Slashdot Mirror


US Government Sets Up Online "App Store"

krapper writes "The Obama administration has unveiled a government 'app store' designed to push the federal bureaucracy into the era of cloud computing. The change means some federal employees will begin using services like YouTube, Gmail and WordPress, which store data on private internet servers instead of on those paid for with public money. The process will start small but will ramp up quickly, Vivek Kundra, the US chief information officer, said in a blog post on Tuesday. 'Our policies lag behind new trends, causing unnecessary restrictions on the use of new technology,' Kundra writes in the post on WhiteHouse.gov. 'We are dedicated to addressing these barriers and to improving the way government leverages new technology.' The app store is designed for federal employees doing official government business and is not intended for use by the public."

36 of 138 comments (clear)

  1. Cloud services by Anonymous Coward · · Score: 5, Funny

    federal employees will begin using services like YouTube, Gmail and WordPress

    Maybe this means Joe Wilson can troll 4chan instead.

    1. Re:Cloud services by cayenne8 · · Score: 3, Insightful
      Actually, my first thought on reading this article was..GREAT!! You can now just buy your congressional representative online, and not have to go through a lobbying firm.

      Go to the .gov app store, click on your fav. representative, and send them your issue and PayPal contribution.

      Sounds much easier to me!!

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    2. Re:Cloud services by cayenne8 · · Score: 2, Insightful

      One thing we should do, is repeal the amendment that allowed senators to be elected rather than appointed by the states' congress'....that used to keep at least the senate answerable to the states rather than lobbyists.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
  2. And Gov2.0 considers Trusted Computing a key by KNicolson · · Score: 2, Interesting

    I wonder how this is related to a recent announcement of Wave System, OpenID, Google, PayPal, etc into an initiative to have a single sign-on for e-government?

    1. Re:And Gov2.0 considers Trusted Computing a key by Anonymous Coward · · Score: 5, Interesting

      I'm not sure how a TPM can establish identity. Fundamentally, a TPM is a cryptographic token that can accept a key or a passphrase, and has the option to seal it and keep it sealed until the right boot code is passed through it. Other than that, it is fundamentally just a smart card fixed onto a computer's motherboard.

      A TPM wouldn't be good for validating a user, who can be using that machine, a phone, a jaw harp, or a beer mug with an IP stack for access. A TPM can validate that the first part of an OS boot was not tampered with on a machine, as well as store some private keys that are usable only on that box. The advantage of this would be for this is ensuring that an attacker can't just replace the MBR with a keylogger, then later on, steal the laptop in a two phase black bag attack.

      For a single sign on for users, the US government already has a large and well established system, the DoD's Common Access Card.

      Fears of a national ID card aside, using a smart card for access can be a very good thing. No passwords can be sniffed, it is quite easy to use client certificates (the server doesn't have to care one whit if a client's key is on a card, in Firefox's key storage, or in a TPM), and allows shorter passwords to be used, because all it would take is 3-15 (usual default settings on smart cards) bad attempts, and the smart card will either block further attempts until reset, or permanently brick itself needing replacement. Phishing would be useless because all a phisher would get is "yay, this user has connected to your web server with a valid certificate". The main way a smart card can be compromised would be malware that would grab the user's PIN via a keylogger, then use the smart card (if inserted) to sign/decrypt stuff in the background.

      Finally, a large number of security programs like TrueCrypt can use smart cards. I have on a laptop TC protected volumes for a VM that runs my Quicken. If someone steals the laptop and manages to get past BitLocker (RAM dump while the box is on), they would need to have the passphrase, the PIN from the eToken, and the eToken itself, to be able to mount that volume. A couple wrong guesses, the eToken zaps itself, so that gets rid of the brute forcing route in. (Of course, rubber hose crypto does work, but my biggest security scenario is silent theft of the laptop, not seizure and interrogation of the owner.)

