Slashdot Mirror


NSA Contractor Arrested in Possible New Theft of Secrets (nytimes.com)

The New York Times, citing senior law enforcement and intelligence officials, reports today that the FBI secretly arrested a National Security Agency contractor in recent weeks (Editor's note: the link could be paywalled; alternate source). The newspaper adds that the FBI is currently investigating whether the contractor (identified as male) stole and disclosed highly classified computer codes developed to "hack into the networks of foreign governments." From the report: The theft raises the embarrassing prospect that for the second time in three years an insider has managed to steal highly damaging secret information from the N.S.A. In 2013, Edward J. Snowden, who was also a contractor for the agency, took a vast trove of documents that were later passed to journalists, exposing N.S.A. surveillance programs in the United States and abroad. The information believed stolen by this contractor -- who like Mr. Snowden worked for the consulting firm Booz Allen Hamilton, which is responsible for building and operating many of the agency's most sensitive cyberoperations -- appears to be different in nature from Mr. Snowden's theft.

101 comments

  1. (identified as male) by Anonymous Coward · · Score: 1

    Whew, for a minute there I was afraid we had a rogue Apache attack helicopter!

    This guy sounds like a true patriot assisting the American people.

    1. Re: (identified as male) by Anonymous Coward · · Score: 0

      Wait, did the suspect identify themselves as "male" or did the NYT identify the suspect as "male"? It's possible the suspect actually does identify as an Apache AH-64, but they're pre-op.

  2. Will the consulting firm take the heat? and will by Joe_Dragon · · Score: 1

    Will the consulting firm take the heat? and will this force them to move more people in house?

  3. Time to fire Booz Allen Hamilton by Anonymous Coward · · Score: 0

    The poster child for the military industrial complex

    1. Re:Time to fire Booz Allen Hamilton by PPH · · Score: 1

      Time to bring all the people working with sensitive data or hardware back in house as direct employees. Also, the process of vetting them for clearances. Putting this part of the hiring process in the hands of private enterprise is the first step to contractors like Booz Allen Hamilton skimming the skilled people off the top and sending the knuckle-draggers to work as direct federal employees.

      --
      Have gnu, will travel.
  4. EQGRP? by CODiNE · · Score: 3, Interesting

    Is this someone being nailed for the Equation Group code leak? Or something else?

    --
    Cwm, fjord-bank glyphs vext quiz
    1. Re:EQGRP? by Anonymous Coward · · Score: 0

      yes. Do I get compensation for my insight?

  5. Outsourced to the cheapest traitor by Anonymous Coward · · Score: 0

    Thank Mammon for outsourcing basic government functions to the lowest bidder, we could have been sold out by an incompetent do-nothing government employee!

  6. via Yahoo? by dejitaru · · Score: 1

    How? Try to email them to himself via Yahoo?

  7. No and No by HBI · · Score: 2

    BAH doesn't do clearance investigations - the USG does through the Defense Security Service (DSS). Blaming the contractor is BS. The contractor cuts paychecks, handles vacation and health benefits, does the hiring and firing based on USG guidance, and sets business hours based on USG guidance. The rest is the USG - the contracting officer is in control, and after that the functional USG lead directing the effort.

    This is a useful dodge for the USG appointees (aka civilian employees) to avoid personal responsibility for what is their failure. Having the USG hire the people as civilians would make sure of two things:

    a. The best qualified would avoid the jobs like the plague due to low pay.
    b. You'd get a lot of transferees and priority placements from elsewhere in the USG with inadequate qualifications, but qualifying for the job due to time in service or veterans preferences.

    So that's why both answers are no.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    1. Re:No and No by Anonymous Coward · · Score: 0

      G13 is low pay? Blowing smoke up people's @sses?

    2. Re:No and No by Reason58 · · Score: 1

      For high-level information security experience with the associated clearance it is not that competitive.

