Slashdot Mirror


Former NSA Chief Warned Against Selling NSA Secrets

An anonymous reader writes Former NSA Chief General Keith Alexander has apparently started his own cybersecurity consulting firm, IronNet Cybersecurity, and approached the banking industry pitching his company's suite of services. Word from Wired indicates that his services cost $1 million per month with a special discount asking price of $600,000 per month. Congressman Alan Grayson (D-FL) expressed concern about General Alexander's activities to the banking industry, stating, "I question how Mr. Alexander can provide any of the services he is offering unless he discloses or misuses classified information, including extremely sensitive sources and methods....Without the classified information he acquired in his former position, he literally would have nothing to offer to you." (PDF) The congressman from the House of Representatives reminds the bankers (and General Alexander, should he be listening) that selling top secret information is a federal offense.

87 of 138 comments (clear)

  1. bridge for sale by mindcandy · · Score: 4, Insightful

    I don't know if I'd brag about my tenure there in the context of selling security consulting.

    The whole Snowden affair demonstrated that they still managed some epic fails.

    But sure .. 600k? .. I'll take two, because that's how we roll with government spending.

    1. Re:bridge for sale by pla · · Score: 4, Insightful

      I don't know if I'd brag about my tenure there in the context of selling security consulting.

      This.

      Detecting and stopping an insider from downloading a library of proprietary/classified info outside their job description? Fail.
      Capable of searching emails to fulfill a court order for information? Fail.
      Bringing a basic (if high-end) new datacenter online? Fail (for not securing a reliable source of electricity).
      Obeying the rules that govern their core mission? Fail. Performing their core mission? Fail.

      No doubt, the NSA remains every bit as scary as ever, but in more of a "CIA goon" sense than their traditional so-flawlessly-smooth-you-won't-even-know-what-happened reputational sense.

    2. Re:bridge for sale by Anonymous Coward · · Score: 5, Interesting

      Actually I'm going to disagree with you there. Yes, Snowden was a loss for the NSA, but not a fatal loss.

      Gen. Alexander presided over and participated in an epic expansion of the NSA budget, mandate, and importance. They achieved the nirvana of government existence: To become a mover and shaker. The NSA now overshadows the CIA and FBI in importance.

      The Snowden disclosures threaten that status, but notice that none of the limitations on the NSA have actually happened yet. Lots of talk but little action. The government likes it's pervy magic database of secrets and private communications. Sure it's constitutionally infringing but hey, terr'ists!!

      And even if the golden age of spying winds up being curbed, Gen. Alexander can always find a way to blame someone else, or say "it' was one unfortunate mistake, lessons were learned, I wasn't properly informed, etc."

    3. Re: bridge for sale by chromeronin799 · · Score: 1

      Or if he can learn from his mistakes, then maybe he is an expert.

    4. Re:bridge for sale by gl4ss · · Score: 2

      You'd have to be a fool to think the NSA would keep dumping money and resources into programs that weren't yielding good intel.

      I think you're the fool if you really think that. think about it. nobody, really nobody(is supposed to), is going to find out about the quality of the intel. people involved with the decisions are gettin money from the money dumping. so you really think they wouldn't keep dumping money and resources into programs that weren't producing good intel? they could always even argue to themselves that whatever bullshit program they're in charge of _might_ yield some intel some day maybe and thus it's worth dumping 40 million into it every year (along with 1 million to the pocket whoever is directing it and aware of it in the first place).

      I mean, fuck, you would get better intel for making global strategy decisions from watching fucking BBC apparently.

      by the way its entirely possible that Alexander doesn't even know too much that's classified, for being too stupid to understand it. if it's just crap that's been on the Snowden files he can sell it all day long.. if he finds someone stupid enough to pay him 600 000 bucks a month for it... and he really needs only to find one or two. and what the fuck is up with the discount? intro discounts are not discounts, that's the ONLY FUCKING PRICE the service has been available for, gear up your consumer protection laws too!

      --
      world was created 5 seconds before this post as it is.
    5. Re:bridge for sale by Anonymous Coward · · Score: 1

      Somehow I seriously doubt that, there really is nothing Snowden leaked that was jaw dropping. It's pretty much information that some of Jane/Joe public knew about or suspected

      Not really. Jane/Joe public is a moron, and trusts Jesus is looking out for them.

      You can spel korectly and reason. You have no knowledge of Jane/Joe public.

      Jane/Joe public is fighting to survive and pay the bills. Or fending off their spouse from beating them.
      Or abusing their children. Or hooked on drugs.