      Disclaimer: TPMs are double edged swords, and they can be used to enforce DRM stacks, but I consider them a good thing in general. Especially because by the TCG spec, they are to be shipped disabled and unowned, so software companies cannot assume every computer user has one and can use it for copy protection.

    2. Re:And Gov2.0 considers Trusted Computing a key by cayenne8 · · Score: 2, Informative
      "the US government already has a large and well established system, the DoD's Common Access Card."

      Yes, but, from what I've seen...pretty much ONLY the DoD uses that system. And knowing how turf wars go with gov. agencies..I doubt they want to share that system.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
  3. So once the gov't depends on these companies... by Anonymous Coward · · Score: 5, Insightful

    ...they'll be too important to fail?

  4. The Term 'App Store' is Becoming Over Used by CodeBuster · · Score: 4, Insightful

    Since when did the term 'App Store' come to describe any server offering applications for download? I swear, once the marketers get their hands on a new tech term, what comes out the other end is pure and unadulterated bullshit. Soon the term 'App Store' will have about as much meaning as 'The Cloud' and the marketers will have moved on to their next buzzword kill.

    1. Re:The Term 'App Store' is Becoming Over Used by mlts · · Score: 5, Insightful

      Agreed. This seems to be more of an official non-classified download repository than anything else. If I were in a small business and called their samba share that had the install images of Office, Acrobat, and other licensed packages for internal use an "app store", I'd be looked at by their IT people like I was some troll or pirate.

      To me, a true "app store" is something like Apple's offering, Handango, Digital River, or a place where one looks through a catalog and either downloads a demo, or pays a license fee, then gets an executable to download.

      There are some things I'd like to see the USG do though, if they are offering a large repository like this for internal use. The first thing is to PGP or gpg sign everything on the store so if it gets tampered with, one can find the app that has no or an invalid signature. (I'd also like to see Authenticode signing on Windows installs, and gpg package signing on BSD/RedHat/debian as another method that is transparent to the user, but will alert them if something is not right.)

    2. Re:The Term 'App Store' is Becoming Over Used by syousef · · Score: 4, Funny

      Agreed. This seems to be more of an official non-classified download repository than anything else. If I were in a small business and called their samba share that had the install images of Office, Acrobat, and other licensed packages for internal use an "app store", I'd be looked at by their IT people like I was some troll or pirate.

      A+++++++++++++++ commenter. Would read again!

      --
      These posts express my own personal views, not those of my employer
    3. Re:The Term 'App Store' is Becoming Over Used by dkf · · Score: 2, Interesting

      Agreed. This seems to be more of an official non-classified download repository than anything else. If I were in a small business and called their samba share that had the install images of Office, Acrobat, and other licensed packages for internal use an "app store", I'd be looked at by their IT people like I was some troll or pirate.

      But the government isn't like a small business. It's like a very large business, and that sort of concept has been around for a while; we do the same thing for applications here with a secure webserver that employees (and students since we're a university) can download install images from, with appropriate invoices being generated internally if necessary afterwards (depends on what sort of license was negotiated with the vendor).

      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
    4. Re:The Term 'App Store' is Becoming Over Used by mcgrew · · Score: 3, Funny

      They need lots of bullshit to fertilize their money trees.

  5. How is this going to help.. by introspekt.i · · Score: 3, Insightful

    ..With transparency? Hell the federal government can't account for the money it's spending (by knowing where it's being spent), much less keep track of many of its records. I'm curious to see how spewing them all over the Internet is going to help us track on everything.

    1. Re:How is this going to help.. by bertoelcon · · Score: 3, Insightful
      Actually the federal government probably could account for the money its spending, but they like staying in power and nobody really calls them out on it in a way they would be forced to respond.

      But it really is transparent as in you can't see it (mostly because its not there).

      --
      Anything can be found funny, from a certain point of view.
    2. Re:How is this going to help.. by moosesocks · · Score: 2, Interesting

      Simple. Joe Biden signed up for an account at Mint.Com. Our financial problems are over!