    3. Re:No and No by HBI · · Score: 1

      Compared to contractor pay? Yup. It'd be a big pay cut for me.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    4. Re:No and No by Anonymous Coward · · Score: 0

      G13 is low pay? Blowing smoke up people's @sses?

      Everything is relative. Even a step 10 is a 20-30% paycut from most of the people on my team. If you tried to cut their pay to match they'd just do commercial work which actually pays even more because of the higher per hour rates. I actually am making 25% less as a contractor because I insist on staying in the government space instead of doing commercial work already.

    5. Re:No and No by Anonymous Coward · · Score: 0

      GS13 is where your career tops out, and it's still bad. Most programmers start at GS7 or so, or around $43k. I made more than that at my first job out of college ten years ago.

    6. Re:No and No by plopez · · Score: 1

      It's low for Silly Valley, DC, or NYC. But for those of us who live in the real world it isn't bad in most cases.

      --
      putting the 'B' in LGBTQ+
  8. Oh noes11!!!!! by Anonymous Coward · · Score: 1

    Now we cant act all indignant when Russia hacks US!!!

  9. "(identified as male)" ?? Thomas Martin III by Anonymous Coward · · Score: 0

    Whoever wrote that summary could have read any one of thousands of reports listing his actual name at least...

  10. So... here's the thing by vux984 · · Score: 4, Insightful

    Assuming this is a genuine crook -- stealing secrets and selling them or disclosing them to private parties... foreign/domestic/whatever. Then arresting him is pretty much the expected course of action.

    The interesting angle to me at least, is that it really skewers the idea that Snowden put us at risk. For me, the biggest counter argument to that has always been 'if Snowden could do it so could others'. The fact that Snowden did it altruistically and gave the information to the public means we know about it; how many others have been doing it, that haven't been caught, that have been disclosing it to foreign governments, selling it, etc.

    Now we have some real proof of what really should have been obvious -- that yeah, other people have been doing it too. All the "secrets" Snodwn revealed to the public, and in the process our 'adversaries' ...so what?? They probably already had it from their own pet NSA employees & contractors. It would be foolish to assume they didn't.

    1. Re:So... here's the thing by Ravaldy · · Score: 1

      Assuming this is a genuine crook

      He is a crook whether he's doing it for moral or financial reasons. He's not using the legitimate channels available to bring the issue to the surface. I realize it's not as easy as it sounds but it certainly more politically correct and less harmful to government.

      IMO Snowden could also have used a different approach. Chopping down the tree when there's 1 bad branch is overkill. That's the ONLY reason I only ever partially agreed with what Snowden did. We expect our government to follow due process, we should to until they don't listen (which allegedly wasn't the case here)

    2. Re:So... here's the thing by Anonymous Coward · · Score: 0

      Maybe you missed how the whistleblowers prior to Snowden had been treated?

    3. Re:So... here's the thing by vux984 · · Score: 2

      He is a crook whether he's doing it for moral or financial reasons.

      While I agree that one has committed a criminal act either way, the decision whether justice is served by punishing that act depends a lot on the circumstances around it, including the motive.

      My usage of the word 'crook' is to suggest a person with antisocial / selfish motives. Snowden committed a criminal act but I don't think he's crook. This guy... I don't know his motive. But if he's disclosing to private parties... odds are its selfish. Either that or its blackmail... which is a whole other issue.

    4. Re:So... here's the thing by Anonymous Coward · · Score: 0

      There is strong evidence that following the correct channels doesn't work.
      At least under the most transparent administration of all time.

      I would prefer people who find evidence of wrongdoing follow the whistleblower process, but it looks like that is currently a dead end, in every meaning of the term.

    5. Re:So... here's the thing by bfpierce · · Score: 2

      "He's not using the legitimate channels available to bring the issue to the surface."

      Come on now, this black ops shit. You know just as well as anybody else those channels don't really go anywhere.