      Worrying about conspiracy theories is the last thing on their mind.

      Jane/Joe public would gladly sign up for such a thing, because they need the money. There is no concept of "this is wrong" or "that's not how a free country should behave" or "why have we become the empire we claimed to hate?" -- it's not entirely moronic, it is survival.

      Ethics != survival.

      Jane/Joe public is laughing and thinks it is just a big joke, because we would NEVER do such things, and they think you are just making shit up because you are jealous of their freedom.

      They don't necessarily believe that...but that is a safer position, in their mind.

      Are they going to risk losing their job or their friends or family, and shoot off their mouth, just for some shitty "moral" reason? No. They are not going to jeopardize anything, they are in far too deep.

    6. Re:bridge for sale by aaaaaaargh! · · Score: 1

      Yes, Snowden was a loss for the NSA, but not a fatal loss.

      That's perhaps what they think but it's a questionable. Without his disclosures they would never have fixed their utterly ridiculous internal security. If it took just one external consultant to grabb all this information, they cannot seriously believe that a foreign intelligence agency hadn't been capable of doing the same.

      What is strange is that neither Clapper nor Alexander are being prosecuted for Contempt of Congress.

    7. Re:bridge for sale by TubeSteak · · Score: 1

      Detecting and stopping an insider from downloading a library of proprietary/classified info outside their job description? Fail.

      It seems like a lot of people seem to have ignored the detail that Snowden picked Hawaii because it didn't have access controls yet.

      The NSA and DoD have been rolling out software upgrades across their facilities specifically to prevent another Manning.
      Hawaii was not upgraded, Snowden knew this, and he used this knowledge to pilfer data without restrictions.

      --
      [Fuck Beta]
      o0t!
    8. Re:bridge for sale by Oswald · · Score: 2

      I was going to write a reply saying the banking industry comprises private--not government--money. But hilarity ensued as I struggled to word my post carefully enough to defeat trolls telling me I was overlooking the bank bailouts of half a decade ago. After a while I realized I couldn't make my case and decided you're right--it is government spending.

      So congrats on being even more cynical than I am. Care for an ennui contest?

    9. Re:bridge for sale by david_thornley · · Score: 1

      If I wanted security, the idea that Snowden just went where he knew the security was bad wouldn't really impress me.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  2. Not a good sales pitch: by king+neckbeard · · Score: 4, Insightful

    THe banking industry is probably wanting a step up in security, while the NSA under Alexander had horrible internal security. Alexander's forte seems to be using brute force to break the security of others, not actually keeping an organization secure.

    --
    This is my signature. There are many like it, but this one is mine.
    1. Re:Not a good sales pitch: by fuzzyfuzzyfungus · · Score: 5, Insightful

      Alexander's forte seems to be using brute force to break the security of others, not actually keeping an organization secure.

      It sure is a good thing that the banking industry is a bunch of totally upstanding, honest, guys, steeped in a culture of prudent moderation, who definitely wouldn't have any interest in the potential applications of NSA-tested 'tailored access operations' for shareholder value, enhanced lobbying, and other exciting things; or the colossal hubris necessary to not even think twice about doing so.

    2. Re:Not a good sales pitch: by metlin · · Score: 1

      You owe me a coffee! :-)

    3. Re:Not a good sales pitch: by number6x · · Score: 1

      posting to undo a bad moderation

    4. Re:Not a good sales pitch: by CanHasDIY · · Score: 1

      Didn't realize pentesting was a $1,000,000/mo subscription service.

      I've obviously been undercharging.

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
    5. Re:Not a good sales pitch: by fuzzyfuzzyfungus · · Score: 4, Funny

      You'll probably have some trouble collecting; but if you securitize the coffee obligation and just sell the top tranche or two no harm could come of it...

    6. Re:Not a good sales pitch: by gargleblast · · Score: 1

      A most irritating Slashdot bug. But do take the opportunity to post something sensible, such as "Why wouldn't top bankers pay top dollars for top secrets?

    7. Re:Not a good sales pitch: by philip.paradis · · Score: 2

      The sort of services being offered are easily worth USD $1M/month when you consider who the clients are, the scale of their operations, the degree to which their systems are interconnected with those of other institutions (large and small), and the complexities involved with regulatory/legal/reputation compliance and management. Risk management and threat analysis are not simple subjects.

      To put it simply, these aren't your sort of client engagements.