      (Serious aside: The Fed could/should employ a team of designers and information experts (a la Edward Tufte or this guy) to help improve the transparency and operational efficiency of the government. Mint.com has some great examples of boring/old data presented in a fresh, informative, and visually-attractive manner. There's plenty of scientific evidence showing that aesthetics can improve cognition. The Obama administration have done an admirable job on this front compared to their predecessors, but there's still more to be done, particularly at the congressional level)

      (Second aside: Mint.com were purchased by Intuit yesterday. Ew.)

      --
      -- If you try to fail and succeed, which have you done? - Uli's moose
    3. Re:How is this going to help.. by DrEldarion · · Score: 3, Informative

      Hell the federal government can't account for the money it's spending

      Really? They seem to have a handle on it to me.

    4. Re:How is this going to help.. by B1oodAnge1 · · Score: 3, Interesting
      --
      RUGBYRUGBYRUGBY
    5. Re:How is this going to help.. by divisionbyzero · · Score: 4, Interesting

      I'm more worried about accountability. Any information posted or otherwise maintained on a private server is not subject to FOIA. It's protected by the 4th Amendment which is a much higher bar. This is the same as when Cheney used a private mail address for government business.

  6. Re:Great! by Anonymous Coward · · Score: 3, Insightful

    haha.. can you say - security breach?

    i trust google more than i trust the lowest bidder for a government contract.

  7. Need to audit an American? by 93+Escort+Wagon · · Score: 3, Funny

    There's an app for that.

    --
    #DeleteChrome
  8. Oh come on, you are being rediculous by Anonymous Coward · · Score: 5, Informative

    The first link is about Obama staffer's former colleague being investigated for crime. I don't even know what or whose fault are you trying to imply with that.

    The second link is about the said staffer having committed a crime before. He shoplifted as a lot younger man, over a decade (13 years, to be exact) ago. He pleaded guilty and paid the fine... The "once a thief, always a thief" doesn't really apply to stuff like that. I myself shoplifted a few times when I was a teenager. I can understand a young man getting the small rush of doing something wrong there, with immediate risk of getting caught... It doesn't even imply that 13 years later one would have tendency to become corrupted or something.

    So, what could possibly go wrong?

    I think this is a great idea, as long as the programs the government will use will encrypt the data properly before storing it outside their servers. (though even that won't be necessary. I'm sure they won't use gmail for "top secret documents ;) )

    1. Re:Oh come on, you are being rediculous by 99BottlesOfBeerInMyF · · Score: 2, Funny

      Unless they take pictures of their own swimsuit parts. That makes them evil!

      Swimsuit parts? Like straps and that mesh lining stuff?

  9. Giovernment App Store? Cool! by ahodgkinson · · Score: 3, Funny

    Fantastic. An App Store puts democracy back into the hands of the ordinary citizen.

    In fact, I think open an account right now, and buy myself a congressman.

    --
    ---- It won't be as bad as you fear or as good as you hope, but it will take twice as long as you plan.
  10. FOIA and "Transparency"? by The+Wooden+Badger · · Score: 2, Interesting

    I don't know. I thought keeping data on old clunky servers is kind of necessary for purposes of the Freedom of Information Act and this whole "transparency" idea. They are going to start storing data in gmail and youtube accounts? Maybe I'm missing something, but this doesn't feel right.

    --
    Heroscape, it's like legos combined with anachronistic wargames.
  11. Re:Great! by Joakal · · Score: 3, Interesting

    How about completely opening the entire authentication systems up? All the methods being proposed are closed systems. There are systematic refusal to accept new corporation/sites/etc as a form of authentication without being celebrity, monopolist or payment for certificates, etc. Recently, I created a browser-based trust initiative here: JRep project Although I initially came up by means of browser-based trust transfer but I believe this can be tweaked for authentication transfer. Bonus: It's completely open and free because I want it that way.

  12. Apple's attorneys are going to be all over them by MichaelCrawford · · Score: 2, Interesting
    I'm pretty sure "App Store" must be some kind of Apple trademark.