    6. Re:So... here's the thing by Anonymous Coward · · Score: 0

      If the 'legitimate channels' weren't 'rotten to the core' than you'd have a point, but we know they are (other 'whistle blowers' have been sanctioned for their actions in trying to work through 'legitimate channels'). So, this is not a question of '1 bad branch', the tree itself is 'rotten to the core' and thus appropriate to have been 'cut down'...just trying to maintain your analogy.

      Secondly, whether or not this person, or any person, arrested for an offence is a 'crook' is dependent on the outcome of any court case in a legitimately constituted court of law. Whether or not this guy will get any chance of such is open to debate.

      With the minimal information available to us at this time we have no way to classify this person as a 'crook' or not, at most he is a 'suspect in a crime'. And by the way 'intent' is a SIGNIFICANT determination regarding if someone is 'guilty' of a crime, whether or not the government wants you to believe so.

    7. Re:So... here's the thing by Anonymous Coward · · Score: 0

      He's not using the legitimate channels available to bring the issue to the surface.

      Stop lying. Even the criminals in the government he exposed said he went through proper channels, after being proven hundreds of times before.

      That just makes everyone not believe anything else you say, like your claim to support people that abide by the law. We're all now convinced you really only support the criminals and don't believe in the rule of law.

    8. Re:So... here's the thing by ShaunC · · Score: 3, Informative

      He's not using the legitimate channels available to bring the issue to the surface.

      Why don't you go ask William Binney, Thomas Drake, Kirk Wiebe, and Ed Loomis how using the "legitimate channels" works out.

      --
      Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
    9. Re:So... here's the thing by Anonymous Coward · · Score: 0

      'if Snowden could do it so could others'

      That's like saying there's no reason to prosecute a rapist, because someone else could rape the same victim.

    10. Re:So... here's the thing by Anonymous Coward · · Score: 0

      IMO Snowden could also have used a different approach.

      He did. He tried. The other routes all failed. Yes. Really.

    11. Re:So... here's the thing by Solandri · · Score: 1

      Why does it have to be either/or? Why can't they both be guilty of revealing state secrets? Just because Johnny threw rocks off a freeway overpass, does that mean it's ok for you to throw rocks off an overpass, even if it's for the explicit purpose of demonstrating to the public how easy it is to throw rocks off of overpasses? I remember a couple decades ago a local reporter ran a story where he registered at multiple precincts and voted in each one (tearing up his unmarked ballot on camera before dropping it in each box so they wouldn't be counted), just to demonstrate how easy it was. He still got a few months in jail for voting fraud.

      Personally I think Snowden did the morally right thing. But legally, oversight of secret programs is supposed to be done by elected legislators appointed to committees where they're briefed on these secret activities. Snowden's argument was that these committees were ineffective at controlling unconstitutional behavior, and the public needed to be informed that this sort of stuff was going on. But I've seen precious little media and public attention devoted to addressing that problem. Instead most of the focus has been on the symptoms - the actual programs themselves, as well as on Snowden.

      The discussion he wanted us to have was: how do we keep such secret programs "honest", if that's even possible? If we're going to operate these secret programs, what sort of checks and balances are needed since obviously the existing ones are insufficient? I haven't seen that discussion. Instead all I've seen is three years of righteous indignation by both sides - either over how terrible these programs were, or how terrible Snowden was for revealing them.

    12. Re:So... here's the thing by vux984 · · Score: 1

      I remember a couple decades ago a local reporter ran a story where he registered at multiple precincts and voted in each one (tearing up his unmarked ballot on camera before dropping it in each box so they wouldn't be counted), just to demonstrate how easy it was. He still got a few months in jail for voting fraud.

      And you think that was right, and just, and served the ideals of society?

      What if instead of a couple months in jail, it was successive life sentences? What if it had just been a few dozen hours community service? Or a suspended sentence?

      You want to convict Snowden, and give him a couple months in jail; I'm sure few of his supporters would even raise much of a stink over that.

      Just because Johnny threw rocks off a freeway overpass, does that mean it's ok for you to throw rocks off an overpass, even if it's for the explicit purpose of demonstrating to the public how easy it is to throw rocks off of overpasses?