      --
      Write failed: Broken pipe
  3. Poor guy... by jasno · · Score: 4, Insightful

    So the poor general can't participate in the usual dance of former Washington insiders who use cronyism and connections to enrich themselves after 'serving' in government?

    There should be a name for that... like 401(c)... where c stands for crony capitalism.

    --

    http://www.masturbateforpeace.com/
    1. Re:Poor guy... by jeffmeden · · Score: 1

      So the poor general can't participate in the usual dance of former Washington insiders who use cronyism and connections to enrich themselves after 'serving' in government?

      There should be a name for that... like 401(c)... where c stands for crony capitalism.

      What's more hilarious is that, apparently, the only thing to General Alexander's credit as head of the NSA was his ability to keep secrets. He was literally "the most powerful cyber-lord in the world" (for lack of a better term) and his only qualification was keeping secrets? He didn't bring anything to the table in terms of management skills, best practices, or good judgement via foresight? Because that's what you have to read into a statement like "..Without the classified information he acquired in his former position, he literally would have nothing to offer to you." Kind of sad, mostly for the US military apparatus that apparently promotes from within, those that have no real skills to offer except keeping their mouth shut about what they did/saw/heard.

  4. Laugh-worthy by djdanlib · · Score: 1

    "Without the classified information he acquired in his former position, he literally would have nothing to offer to you."

    Oh brother. A former work colleague saying "You'd be nothing without us!"

    It's not like a person exists outside of their job, or can ever learn new things, right?

    1. Re:Laugh-worthy by Anonymous Coward · · Score: 1

      It's also blatantly not true. Even if he learned about some hundreds of network and OS vulnerabilities because he authorized NSA branded custom exploits to use them, the knowledge of the vulnerabilities is not classified, only the behavior of the NSA proprietary exploit tools. As long as he is fixing the exploits and not just tweaking them so the NSA toys can't use them (until the next internal revision), his knowledge is fair game for him to use for personal profit.

    2. Re:Laugh-worthy by Qzukk · · Score: 1

      The NSA should have put a clause in his employment contract preventing him from competing against them for the next X years.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    3. Re:Laugh-worthy by fuzzyfuzzyfungus · · Score: 1

      Unless being NSA directory is a surprisingly cushy position, leaving ample time for personal development and cultivation, I'd be skeptical in this case. Aside from his 1978 BU MBA, there is approximately fuck all on his CV that doesn't involve either armored vehicles or classified (and not always licit) signals intelligence and surveillance work for Uncle Sam. He doesn't even appear to be one of the revolving-door guys who hops back and forth between a stint with the feds, a stint with Spydyne LLC, back to the feds, and so forth.

      He's presumably a sharp guy; but he doesn't exactly have lots of experience that it would be legal to go into too much detail about.

    4. Re:Laugh-worthy by djdanlib · · Score: 1

      Exactly my point... If you learn a skill at your job, your employer cannot strip you of that skill when you leave.

      Obviously selling government secrets is different from saying here's how you implement industry best practices to create security processes.

      If the government had a secret security-bypassing technique, and had educated him on its use, he may or may not be obligated under his new employer to close the hole. And as a constituent of that government, I would approve of that use of that information.

    5. Re:Laugh-worthy by dosius · · Score: 1

      Some employers try, with non-compete clauses.

      --
      What you hear in the ear, preach from the rooftop Matthew 10.27b
    6. Re:Laugh-worthy by Opportunist · · Score: 4, Interesting

      It is? Odd that someone as insignificant as me has it in his contract that any kind of "internal knowledge" he gains (and, bluntly, if an exploit isn't considered internal knowledge in a TLA, what is?) must not be used outside of very well defined areas of work for at the very least 2 years, while someone as the NSA head honcho gets a free pass to use such knowledge as he pleases.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:Laugh-worthy by Opportunist · · Score: 1

      Erh... that would be akin to a occupational ban. I mean, as soon as you even as much as reach towards anything that could remotely be considered "security" you are essentially in competition with the octopus the NSA is...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    8. Re: Laugh-worthy by Anonymous Coward · · Score: 1

      The government has non-compete clauses.. With guns and jail!

      Given all the things the "NSA cannot tell Congress" that are secret I'd think that most information this guy has is not usable. Because anything you learn working for the NSAis by definition secret until explicitly declassified ...

    9. Re:Laugh-worthy by rockmuelle · · Score: 2

      Nope. I've talked about this with many lawyers. It varies by state. In CA, non-compete clauses are basically unenforceable. In TX, where I live, they're the law of the land.

