P2P Network Exposes Obama's Safehouse Location
Lucas123 writes "The location of the safe house used in times of emergency for the First Family was leaked on a LimeWire file-sharing network recently, a fact revealed today to members of the House Oversight and Government Reform Committee. Along with the safe house location, the LimeWire networks also disclosed presidential motorcade routes, as well as sensitive but unclassified document that listed details on every nuclear facility in the country. Now lawmakers are considering a bill to ban P2P use on government, contractor networks."
If it had been leaked by uploading it to a server, would they ban the ftp protocol?
GFA/M/S d-- s: a--- C++++ UBL++$ P+ L+++ !E- W++ N+ !o K- w--- !O !M !V PS++ PE Y+ PGP+ t+++ 5- X+ R tv@ b++ DI++++ D+ G
We must ban everything that we don't understand until we can feel safe again.
“Common sense is not so common.” — Voltaire
Its not P2P in itself that is wrong. It is the use. The leaked information could have wound up on a website, blog, or FTP server, and I'm almost sure nobody would be saying that those technologies should be banned.
whatever network administrator lets limewire traffic outside of the firewall needs tossed
If the leaked data was so sensitive, shouldn't it have been encrypted, or at the very, very least, password-protected? That seems like a no-brainer.
Information wants to be free.
Especially high-value information.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Biden has already told the press the secret location of the VP's emergency bunker.
http://blog.newsweek.com/blogs/thegaggle/archive/2009/05/15/shining-light-on-cheney-s-hideaway.aspx
"The average reporter we talk to is 27 years old......They literally know nothing." - Ben Rhodes
These are not commercial ISPs or home PCs we're talking about here. These are tax-payer financed networks. What business do these users have using tax-payer owned resources for downloading music/movies/etc. whether they are copyrighted or not? If you're not going to control the software installed on these workstations, at the very least the network traffic rules should not allow for this kind of outgoing traffic on client nodes.
Or it could be good old disinformation. It's hard to believe that the Fed's firewalls allow P2P traffic.
"Crude and slow, clansman. Your attack was no better than that of a clumsy child."
How could LimeWire let this happen? This is just as bad as fork and knife manufacturers who fail to keep fat, dumb people from eating too much.
I heard a "security focal" in a large helpdesk group once tell us that mp3 files were "illegal" and anyone caught with them would be charged and fired.
Going on means going far
Going far means returning
1. I was blocking Limewire (and Kazaa, etc.) traffic for clients with substantially less security exposure for years and years. Most P2P networks are just hives of viruses, malware, exploits, illict file sharing, and worse. My clients pretty much expected it. Of course, blocking Webshots gots people a little hot, but they get over it.
2. Any bets that the actual culprit was a security wonk, figuring they were smarter than the rest of the world? Very few of the 'security' folk I've worked with actually practiced what they preached. And most either wandered from job to job, or lasted only until the first noticeable breach. One of my former clients made the news a few months ago, because someone was putting USB keys into their corporate servers. Even the PKI repository. Apparently they thought a free utility they got from a friend at a user group was really useful. Not.
deleting the extra space after periods so i can stay relevant, yeah.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
Lets ban all means in which people communicate, or at least have the government moderate it. MUAHHAHAHAH
...surely you've got the cash to just buy the tunes.
they could have fabricated similar testimony 10, 9, 8, 7, 6, 5, 4, 3, 2, 1 year ago (you pick). oh wait, they did. meanwhile harddrives, laptops and usb drives keep wandering away with impunity & multi gigabytes of really sensitive data. god forbid you encrypt. much easier blame p2p on the house floor in front of the bright lights of the very media cartels who create this artificial drama.
They are not banning P2P they are banning running it on government PCs and contractors PCs.
Frankly any company that allowed it's employees to put Limewire on a work PC shouldn't be a government contractor.
See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
Now, I realize that's highly generic, but it's up to the organizational unit to write some sort of policy around the guidance. If they aren't able to do that, they're not in compliance with FISMA and the GAO should rightly be sticking a rather large boot up their ass.
"Happiness in intelligent people is the rarest thing I know."
-- Ernest Hemingway
Some leaks are good though, and necessary for maintenance of a free Republic. They are last ditch efforts by someone who is aware of "clear and present danger" when all else has failed to affect honesty and following the law in whatever bailiwick this person is working in, and usually the leakers are anything but traitors, they can be overwhelming patriots helping to expose the real bad guys and bad stuff. They can help expose government lies and corruption, when the official channels (all the way to *the very top*) are themselves completely corrupt, making any other effort doomed to failure.
Here's a prime example. This leak was a *really big deal* for my boomer generation and certainly did some good, long range/historically speaking.
You're joking, right?
Almost every computer that handles classified information for the DoD is connected to a network. Not the Internet of course, but SIPRNET or one of the 30 or so other classified networks, depending on classification level and other considerations. I don't recall ever needing "a key, a passcard, and supervision" to access any of them, just a user name and password, like every other computer.
Damn near nothing is paper only anymore, and any time I needed a copy of a document I clicked the "print" button in Word or Acrobat, walked over to the printer and grabbed it. And yep, I can email them too! Only to accounts on the same network of course, and I am ultimately responsible for determining whether or not the recepient has the appropriate clearance and need to know, but it's that simple.
Lots of things are sensitve but unclassified (also known as SBU).
I hate calling people out like this, but you're spouting lots of FUD. You're either intentionally lying about how things work, or you've never had any contact with anything classified and are rattling off garbage that you either made up or pulled from some crappy novel.
Jeremy http://alucinari.net