo.com/s/capress/080925/world/stun_gun_death_2

  7. Talking to the Police is a bad Idea by SendBot · · Score: 4, Insightful

    I think the individual would have been better off (as in, not having his home raided and property taken) to have just given the data to wikileaks.

    In response to MI6's ineptitude, the authorities have attacked the innocent person attempting to help them.

    Remember kids, talking to police is not usually in your best interest. Be polite and complicit within your rights, but don't volunteer information.

    1. Re:Talking to the Police is a bad Idea by srjh · · Score: 3, Insightful

      Presumably MI6 would be able to track down the camera, and hence the buyer, from the photos (then again, they were inept enough to release the camera to begin with, but I digress).

      Acting purely in self-interest, if this happened to me, I'd chuckle to myself quietly about the idiocy of government, delete the files and forget about the whole thing. In fact, if this is what any reasonable person would do while acting in their own interests, one has to wonder how under-reported the problem is.

    2. Re:Talking to the Police is a bad Idea by Just+Some+Guy · · Score: 4, Insightful

      I think the individual would have been better off (as in, not having his home raided and property taken) to have just given the data to wikileaks.

      "Hey, our national security data turned up on Wikileaks! I wonder how it got there. Oh look, a serial number in the EXIF data. What'd we do with that camera anyway?"

      Basically, the poor guy was screwed. He reported the problem and suffered for it. If he didn't report it at all, an audit at MI6 might have turned up the problem and they would have confiscated everything he owned capable of storing the data, possibly including himself.

      If he'd followed your harebrained advice, he would probably be dead. Seriously, what part of "taunt the TLA" seems like a good idea to you?

      I feel badly for him. My sig is normally meant to be humorous.

      --
      Dewey, what part of this looks like authorities should be involved?
    3. Re:Talking to the Police is a bad Idea by MasterOfMagic · · Score: 3, Informative

      And we all know since there's no specification for EXIF data that someone who has a vested interest in removing it would be unable to figure it out.

    4. Re:Talking to the Police is a bad Idea by IndustrialComplex · · Score: 2, Insightful

      It really sucks for all involved.

      These agencies do NOT want to accidentally leak information. This guy did NOT want to find this information on his camera. There is no need to 'punish' these organizations for the leaks. Trust me, they don't like it as much as you do, and they will investigate and correct why that happened. Publishing the data is perhaps the worst thing that anyone could possibly choose to do. It compromises the intelligence gathering, and puts people at risk. It is unfortunate that they had to confiscate his computer, but at least they did work to replace it, and hopefully the data on it can be scrubbed and sent back to him.

      Just imagine this situation:

      Photos are published on Wikileaks.
      Suspect A: Hey, that guy on wiki leaks looks like you.
      Suspect B: Holy crap, that is me. But, the only person with me at the time was Bob...
      Three weeks later, Bob's head is found along the side of some rural highway, and suspect A, and B have vanished.

      Publishing that information would be a VERY bad idea.

      Like I said, the situation sucks, but so does having a tree limb fall on your car. Sure, you have insurance, but you would rather not have to use it.

      --
      Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
    5. Re:Talking to the Police is a bad Idea by rnelsonee · · Score: 2, Insightful

      I would have just given the data to MI6. Maybe it's because I'm overly supportive of the intelligence community as a whole due to the nature of my work, but I would think that intelligence officials should be the ones handling this data and would not feel weird about just calling them. This doesn't fall under under police duties, and unless the police have classifications, they shouldn't be handling the data. Obviously, it's 'out there' and the eBay buyer shouldn't be looking at it, but he obviously couldn't help it, and at this point you want to contain the information as much as possible.

      Contacting MI6 directly will get the data contained faster, with much better "customer service" than the police. MI6 screwed up, they will want to contain their mistake, and they should certainly recognize that by reporting this leak, you are helpful, not some criminal.

  8. No Good Deed... by maz2331 · · Score: 5, Insightful

    ever goes unpunished.

    If someone comes to you, DO NOT attack them! Be nice, assist in getting any secret data purged, and sign a confidentiality agreement, and give the guy a nominal reward.