      -Chris

    10. Re:Laugh-worthy by AF_Cheddar_Head · · Score: 1

      Yeah, the jumping back and forth doesn't happen when you wear the uniform, or did you miss the General part. Not defending General Alexander here just commenting on the lack of moving from government to industry and back.

    11. Re:Laugh-worthy by fuzzyfuzzyfungus · · Score: 1

      I don't have a problem with not being a revolving door hack (indeed, it's generally better than the alternative). My point was merely that Alexander's CV has very little on it that isn't either irrelevant to his potential customers (at least I hope our financial sector isn't looking for armored warfare expertise...) or closely connected to a series of fed jobs that just keep getting more heavily classified as time goes on. I am notably unsympathetic to the "zOMG! Noncompete! your employer owns every idea and/or life experience you had at any time" school; but in his case it would appear that he knowingly worked on a series of all-kinds-of-classified activities, and not much else.

      That being so, any discrepancy between his consulting rate (which is steep) and that of a skilled and experienced; but less notable, security analyst with management capabilities starts to look suspiciously like trading on the sorts of job experience he would have agreed not to disclose, and for no noble motive.

      It's not as though he is obligated to forget everything he ever knew about computers and security when he goes job hunting; but it's hard not to feel a twinge of suspicion at what he's charging, and wonder exactly what experience he brings to the table that is worth that much.

    12. Re:Laugh-worthy by Anonymous Coward · · Score: 1, Informative

      If he had knowledge of a secret security bypassing technique, closing the hole would (necessarily) disclose relevant classified information to the client. Which would be illegal...

    13. Re:Laugh-worthy by John.Banister · · Score: 1

      But the NSA (apparently) isn't in the data securing business. They're in the learning secrets business. A non-compete clause would prevent him from working for the CIA or the Defense Intelligence Agency or someone else in the learning secrets business. If a court says that securing the data of people engaged in lawful behavior is competing with the NSA, then they're saying that knowing everything about the doings of the people engaged in lawful behavior is properly within the NSA's purview. The NSA might like that idea, but I don't think a (non-secret) court would.

    14. Re:Laugh-worthy by rjstanford · · Score: 1

      Nope. I've talked about this with many lawyers. It varies by state. In CA, non-compete clauses are basically unenforceable. In TX, where I live, they're the law of the land.

      -Chris

      You need to talk to a better attorney then (if you're near Austin I can recommend Tom Nesbitt - IANAL but I do consult with them when I have questions like this). Even in Texas there's a long list of things that a company has to do in order to enforce a non-compete clause including but not limited to showing that your actions caused them real harm. I prefer to follow both the letter and the spirit of those agreements, but its always good to know how much is actually enforceable.

      Your current company does not have the right to take away your future livelihood.

      --
      You're special forces then? That's great! I just love your olympics!
    15. Re:Laugh-worthy by jeffmeden · · Score: 1

      It is? Odd that someone as insignificant as me has it in his contract that any kind of "internal knowledge" he gains (and, bluntly, if an exploit isn't considered internal knowledge in a TLA, what is?) must not be used outside of very well defined areas of work for at the very least 2 years, while someone as the NSA head honcho gets a free pass to use such knowledge as he pleases.

      It's hard to imagine that the banking industry is seen as competing with the NSA (in the sense that a non-compete would be enforceable)... Or is it?

    16. Re:Laugh-worthy by Opportunist · · Score: 1

      Well, both are propped up by the taxpayer and it's questionable whether they work in his interest, to the point where people are actually hitting the streets to protest against them, so, well, in a way...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    17. Re:Laugh-worthy by jeffmeden · · Score: 3, Insightful

      My point was merely that Alexander's CV has very little on it that isn't either irrelevant to his potential customers (at least I hope our financial sector isn't looking for armored warfare expertise...) or closely connected to a series of fed jobs that just keep getting more heavily classified as time goes on.

      Hmm let's see if you can pick out the spot where he would be versed only in armored warfare expertise or looking at secret documents all day (this is his CV for the past 15 years):
      Director of the National Security Agency (DIRNSA)
      Chief of the Central Security Service (CHCSS)
      Commander of the United States Cyber Command
      Commanding General of the U.S. Army Intelligence and Security Command
      Director of Intelligence (J-2), United States Central Command
      Deputy Director for Intelligence (J-2) for the Joint Chiefs of Staff
      Head of the Army Intelligence and Security Command

      Do you think it's possible, after working (ostensibly successfully) as the head of so many organizations, that he knows nothing about management, leadership, best practices, and nonclassified security methodologies (of which there are many)? Do you honestly think he spent 10 years, as the head of these orgs, pushing top secret papers across his desk instead of having his underlings take care of all of that? Come on. Furthermore, I think a lot of commentators on this thread have a complete misunderstanding of what a high-level consulting firm does. Hint, it has nothing to do with configuring firewalls and antivirus apps. Big multinationals will gladly pay $1M for advice as simple as "choose off the shelf security package A, instead of B" as long as it comes from someone whose credentials are beyond repute. He doesn't have to say anything about top secret operations, techniques, or sources, he just has to put his name behind something.