      That's a non sequitur.

      Does anybody really need an object lesson in how easy it is to throw rocks from overpasses? Is that a secret hidden from the public? Is throwing rocks from an overpass likely to be informative? How egregious and corrupt is the city/state/country's mishandling of the problem? And what steps were taken to mitigate the risks to the public? Was the highway closed off with lookouts, and people retrieving the stones... or was I just throwing boulders into rush hour traffic while holding a camera phone?

    13. Re:So... here's the thing by Anonymous Coward · · Score: 0

      "[L]egitimate channels" is a sham, a fake, a phony option. By design.

      There is no whistleblower protection build into the legal system. Ever ask yourself why? The Powers That Be don't want to protect whistleblowers. Whistleblowers make the Powers That Be look bad, so they must be purged and made an example of. Legitimate channels exist mainly to flush out potential whistleblowers and expose them to the full force of an angry bureaucracy.

      The system is Working As Designed, with the Whistleblower Disposal Option fully operational. Thus, anyone who uses legitimate channels is stupid, naïve, or thinks the system cares about abuse of power, process and authority.

    14. Re:So... here's the thing by AHuxley · · Score: 1

      Whistleblowers faced few options within the USA. https://cryptome.org/2013-info...

      --
      Domestic spying is now "Benign Information Gathering"
    15. Re:So... here's the thing by Anonymous Coward · · Score: 0

      Well, if they would just hire permanent employees (with benefits), instead of so many contractors- perhaps the work ethic or loyalty may go further.
      When you go the contractor route- (post office does this too), these staff get all the same responsibilities as regular staffers but no bennies. So yeah the service will be lack-lustre to say the least.

    16. Re:So... here's the thing by Anonymous Coward · · Score: 0

      Eh? Just because spies exist doesn't mean they're a dime a dozen. Surely, Russia does not have access to every secret in the US.

    17. Re:So... here's the thing by Anonymous Coward · · Score: 0

      But of course Hillary isn't a crook, for doing much worse. She is the new standard for what is traitorous, and what isn't... So if no "reasonable" prosecutor would have prosecuted her, how is this guy guilty of anything?

      Oh, wait.... I forgot that the Clinton's are above the law....

    18. Re:So... here's the thing by Ravaldy · · Score: 1

      Come on now, this black ops shit

      By that standard you're ok with anybody under any circumstance to bypass the system. You are setting a very dangerous precedence.

      Until someone can prove the proper channels cannot work the proper channels should at bare minimum looked at. Snowden didn't even look to see what options were available.

    19. Re:So... here's the thing by Ravaldy · · Score: 1

      Why don't you go ask William Binney, Thomas Drake, Kirk Wiebe, and Ed Loomis how using the "legitimate channels" works out.

      I'm very familiar with these individuals. Explain to me how they used PROPER channels to limit damage to government and NSA programs.

  11. Low Pay my ass by Anonymous Coward · · Score: 0

    GS-13 pay isn't "low" and it's pretty damn nice for a job in which you effectively can't be fired. We contract this stuff out because we've found that GS system retains the incompetent, and consequently everything that requires competence and no legal authority has been outsourced. Don't worry, GS-13's don't get held liable for any decision they make beyond whether or not to show up occasionally this week.

    1. Re:Low Pay my ass by HBI · · Score: 1

      It certainly is low pay compared to what GS-12/13 equivalent contractors get paid. Truth. Each FTE is paid $250k to the company and depending on their negotiating skill, the end result to the contractor could be approaching 150k. Do a 1099 arrangement and it can be even more.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    2. Re:Low Pay my ass by HBI · · Score: 1

      By the way, base pay for a GS-13 is $74k for Band 1...so you're not telling people the truth. Even with the regional adjustments, you can easily make less than $90k as a GS-13. So compare and contrast...of course quality people aren't going to respond to the GS jobs.