    However, it is possible to lose the rights to your trademark if it falls into common use. That's why so many companies defend their marks so vigorously.

    --
    Request your free CD of my piano music.
  13. Re:The bigger question is... by MrMista_B · · Score: 2, Insightful

    Huh.

    So - do you think Canada, Switzerland, France, Germany, Austria, Australia, and Britian, to name a few, are the equivalent to or worse than Hitler's Nazi Germany?

    Personally, I think you're just ignorant of both recent and long-term history. Fortunatly, that can be cured by education, if you're willing to make the effort. You seem ignorant of both Nazi history, as well as the histories of nations in general, especially those called 'socialist' by those who don't know what the word means.

    I understand that you believe the ideals you hold, but I don't think you've ever examined them. I hope you're willing to educate yourself, someday - you seem like an intelligent person, but you're missing quite a few (objective, verifiable) facts as to the reality of the world you life in.

  14. Re:The bigger question is... by Anonymous Coward · · Score: 4, Informative

    My economics textbook reads: "Where socialism sought totalitarian control of a societyâ(TM)s economic processes through direct state operation of the means of production, fascism sought that control indirectly, through domination of nominally private owners. Where socialism nationalized property explicitly, fascism did so implicitly, by requiring owners to use their property in the âoenational interestââ"that is, as the autocratic authority conceived it. (Nevertheless, a few industries were operated by the state.) Where socialism abolished all market relations outright, fascism left the appearance of market relations while planning all economic activities. Where socialism abolished money and prices, fascism controlled the monetary system and set all prices and wages politically. In doing all this, fascism denatured the marketplace."

    This actually does sound a lot like what the Obama administration is doing with healthcare reform, the economy, and the auto industry to a limited extent.

  15. Re:Great! by dkf · · Score: 2, Interesting

    How about completely opening the entire authentication systems up?

    It's exceptionally difficult to build an entire end-to-end authentication system, and it's massively more complex if you have more than one vendor. This is stupid - there are plenty of open specifications in this area - but nonetheless true. Part of the problem is that there's so many different ways to put the bits together in a manner that will work, and there's no easy way to either bridge between them or understand which is best for a particular situation. Add in the fact that irritatingly much of the security parts of a system tend to end up in the other layers of applications (it seems to be nearly impossible to stop that) and you get horrendous levels of lock-in to particular solutions.

    It's a crappy situation, and I don't blame anyone for going with a single vendor. At least then they get their security exposure down (which is definitely the most important part).

    --
    "Little does he know, but there is no 'I' in 'Idiot'!"
  16. Re:The bigger question is... by thasmudyan · · Score: 4, Insightful

    Because their political ideals are closer than one would expect. Go read up on nazism, and fascism. You'll see the similarities these ways of thinking have with Obama's "progressive" initiatives.

    1. Assuming I'm uneducated is, well, uneducated.
    2. I never mentioned socialism or socialist nations.
    3. I've been to almost all the nations you cite, none are like Nazi Germany and I have no problem with modern socialism.
    4. The comments I made ARE verifiable and objective. Hitler and Obama were both "Men of the Year", they both support leftist, progressive, and fringe-science ideas and their fundamentals were/are rooted in fascism. Look it up.

    I think the assumption that you're uneducated is a fair charge. I don't even know where to begin, except maybe to suggest you should read an actual history book, probably starting with the definition of important terms. Hitler's idea of a state was a genocidal, deeply racist, right-wing extremist, fascist junta presiding over a society run purely on hierarchical peer pressure, a state further corrupted and held in power by an overreaching military-industrial complex. It was the poster child of a surveilance state that really deserved the label "totalitarian".

    If you absolutely must compare today's political ideologies with that you'd find that our contemporary right-wing parties are actually much closer to this than the left - but even Dick Cheney and Pat Robertson are not quite in the same leage as Hitler, and that's saying something. By the way, the actual socialists came in the time after Nazi Germany - so comparing Obama to Honnecker would probably make more sense for the charges you are making, which are incidentally also complete bullshit.