    18. Re:Laugh-worthy by david_thornley · · Score: 1

      I believe their charter covers both securing US data and reading everybody's data.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    19. Re:Laugh-worthy by Opportunist · · Score: 1

      Sanity in laws? Were they drunk when they passed it? Didn't anyone check what they signed there, I mean, that's like so ... sensible and anti-corruption.

      What's wrong with your government?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    20. Re:Laugh-worthy by John.Banister · · Score: 1

      Perhaps they could provide an example of where they successfully secured some data ]~_^} But, more seriously, securing commercial data still isn't in competition with the NSA, as the NSA's data securing activities have zero presence in that market. I'm sure he couldn't use copies of software developed at his old job. But, making sure that security software developed at his new job is sufficiently robust, and knowing under what circumstances security should be stronger, and under what other circumstances the extra burden outweighs the extra benefit are some of the skills he could bring to a commercial job that don't compete with securing activities performed by the NSA.

    21. Re:Laugh-worthy by david_thornley · · Score: 1

      I'm afraid I only have examples of where they weakened cryptosystems, not when they secured data. They may not actually be good at all of their jobs.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    22. Re:Laugh-worthy by John.Banister · · Score: 1

      From where I sit, it looks like there's too much stuff classified as secret and too little compartmentalization of the stuff that really ought to be kept secret. But, when I was making the example request, partly it was a complaint about them failing to declassify, not because the actual information still needs to be secret, but because public scrutiny might affect the agency budget or the career of someone still employed there - or just from not wanting to make the effort to determine whether they're done with it. If they declassified information (ie deallocated cultural memories (ie cleaned up after themselves)) when they were done with it, then there would be plenty of examples out there. And, partly it was for the legal catch-22 of being unable to show how well you're keeping something secret without it (either the details of the information, or the details of the capability) not being secret anymore.

    23. Re:Laugh-worthy by Swave+An+deBwoner · · Score: 1

      If he simply inspected their systems, fixed any holes he knew about, provided no information to the bank about what he had done except a note to say "your system is now more secure" that might be okay.

      That assumes that the existing client staff wouldn't have a clue about how to compare the systems baselines before his security changes with the state of the systems after. The diffferences between the two states would contain the "secret".

      When someone who formerly dealt with highly classified information in government writes a book, the usual deal is that the book's contents get vetted by ${security_agency} before publication. It's a lot more difficult to do that type of thing if the guy is using that information to secure a client's systems.

      So I can understand the concern here.

      We (the US) would be better off providing such folks with golden parachutes to avoid having to tell them not to try to profit from what they learned on the job, after they leave.

  5. Try him and not Snowden then by Rosco+P.+Coltrane · · Score: 4, Insightful

    Snowden didn't reveal NSA secrets for his personal profit.

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:Try him and not Snowden then by Anonymous Coward · · Score: 1

      Share knowledge with everyone, stuck in Russia indefinitely.

      Share knowledge with the rich fat cats, profit immensely.

      Same message, drastically different outcomes.

      Sounds like the American way to me.

    2. Re:Try him and not Snowden then by Opportunist · · Score: 4, Interesting

      It's very un-American to do something without the plan to profit from it!

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:Try him and not Snowden then by arklite · · Score: 2

      If profit is personal advantage, and Snowden is advancing an agenda based on ideals, then yes, he is advantaged and therefore profited. Not all people are motivated by money; for some, power, fame, or influence suffice. I'd say he did it for wholly selfish reasons: "He knew better than the State"

  6. Snowden is cheaper by Anonymous Coward · · Score: 1

    he'll give it to you for free .. you can put up the $1 Million towards wikileaks as donation ..

    1. Re:Snowden is cheaper by Calydor · · Score: 1

      Selling it is a federal offense.
      Giving it away is treason.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    2. Re: Snowden is cheaper by Opportunist · · Score: 4, Insightful

      No, it merely means that for selling it you get to go on a trial where in the end you get to make some kind of deal with the state where you can keep half the profit and the other half disappears in some war purses for deals that you don't want to explain why you need funding for them.