    Raiding the house of someone who does the right thing is a pretty strong incentive to never help out again, and a strong incentive for others to do so as well. It also feeds the radical opponents' propaganda machine with fresh fodder and lets them become the "persecuted good guys".

    So don't do it. Know who your friends are, and don't mess with them. Or they may stop being your friend.

    Western societies and governments have enough enemies already, and there is no need to create any more.

    1. Re:No Good Deed... by soulsteal · · Score: 2, Informative

      What the summary leaves out is that they seized his equipment and then "reportedly replaced the seized equipment, at a cost of £1,000." So it's not like they grabbed it and ran. If he got proper return on what was taken, then it doesn't sting so much. MI6 still look like idiots though.

    2. Re:No Good Deed... by element-o.p. · · Score: 2, Informative

      As has been mentioned many, many times above, the computer equipment is important, but it's the *data* on said equipment that contains the real value. Did they replace the data as well as the computer, or did they just provide him with a new computer? No matter how nice the machine, I for one would still be extremely pissed if all the photos of my family, the music I have written and recorded, ten years' worth of programming work, etc. were suddenly taken away and not replaced.

      As for everyone screaming "make backups!!!", that may not be sufficient. For example, I *do* make backups but they are on a second hard drive inside my desktop computer. Some of the data is also backed up to a second computer sitting about three feet from my desktop, but did anyone think that perhaps the police took *every* computer in this guy's house -- not just one? Not everyone -- and this is especially true for those who don't work with computers for a living -- has access to off-site backup computers.

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  9. Incidents by Anonymous Coward · · Score: 5, Interesting

    17 September 2008 The Insolvency Service. Laptop containing personal details of 385 former directors of insolvent companies has been stolen. Greater Manchester Police are investigating the burglary, which happened on 28 August. The Insolvency Service said 385 ex-company directors had been affected and also about 150 people with a connection to the firms. Information on the company directors included name, address, date of birth and occupation. No bank account details were held. In relation to the creditors, complainants and employees, the data included name, address, and bank account details in a small number of cases.

    16 September 2008.
    NHS memory stick found in street. An NHS trust has apologised after a computer memory stick, containing the confidential files of 200 patients, was found in a street. It stored a summary of medical histories and patients' national insurance numbers and addresses.

    Monday, 15 September 2008 18:19 UK.
    Police admit to lost data blunder. A police force has undertaken an urgent hunt for a computer memory stick after admitting it has been lost by an officer on duty. A police force has undertaken an urgent hunt for a computer memory stick after admitting it has been lost by an officer on duty.

    Monday, 15 September 2008 18:12 UK. Trust loses 18,000 staff records. Discs containing personal information on almost 18,000 NHS staff have gone missing from a north London hospital. Discs containing personal information on almost 18,000 NHS staff have gone missing from a north London hospital.

    10 September 2008 11:34 UK
    Up to 15,000 patients' data taken
    Computer back-up tapes containing personal information on up to 15,396 patients at a surgery have been stolen. "There are 15,396 patients registered at the surgery and potentially information on all of them could be on the tapes.

    27 August 2008 12:38 UK,
    Health board lost patients' data
    A health board has tightened its security measures after the loss of two memory sticks containing patient data.

    27 August 2008 12:05 UK Taxpayers' details found on eBay. A Leicestershire council is investigating a report that a computer containing taxpayers' personal details was sold on auction website eBay. Bank account numbers and sort codes of people in the Charnwood Borough Council area were reportedly found after the equipment was sold for £6.99. Information including bank account numbers, telephone numbers, mothers' maiden names and signatures of customers of American Express, NatWest and the Royal Bank of Scotland (RBS) were reportedly found on the computer.

    Thursday, 21 August 2008 22:56 UK
    Company loses data on criminals

    A contractor working for the Home Office has lost a computer memory stick containing personal details about tens of thousands of criminals. The lost data includes details about 10,000 prolific offenders as well as information on all 84,000 prisoners in England and Wales.

    9 August 2008 13:06 UK
    BBC sorry after TV data is stolen
    The BBC has apologised after a memory stick containing the personal details of hundreds of children who had applied to take part in a TV show was stolen. Deverell also informed parents they could call a free helpline if they had concerns about the lost data - which included names, addresses, dates of birth and phone numbers.