      Besides which, the GS-13s have to show. That's about the only thing they have to do - just about the only way to get fired is to be a no-show or consistently late. True, they get lots of leave and various excuses for not being present, but that is notwithstanding.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    3. Re:Low Pay my ass by Anonymous Coward · · Score: 1

      Yes, but the contractors have no job security, and will get fired if they fuck off all day. The GS's, on the other hand, have no liability and, in at least in my decades of experience, tend to fuck off most of the day and have the job on the basis of veteran or minority hiring preference.

    4. Re:Low Pay my ass by HBI · · Score: 1

      True statement on the fucking off, though I know of notable exceptions with personal integrity. Those people tend to do well in the system, as screwed up as it is.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  12. Remember kiddies... by __aaclcg7560 · · Score: 0, Troll

    There can only be one Snowden. Everyone else is a pretender.

  13. Not much bias in this article by Anonymous Coward · · Score: 2, Insightful

    "Theft."

    "Stole."

    I can't get out of my mind the fact that these words are being (mis)used in exactly the same way as when the RIAA and its kind lie about lost profits and bribe legislators. A story told with such heavy bias makes it difficult to take it or its authors seriously.

    1. Re:Not much bias in this article by Reason58 · · Score: 2

      "Theft of secrets" seems correct to me, as once you divulge the information against their wishes it is no longer a secret. The information may still be there, but its secrecy is not.

    2. Re:Not much bias in this article by PsychoSlashDot · · Score: 1

      "Theft of secrets" seems correct to me, as once you divulge the information against their wishes it is no longer a secret. The information may still be there, but its secrecy is not.

      Actually, that's an interesting point. By the same measure, the NSA stole the metadata of American citizens' communications for a few years.

      --
      "Oh no... he found the .sig setting."
  14. Shadow Brokers by Anonymous Coward · · Score: 0

    I'll bet this is the Shadow Brokers leak.

    1. Re:Shadow Brokers by Mister+Transistor · · Score: 1

      I was thinking that too... I guess we'll see in the upcoming days.

      --
      -- You are in a maze of little, twisty passages, all different... --
    2. Re: Shadow Brokers by Anonymous Coward · · Score: 0

      Was thinking same thing. If so, this guy is up shit's creek. He doesn't even get the 'I did it for the American people' pass that Snowden is using. Stealing US government secrets for the purpose of selling them gets you a lengthy stay at ADX Florence.

  15. Can you trust the federal intelligence? by Anonymous Coward · · Score: 0

    A rather depressing but plausible case would be that he tried to use the official channels to report unethical behavior regarding said hacks (or other issues) and was instantly flagged as a potential threat due to all the high profile information leaks.

  16. Wait by DarkOx · · Score: 1, Offtopic

    the contractor (identified as male) stole

    I thought we had to be concerned with how the contract identifies zis self. I am still trying to get with the program here.

    --
    Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    1. Re:Wait by PPH · · Score: 0

      the contractor (identified as male)

      Pre or post op?

      --
      Have gnu, will travel.
    2. Re:Wait by Anonymous Coward · · Score: 0

      Currently identifying as male is the most proper. There's precedent for gender change after leaking state secrets.

  17. Re: Third Time Actually by jackspenn · · Score: 2, Funny

    I'm sure the FBI will add an intent clause not included in the law, just like it did with Hillary Clinton. So this contractor has nothing to worry about. It is not like there are different standards for the politically connected and everyone else.

    --
    Respect the Constitution
  18. "programs" -- not "codes" by superwiz · · Score: 1

    "codes" is an exclusively Indian usage. And it's fairly harsh on the ears of any non-Indian programmers.

    --
    Any guest worker system is indistinguishable from indentured servitude.
    1. Re:"programs" -- not "codes" by PPH · · Score: 1

      Actually, I've heard the term used in my distant past by some old timers. They referred to programs as codes. And as many of these were highly classified. DoD contractors had not yet begun outsourcing top secret work to India, Russia, and China, so it was an American usage.