      If you hand it out for free you get to Gitmo. There's no profit in making a deal with you, you have no money you could offer.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re: Snowden is cheaper by CanHasDIY · · Score: 1

      You know, sometimes I absolutely hate it when you say things that make sense.

      There's no profit in making a deal with you, you have no money you could offer.

      This is one of those times.

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
    4. Re:Snowden is cheaper by Uberbah · · Score: 1

      Selling it is a federal offense.
      Giving it away is treason.

      Repeating Big Lies from authoritarians makes you either a fascist or a monarchist. Which is it?

    5. Re:Snowden is cheaper by Calydor · · Score: 1

      Which one makes you not have a sense of humor?

      --
      -=This sig has nothing to do with my comment. Move along now=-
    6. Re: Snowden is cheaper by Opportunist · · Score: 1

      Sorry. I promise to watch more Fox News 'til that last shred of sensibility is gone, too.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:Snowden is cheaper by Uberbah · · Score: 1

      Repeating state propaganda is funny?

    8. Re:Snowden is cheaper by Calydor · · Score: 1

      Depending on how it's done, yeah.

      In case it wasn't obvious mine was intended to be funny to show the disconnect in lines of thought, that somehow doing something illegal for personal gain is less serious than doing it because you think it's the right thing to do.

      --
      -=This sig has nothing to do with my comment. Move along now=-
  7. Smacks of Carmack by Raystonn · · Score: 2

    This smacks of the same crap Id is trying to pull off on Carmack (http://popcultureblog.dallasnews.com/2014/05/zenimax-and-id-software-have-filed-a-lawsuit-against-oculus-vr-and-dallas-based-john-carmack-is-in-the-middle.html/). Apparently employers think they own any knowledge an employee gains while on the job. Sure, secrets are secrets. But is *everything* they learned on the job is a secret?

    1. Re:Smacks of Carmack by Anonymous Coward · · Score: 2, Insightful

      Sure, secrets are secrets. But is *everything* they learned on the job is a secret?

      No, not everything.

      But if it's something you're trying to sell it for a million dollars a month, those parts are probably secret.

    2. Re:Smacks of Carmack by DRJlaw · · Score: 4, Insightful

      But is *everything* they learned on the job is a secret?

      1. When you've worked at a very high level the NSA;
      2. When you are selling security information/services; and
      3. When your asking price is far higher than competitive services by people who've worked at it far longer than you outside of the NSA,

      What do you imagine lies in between publicly known and classified that justifies the price premium? Was he developing security procedures on his own time or at his second job?

    3. Re:Smacks of Carmack by Em+Adespoton · · Score: 1

      Sure, secrets are secrets. But is *everything* they learned on the job is a secret?

      Ask the CIA -- they would probably stamp TOP SECRET on his forehead and mark him as classified if they were allowed. NSA, well, they're a part of the army AND part of national security. You're not dealing with standard trade secrets here, you're dealing with national secrets. Usually they err on the side of caution with those, as we've seen with all the denied/delayed/redacted FOIA requests lately.

      He seems like a bright guy and knows his way around political circles, but starting a company that appears to be based on what he did for the government, and charging fees that appear to bank on brand recognition gained while working for the government....

      That's like being the head of the IRS and then going into private business as a tax consultant for megacorps and charging similar rates. It's going to raise a few red flags.

    4. Re:Smacks of Carmack by rogoshen1 · · Score: 1

      but zero audit flags. right? RIGHT?

  8. He doesn't need to reveal secrets by Registered+Coward+v2 · · Score: 2

    He needs to hire people who have the skills and experience addressing specific vulnerabilities. Ideally those people got that outside of TS work. He is the rainmaker that opens doors.

    --
    I'm a consultant - I convert gibberish into cash-flow.
    1. Re:He doesn't need to reveal secrets by WaffleMonster · · Score: 2

      He needs to hire people who have the skills and experience addressing specific vulnerabilities. Ideally those people got that outside of TS work. He is the rainmaker that opens doors.

      Judging by his cozy reception at last Defcon this shouldn't be a problem at all.

    2. Re:He doesn't need to reveal secrets by russotto · · Score: 1

      Exactly. He doesn't need to do squat. He's implicitly selling the idea that he will be using all those secrets to help out his clients, but it's a flim-flam; he doesn't actually have to do it. And he was the head of the NSA, an administrator...what's the chance he knows much in the way of recent technical details anyway?

