Slashdot Mirror


Data Breach Exposes RAF Staff To Blackmail

Yehuda writes "Wired reports, 'Yet another breach of sensitive, unencrypted data is making news in the United Kingdom. This time the breach puts Royal Air Force staff at serious risk of being targeted for blackmail by foreign intelligence services or others. The breach involves audio recordings with high-ranking air force officers who were being interviewed in-depth for a security clearance. In the interviews, the officers disclosed information about extra-marital affairs, drug abuse, visits to prostitutes, medical conditions, criminal convictions and debt histories — information the military needed to determine their security risk. The recordings were stored on three unencrypted hard drives that disappeared last year.'"

19 of 153 comments (clear)

  1. Tell me... by orngjce223 · · Score: 4, Insightful

    why didn't they just encrypt the disks? If it's supposed to be sensitive information, store it securely!

    --
    Note: I was 13 when I wrote most of this. Take with several grains of salt.
    1. Re:Tell me... by canipeal · · Score: 5, Insightful

      why didn't they just encrypt the disks? If it's supposed to be sensitive information, store it securely!

      Because that would require common sense and competence.

    2. Re:Tell me... by 91degrees · · Score: 4, Insightful

      Requires competence. Most non-techies aren't aware that you can encrypt disk drives. They're also not aware that the Windows Password does nothing to protect the data if the device is physically stolen. Lack of common sense isn't really a fair criticism. Lack of competence certainly is.

  2. Re:Since the RAF already knows... by Anonymous Coward · · Score: 5, Funny

    um, just because your boss knows something embarrassing, it doesn't mean your wife, family, whole world needs to know.

    On the other hand, if your boss has special forces, it could work to your advantage...

    Idiot: "Sir, you know that midget fetish I spoke about during the security interview?"

    Chief Idiot: "Yes? I really quite enjoyed that bit. Quite naughty!"

    Idiot: "Well, there are some chaps who think they can hold it over me, for a few quid, per week... not tell the missus, and all."

    Chief Idiot: "Oh, well, that's not right, I'll send some SAS over there ASAP and they won't be a problem anymore."

  3. Re:Since the RAF already knows... by compro01 · · Score: 4, Interesting

    Sounds like a convenient way to legally fire or reassign someone.

    --
    upon the advice of my lawyer, i have no sig at this time
  4. Mr. Bean, Ministry of Defence Internet Security by leftie · · Score: 5, Funny

    "Ummm..."

  5. I feel MUCH safer now! by hyades1 · · Score: 5, Insightful

    These are the same idiots who are putting surveillance cameras everywhere, fingerprinting and taking DNA samples from musicians who are simply visiting the UK to play in a few clubs (then denying them entrance because the clubs hadn't paid a fee and agreed to report on them), and generally acting like fascists.

    They're great at grabbing reams of private information they would have no right to if Britain were still a free society. Protecting it from unauthorized access? Not so much.

    Goddamn wankers!

    --
    I've calculated my velocity with such exquisite precision that I have no idea where I am.
    1. Re:I feel MUCH safer now! by BlackSabbath · · Score: 4, Insightful

      Indeed. I find it ironic that a nation that increasingly acts as if every citizen were a potential enemy of the state, is so free with information that could aid real enemies of the state.

      I do so wish George Orwell were alive to see the UK now.

  6. Re:Damned if you do... by MichaelSmith · · Score: 5, Insightful

    How sick would a person have to be to be incapable of disloyalty?

  7. An information society by jasonmanley · · Score: 4, Funny

    It seems to me that many organisations would consider payroll, health and other HR info as private and hence restrict access to it on the network, but they wouldn't consider encrypting it with a passowrd - well at least nowhere where I have worked.
    And perhaps military institutions consider attack plans, weapons secrets and such as worthy of protection but not an "inteview" that we did "ourselves", "inhouse".
    We are learning more and more that this is a connected world - yes even your fridge will have an IP address and be on the net one day mark my words and EVERYTHING will need to be encrypted. Encryption grammar and other security verbiage will be second hand speak for moms and kids ...
    "have you packed your lunch"
    "Yes mom"
    "And MD5 SSL'd your homework via the kerebos LDAP certificate server? You know what happened last time when Mr Jones found your SSH key unencoded on the SELinux partition - I don't want to go through that again"
    "Arghh yes mom I have been over this 1000 times with you let it go - my friends and I were scanning photons of the prom dance when James accidentally Bluetoothed a letter from his brother in the army to Amy's communication jewellery which had a compaible 3DES encrytpion algorithm - now will you let it go!? Shees!"
    "I'm just saying is all - I have to go and buy some groceries and when I scan my embedded subcutaneous barcode it better not say that I have been SQL Injected because of a bad CRC checksum - I won't be embarrassed like I was the last time"

    --
    http://projectleader.wordpress.com
  8. please explain by Swampash · · Score: 4, Insightful

    Someone wanna explain to me how drug-using hooker-banging ex-cons are OFFICERS IN THE ROYAL AIR FORCE?