    I'm sorry, I don't normally go for ad hominem attacks like this, but I'm a German (so please excuse my English) and I feel very strongly about people getting their facts right as opposed to the mindless parroting of hopelessly corrupt historical fiction.

    I can't help but wonder: why didn't you people cry out when our civil liberties were taken away progressively in the time after 9/11? Now that was a lost opportunity, that was the last time when freedom was actually at stake. Not only did we lose that fight so thoroughly during the Bush administration, Obama is now actually legitimizing those changes. That would have been a fight worth our time. That would have been the moment to stand up for liberty. What did you do to prevent that? I sincerely hope you didn't just sit on your ass like I did.

  17. Actual presentation at Youtube by Ilgaz · · Score: 2, Informative

    I watched the presentation at NASA TV, it was given at NASA Ames Research Center.

    They have archive of it at Youtube:
    http://www.youtube.com/profile?v=eND7hT8JdwA&user=NASAtelevision

    That is the guy presenting the idea himself. It was interesting enough to watch it at 4 AM my local time. The numbers guy gives, like the 20% of capacity used, everyone having their own data center, it may take $600.000 (yes, 600K) to setup a weblog in certain circumstances while it is free on blogger.com like services are amazing.

    As listeners are full of govt. guys, guy repeated 4-5 times that secret/critical things won't be on cloud, outside USA etc. What matters is, they will be forcing very strict privacy and security rules to vendors.

  18. Re:Vivek Kundra is a fraud by 99BottlesOfBeerInMyF · · Score: 2, Informative

    Please, Vivek, explain away:

    Okay, that took 30 seconds with Google. Om Malik (a respected journalist not a notorious and admitted troll like Dvorak) looked into Dvorak's claims:

    http://www.examiner.com/x-10080-DC-Technology-Examiner~y2009m8d12-Dvorak-alleges-US-CIO-and-exDC-chief-is-a-fake

    In short, for all the points he had an opportunity to verify it turned out Dvorak was wrong and it was clear Dvorak had not tried very hard to look into the matter since random bloggers were able to quickly find proof using public internet resources for several items Dvorak claimed Kundra was lying about.

  19. This has been done for DECADES by Danathar · · Score: 3, Insightful

    People who are shaking at the knees about google and the federal government obviously are not aware that the government has been outsourcing data processing to offsite contractors for decades.

    Sheesh. Google is no different than ANY other contractor when it comes to the Federal government and has to abide by the same contracting rules as everybody else.

    Does this mean that it's any SAFER than at EDS, Booze Allen, Perot Systems, HP, IBM, etc? No. But it's not any less either.

  20. AEM Signed Into Law by WED+Fan · · Score: 2, Funny

    The Aconynm Elimination Mandate (AEM) was signed by the President's APP, and will be over seen by the OMB. The PTG is the TLA category to be followed by the FLA groups. The GOP oppoosition to the AEM headed by the OMB states that if the AEM is successful, millions of OGD (Official Government Documents) will be rendered unreadable.

    --
    Politics is the art of looking for trouble, finding it everywhere, diagnosing it incorrectly and applying the wrong fix.
  21. White House looking to hire a web archivist by mantis2009 · · Score: 2, Interesting
  22. Re:Vivek Kundra is a fraud by 99BottlesOfBeerInMyF · · Score: 2, Informative

    Who's the troll?

    Dvorak.

    There are legitimate questions about the man...

    Yup, questions and not answers. Questions like are you, Coolhand2120, a murderer. Asking that question without actually doing any research, when you're already a notorious troll, that's called trolling.

    Legitimate journalists looked, and so far have decided there is no story. Maybe at some point in the future someone will decide Kundra's background actually is suspicious, but not finding info with a quick Google search is not evidence that he's lying. Just as quickly googling "Coolhand2020 innocent of murder" is not in any way evidence you are a murderer or sufficient for me to start making Web posts for any reason other than trolling.