    3. Re:He doesn't need to reveal secrets by Registered+Coward+v2 · · Score: 1

      Exactly. He doesn't need to do squat. He's implicitly selling the idea that he will be using all those secrets to help out his clients, but it's a flim-flam; he doesn't actually have to do it.

      I wouldn't call it film-flam nor implicitly selling the idea that he will be using all those secrets. He brings an executive understanding of the types of threats and how to explain them in a way senior leaders can understand and offer a team that can help address the threats a company may face. His company can address them without ever revealing any secrets he learned during his stint at NSA.

      And he was the head of the NSA, an administrator...what's the chance he knows much in the way of recent technical details anyway?

      His technical skills are largely irrelevant, that's his staff's role. Being head of NSA, on the other hand, gives him credibility that can open the door to senior executives who can authorize spending the kind of money he charges. In addition, he can explain things in a way they can understand and motivates them to take action. If needed, he can bring in a techie for a dog and pony show; however no matter how skillful the techie is his or her chances of getting to a CEO / CIO are significantly less than the former head of the NSA. He has a credibility that the techie doesn't.

      --
      I'm a consultant - I convert gibberish into cash-flow.
    4. Re:He doesn't need to reveal secrets by rjstanford · · Score: 1

      Completely agreed. He can also use his network of (public) contacts to make introductions between threatened enterprises and the right people to fix them - or introducing peers who have had similar issues but aren't happy being completely public about that fact yet both trust him to use that knowledge for their benefit. Getting your security vendor wrong could be a very expensive mistake.

      --
      You're special forces then? That's great! I just love your olympics!
  9. Future irony alert by NoNonAlphaCharsHere · · Score: 1

    One day soon, "Congressman Alan Grayson (D-FL)" will be a lobbyist. Welcome to revolving-door government, Congressman.

  10. remind me by sribe · · Score: 3, Interesting

    Am I confused, or is this the same amoral sack of shit who lied to Congress with a straight face about NSA activities???

    1. Re:remind me by dcollins117 · · Score: 4, Interesting

      Am I confused, or is this the same amoral sack of shit who lied to Congress with a straight face about NSA activities???

      Yep. Circumventing the law, lying to Congress, sounds like a perfect match for the banking industry.

    2. Re:remind me by TapeCutter · · Score: 4, Interesting

      Yes, I think it's the same sack of shit that was involved in directing funds to the IRA in the 80's.

      --
      And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
    3. Re:remind me by Anonymous Coward · · Score: 1

      >Yes, I think it's the same sack of shit that was involved in directing funds to the IRA in the 80's.

      And so part of the scum who tried to kill my mother. She's still alive and well by the way, but many others died.

  11. As opposed to someone that's crossed the line? by sethstorm · · Score: 1

    The congressman from the House of Representatives reminds the bankers (and Edward Snowden, should he be listening) that selling top secret information is a federal offense.

    FTFY.

    --
    Twitter supports and protects racists - by smearing their critics with the "Hate Speech" label.
  12. Re:Oooops by Opportunist · · Score: 1

    Yup. He had no money to bargain with for a sweeter deal.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  13. Re:The NSA need a proper auditing and tracking dat by CaptnZilog · · Score: 2

    protocals. They need to adhere to the Federal Enterprise Architecture Data Reference Model.

    That is obviously misnamed, Data and Reference need to be reversed, so it's the "Federal Enterprise Architecture Reference Data Model", or to shorten it the "FEAR Data Model".

  14. Depends... by Grog6 · · Score: 1

    On how guilty the ones accusing you of treason actually are, IMHO.

    Who do you think is the traitor here, Snowden?

    I certainly don't think so, and neither do a bunch of other people. We all get to vote this fall. :)

    I realize all the good jobs are in the Govt; around here they get handed down from generation to generation, lol.

    That doesn't make me any more supportive of the whole Gestapo-ization of America; I think that's a bad thing, personally.

    --
    Truth isn't Truth - Guliani
  15. Re:Offtopic by Trepidity · · Score: 1

    If Jesus was so in favor of the poor, why did he spend his considerable income building a large, ornate church in Salt Lake City?

  16. No no its ok by nitehawk214 · · Score: 1

    It is ok if a government official sells state secrets, or gives preferential treatment to industry for money. This is the reason why they get high power government jobs n the first place. Look at the FCC, for instance. Their chairman is directly owned by industry. It is only plebs like Snowden that get prosecuted.