    1. Re:please explain by bloobloo · · Score: 5, Informative

      Drug using: As long as it isn't in the last year, it isn't an instant fail

      Hooker-banging: Not a crime

      Ex-cons: In the UK, the Rehabilitation of Offenders Act means that after a certain period of time a conviction can be considered "spent"

    2. Re:please explain by Tom · · Score: 5, Insightful

      They're humans just like the rest of us?

      The list mentioned in the summary is probably from the topics/questions asked about. That doesn't mean that everyone of the subjects - or even just one of them - has an affirmative answer in all of them. I suspect the truth is rather boring, with one officer having done some drugs in his youth, a different one having an affair, a third one preferring professionals, several with completely clean sheets, someone with a conviction for some minor (but criminal) stuff done before he joined the force, etc.

      If you have to lay open your entire history - and background checks work like that - then it's very unlikely that you would find enough people with perfectly white shirts in the entire commonwealth to staff even one airforce base.

      --
      Assorted stuff I do sometimes: Lemuria.org
  9. viral marketing??? by zetabrown · · Score: 5, Funny

    "extra-marital affairs, drug abuse, visits to prostitutes, medical conditions, criminal convictions and debt histories " - sounds like a viral marketing campaign for the RAF if you ask me - who knew that they had so much fun! I suppose the word 'raffish' had to come from somewhere.

  10. Re:Damned if you do... by h4rm0ny · · Score: 4, Interesting


    A lot of the people hiring will have indulged in all these behaviours and wont condemn someone for them. Rather it will make them part of the club. Use of prostitutes in the armed forces? Goodness - that could never happen! With some groups, the person who never touched drugs, doesn't pick up prostitutes is the one that makes everyone else uncomfortable. In Bosnia, the private military firm DynCorp was actually buying girls as forced prostitutes (and I do mean girls - some were fifteen. And this were US soldiers). Related, its one of the reasons women face a 'glass ceiling' in some areas, such as the upper military, high finance, etc. It's because the wealthy / powerful men who are accustomed to doing as they please feel uncomfortable saying: "hey lets all do some lines and pick up some hookers" when someone from "the other side" is amongst them.

    --

    Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  11. UK Government loses all data on everyone by David+Gerard · · Score: 5, Funny

    Annual reports from Whitehall departments show that the government has lost all data it ever held on anyone.

    Losses have occurred through couriered unencrypted disks, misplaced memory sticks, lost laptops, briefcases left on trains and files falling down the side of the tea machine. "The real scandal is that a train was running for them to lose a case on," said a source whose name has been lost.

    Treasury minister Jane Kennedy said the HM Revenue and Customs breaches did not necessarily result in data losses, or at least any that they have records of. HMRC said it takes data losses and security breaches "very seriously" and thoroughly investigates any breach that it does not lose track of.

    Information Commissioner Richard Thomas has served enforcement notices on various departments for their data losses, but the departments in question could not find their office addresses to accept the notices. They noted, however, that Mr Thomas' call was very important to them, and that he had been placed in a queue.

    Home Secretary Jacqui Smith reassured citizens that plans for an all-encompassing ID card linked to biometric passports and a universal medical record with the NHS would not change because of these losses. "We won't even be thinking about them."

    --
    http://rocknerd.co.uk
  12. Re:Damned if you do... by LaskoVortex · · Score: 4, Insightful

    If yes to any of the above do you want these as officers?

    If you threw out everyone who has ever done that one "immoral" thing, you'd have no one left. Everyone makes mistakes. Its even in the bible somewhere--a story about throwing stones (disclaimer: never read the bible). These are officers of a military. They are trained to kill people. Measure the morality of their actions against that fact and you'll find that indulging in something like and extramarital affair is minor by comparison. My only surprise is here is the lack of encryption.

    --
    Just callin' it like I see it.
  13. Re:It's no wonder... by noundi · · Score: 4, Funny

    Oh my god the UK recorded something and it leaked! Who could have ever imagined this possible outcome!?

    --
    I am the lawn!
  14. Re:When were we a free society? by Opportunist · · Score: 4, Insightful

    We gained more and more freedoms over time. Looking back, we certainly enjoy more freedoms today than we did a hundred years ago, at least in Europe. Most of mainland Europe was ruled by autocratic kings and emperors who restricted the exchange of ideas and discussions, criticising the government was often close to high treason. We sure came a long road from this.

    When you look at it with a finer grained system, you'll notice, though, that liberties are in decline, though, and have been since the 1960s, at least in my perspective. It's been especially rough in the last ten or so years, when people all over the world could easily communicate with each other and exchange ideas much more easily and rapidly than ever before. Such things frighten governments and other powerful people. Because it's also never been easier to "spill the beans" and whistleblow.

    Government and industry are quite close to each other these days, and neither wants some of their practices to be smeared all over the planet, for everyone to read. It's never been easier for people to get information into circulation, content is not just music and movies, it's also information and ideas, and they can be spread, multiplied and distributed just as quickly.

    And that's what scares not only the content industry, but everyone who could be threatened by the quick distribution of any kind of information.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.