Slashdot Mirror
Swedish Police Use WhatsApp For Surveillance Ops, Share Intel With Civilians
New submitter TheP4st writes "A group of Swedish police officers thought it would be a good idea to use WhatsApp as a work tool for surveillance operations. The officer that set up their chat group mistyped one of the phone numbers to mistakenly include a civilian IT teacher. Once the teacher informed authorities about the mistake, it took more than 24 hours before he stopped receiving sensitive case information, which included criminal records, passport photos, and communications between surveillance teams tailing suspects. When confronted by Computer Sweden (Google translation of Swedish original), the officer responsible for setting up the group said, 'I know this server is not located in Sweden and that one cannot share every kind of information.' The only mobile chat medium approved for sensitive information is BlackBerry, and this initiative by a small group of officers happened because they do not have access to BlackBerry handsets."
The only mobile chat medium approved for sensitive information is BlackBerry, and this initiative by a small group of officers happened because they do not have access to BlackBerry handsets.
This problem could have been solved in two ways: 1. Get Blackberries, 2. Upload sensitive data to a private company in a foreign country. It's shouldn't be this easy to pick the wrong one.
And this is why i use Telegram.
And why you should, too.
Truly cross-platform (even PC!)
A shoddy chat app that is hardly good enough for personal communication is used for sensitive police work? And if they hadn't used that, they would have used fucking Blackberrys, which also store everything on foreign servers? Does the Swedish police not have an IT department which can provide them with secure communication tools?
Just got a Z10, I love it! It's OK if you guys hate me though :)
1. Workplace has confidential information.
2. Workplace puts up elaborate high-security protocols and technology intended to protect that data.
3. Workers find that all this security is getting in the way of actually doing their jobs.
4. Workers ignore protocol and devise their own means of going behind the backs of those dictating security.
5. Embarassing breach occurs.
A common example occurs when IT dictates all passwords must be at least seven characters an include mixed case and punctuation. Faced with difficulty remembering passwords, the staff respond by putting them on post-it notes under their keyboards. Or when getting a new staff member approved for access to the confidential data takes a few days, leading to staff letting temps borrow their credentials so they can get started right away.
On a scale from 'paid vacation' to 'hahaha, paid vacation' do we have any estimates on the penalty for this sort of fantastic adherence to good evidence handling practices and adherence to both the security of an investigation in progress and the rights on anyone who turns out to be investigated but uninvolved?
(Incidentally, who wants to bet that the officers involved may not have adhered to every tedious little 'best practice' in their handling of past cases? Sure is a good thing that they aren't in a position where sloppiness could cause real damage or anything, or I might be concerned.)
yeah right.
Yes, but beta sucks.
The machine translation of the quote in the summary sounds a bit wonky. A better (tone-maintaining) translation is:
"Yes, I know the server isn't in Sweden and it's a medium where you can't just drone on about any old info you have"
Do not call proprietary (gratis) software as Whatsapp free!
It is not!
Aren't these officers aware of BlackBerry Messenger being available for iOS and Android devices? Surely they would also be aware of Whats Apps recent public vulnerabilities in the news (I'm sure they consider themselves somewhat tech savvy).
damn it, you know you've been too long on the interwebs when you scroll past a goatse link, and it is marked in the 'visited' color.