    --
    I'm a good cook. I'm a fantastic eater. - Steven Brust
  17. $600,000 a month? by Applehu+Akbar · · Score: 1

    I could buy some needy obstetrician a malpractice policy for that amount.

  18. Hush Money Perhaps? by careysub · · Score: 1

    Hmmm. The Director of the NSA might encounter all sorts of information about the Big Money Boys that they would rather not be known generally. Would that information necessarily be classified? But whether or not it is, being paid NOT to disclose it would surely not be a violation of security. Wall Streeters might regard a million a month mighty cheap insurance...

    --
    Starships were meant to fly, Hands up and touch the sky - Nicky Minaj
  19. He already made the sale, this is just the collect by smugfunt · · Score: 1

    This venture, it seems to me, is just a way to legitimize the payback for services he has already rendered while he was at the NSA. His 'clients' already know who they are, and they will expect to get nothing more concrete for their million per month than his continuing influence (or perhaps silence) in certain matters.

  20. NSA = No Sensible Administration ? by Futurepower(R) · · Score: 4, Insightful

    It seems to me that the entire purpose of any secret government agency is to benefit the secret government agency.

    Michael Moore is a self-taught movie maker. His movie about U.S. government corruption in secret agencies, Fahrenheit 9/11, made $222,446,882. It's not like extreme U.S. government corruption is unknown.

    There is a HUGE conflict of interest, and the U.S. government seems to have no influential methods of dealing with conflicts of interest. If there is security, people who work for the NSA are less likely to be promoted, and may lose their jobs. That is a powerful reason for NSA employees and management, and other secret U.S. government agencies, to create more insecurity. Since they work entirely in secret, no one can stop them.

    U.S. government policies allow many secret agencies. I find it odd that news stories assume that, other than doing things that almost no citizens want, the secret agencies are otherwise well-managed. Numerous examples show that they aren't. For example, Edward Snowden, an employee of an NSA sub-contractor, was able to walk away with all the data.

    To me, it is also odd that news stories assume that the NSA works to improve security of the U.S. and U.S. citizens. For example, the book House of Bush, House of Saud explains that the Bush and Cheney families worked for the Saudis, who paid them billions for their help. The U.S. taxpayer paid for the arms, military presence, and violence that supposedly was free security for the Saudi government, but actually was, as Saudi acquaintances I met in a gym said long before the 9/11 attack, Saudi government oppression of the Saudi people.

    Why does the NSA record phone calls? Is it because learning about some of those calls makes money for someone in control? Investment information, perhaps?

    The U.S. government's war in Iraq is now being called a "mistake". For example, Hans Blix: Iraq War was a terrible mistake and violation of U.N. charter. It wasn't a "mistake", other articles say, it was deliberate deception. For example, Stop Calling the Iraq War a 'Mistake'.

    NSA = No Sales for America. The NSA is a powerful advertisement that anything complicated made by a U.S. manufacturer may have intentional defects or surveillance methods.

  21. What perjury? I don't remember him doing that... by bussdriver · · Score: 2

    Where did he conduct perjury? I don't think he did. He LIED plenty but that is not a crime. Contempt of Congress etc? Well, something they seem to love to do is to NOT swear in these officials "out of respect" so while you may testify to congress under oath and they may require you to do so, these people are allowed to skip the disrespectful procedure. (Besides they feel there are legitimate public lies these officials have to make from time to time... which they could simply decline or put it off for the private session... which again, they probably don't do under oath.)

  22. The negative space isn't a national secret, by John.Banister · · Score: 1

    only the exact demarcation of its extent. If I know the NSA has a secret underground mole robot tapping in to buried data lines, I'm not giving away a national secret if I tell my client, "Y'know, lets run our data lines on phone poles," so long as I don't tell them exactly why I like that idea.

  23. Release Manning and shove this guy in the cell by dbIII · · Score: 1

    The difference between Manning and this prick is that this prick is making a profit out of selling the secrets.

  24. Re:Offtopic by Opportunist · · Score: 1

    He didn't. That was his CEO and you bet that he's going to get pissed come review time.

    There's a reason most US churches teaches you to fear the lord. They have reason to fear him. If you made a religion of peace, harmony and compassion and some people take it and turn it in a religion of hatred, control and bigotry, would you be pissed?

    Now imagine how pissed you'd be if you were allmighty.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  25. What? by mr_mischief · · Score: 1

    So the Congress believes there's no art or science to computer security besides classified information? This is like saying that any soldier who ever went on a classified mission can never market to an employer that he has military experience. This is ludicrous.