    29 July 2008 09:42 UK
    Missing laptop data not 'at risk'
    A laptop computer from the Citizens Advice Bureau in Coleraine has gone missing. The details of about 7,000 people were on the computer of an outreach worker from the voluntary group which was mislaid in transit.

    Wednesday, 23 July 2008 14:17 UK
    Surgery patients' data is stolen
    Information on more than 3,500 patients at a surgery in Greater Manchester has been stolen, health bosses have said.

    22 July 2008 20:56 UK
    'Spying' requests exceed 500,000
    More than 500,000 official "spying" requests for private communications data such as telephone records were made last year, a report says. Police, security services and other p

  10. Police = morons by JustNiz · · Score: 3, Insightful

    > The buyer immediately went to the police, who initially treated it as a joke; when they realised he was serious, they swooped on his home and seized his camera and PC.

    So basically he got punished for doing the right thing. I bet that will make other people want to tell the police too *NOT*.
    Police = morons.

  11. the lesson by jipn4 · · Score: 3, Funny

    Next time, send the data anonymously to Wikileaks.

  12. Re:That was harsh. by Rob+T+Firefly · · Score: 3, Informative

    I hope they intend to replace it

    TFA: "The police have reportedly replaced the seized equipment, at a cost of £1,000."

  13. What is this world coming to? by PhasmatisApparatus · · Score: 2, Insightful

    The police not only failed to have him shipped off to Guantanamo Bay, they actually replaced his £1,000 computer that they had seized it as evidence?

  14. kill the messenger by Tom · · Score: 3, Insightful

    That's how you make friends and teach people to trust you. A guy wants to help out and you punish him, instead of treating him like the friend of law enforcement that he wants to be.

    --
    Assorted stuff I do sometimes: Lemuria.org
    1. Re:kill the messenger by ramirez · · Score: 2, Insightful

      I think that having the computer confiscated, and also having it publicly known that it was confiscated is in the best interests of the guy who received the camera. If it became known that the camera was seized, but it was possible that the computer wasn't, then it would make sense for any intelligence agency who wants to know what was in that camera to break into the guys house and take it. I don't know about you, but I definitely don't want spies from foreign countries breaking into my house, and potentially endangering me and my family, because my computer might have information valuable to them.

  15. Re:WTH by Itninja · · Score: 2, Interesting

    I used to work as a tech consultant for a mortgage company. They told me that, since they did government loans, the FTC required them to comply with certain privacy standards. Until I came along they were just deleting all the data on the HD's and then selling old computers. When I showed them how deleted does not necessarily mean gone, they were shocked. Then they started smashing them with hammers and throwing them away. The next time I came by I told them how they could use certain utilities to really the data and avoid tossing the drive in a landfill.

    --
    I judt got a nre Kinesis keybiartf so please excusr ant egregiou typos.
  16. His computer was classified by mbone · · Score: 2, Informative

    I strongly suspect that the computer was used to look at the photos, which means it downloaded them, which means that it had classified information on it, so of course they seized it.

    I hope he had an offsite backup.

    1. Re:His computer was classified by dgatwood · · Score: 5, Insightful

      Yup. What did we learn, boys and girls? (Okay, I know I'm being optimistic on that last part.) If you find yourself with evidence related to a terrorism investigation because an inept government official sold it on eBay, don't go to the police. Send it to the media. Anonymously.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:His computer was classified by Jabbrwokk · · Score: 5, Insightful

      Damn straight. People should not be punished for being honest.

      Government agencies, however, should be publicly punished for being incompetent.

      I imagine that if the man had given the camera to the media, the police could have swooped down on the news outlet and confiscated their computers, but then they would be in a much bigger fight with the Fifth Estate rather than some poor schlub who can't fight back.

      Here's hoping the free press continues to stay free.

  17. Good deal by Lucas123 · · Score: 4, Funny

    He got a Nikon Coolpix camera for £17? Holy crap. What a great deal.

  18. Profit!! by LingNoi · · Score: 4, Funny

    1) Sell camera on ebay
    2) Wait for buyer to report MI6 photos
    3) Steal Camera back
    4) PROFIT!!!
    5) Go to 1