      --
      Have gnu, will travel.
    2. Re:"programs" -- not "codes" by superwiz · · Score: 1

      And as many of these were highly classified. DoD contractors had not yet begun outsourcing top secret work to India

      The "codes" was part of the article summary by slashdot. It was not part of the quote. In other words, it was written by whoever submitted the story to Slashdot. So this:

      it was an American usage.

      does not follow from the slashdot submission. Oh, and it's was never used by oldtimes. It is exclusively Indian. And it is very new. I think "Codechef" was the 1st place I saw it. And you don't have to believe it, but it won't change the fact that it sounds very harsh to the ears of all other English speakers.

      --
      Any guest worker system is indistinguishable from indentured servitude.
    3. Re:"programs" -- not "codes" by superwiz · · Score: 1

      Just to follow up, I just looked through the NYTimes article itself, and no "codes" does not appear in it. "Computer code" does. And while "code" is singular, "computer code" is always taken to be plural. So "codes" sounds just as harsh as "maths" to a North American English speaker (even though "maths" has sipped its way into British usage).

      --
      Any guest worker system is indistinguishable from indentured servitude.
  19. OMG Slashdot has another "hero" by Anonymous Coward · · Score: 0

    N/T

  20. how it appears is not always the truth by Gravis+Zero · · Score: 1

    The information believed stolen by this contractor — who like Mr. Snowden worked for the consulting firm Booz Allen Hamilton, which is responsible for building and operating many of the agency’s most sensitive cyberoperations — appears to be different in nature from Mr. Snowden’s theft.

    All we really know is that this guy got busted before he could act. It saddens me to write this but the FBI giving their word about the matter doesn't mean it's the truth because Comey has destroyed the FBI's credibility. :(

    --
    Anons need not reply. Questions end with a question mark.
    1. Re:how it appears is not always the truth by Anonymous Coward · · Score: 0

      All we really know is that this guy got busted before he could act. It saddens me to write this but the FBI giving their word about the matter doesn't mean it's the truth because Comey has destroyed the FBI's credibility. :(

      COINTELPRO, Slavery (or it's aftermath of obstructed justice), etc... The badness was there before Comey was born.

    2. Re:how it appears is not always the truth by rahvin112 · · Score: 1

      You've never been able to believe anything the FBI says, it's not a new thing. Though this case is yet another example that you don't talk to the FBI without lawyers! The guy admitted he knew he wasn't supposed to have the data, that's going to add YEARS to his sentence because his conduct is now willful which is a sentence multiplier in sentencing.

      DON'T TALK TO THE FEDS. Say one word, LAWYER.

  21. Tech sucks: We need minimize bloat to fix it by Anonymous Coward · · Score: 1

    I wish more people and companies were concerned about security so that we could start taking a serious look into solving the problem. Unfortunately everybody jumps on the latest and greatest instead of considering how terribly insecure any of it is. Facebook, Microsoft Widows, and even GNU/Linux are all great examples.

    What we need to do is start thinking smaller. Instead of jumping on that quad core 16GB ram system maybe we should think about what we can actually achieve with fewer resources and standardize on a minimal set of components that can be properly audited. Not just at the software level, but hardware too.

    I'm glad to see one crowd sourcing campaign and project that aims to do just this even if it has a long way to go (as far as the software is concerned in the way of minimizing bloat, etc) and it has already largely succeeded in part at its core mission thanks to the project's primary sponsor ThinkPenguin (funded the first two housing designs and standard) and a groundswell of support from those crowd funding the first manufacturing run of devices based around the EOMA68 standard.

    Basically EOMA68 didn't focus on the 'high end', but is instead a standard around which modular devices can be built. The first computer card based around EOMA68 is a simple (to today's desktop/laptop standards anyway) All Winner A20 dual core CPU with 2GB memory. The standard reduces the cost of designing and manufacturing devices that can be secured (quad core cards are coming that'll support the same housings, ie what the EOMA68 standard is for, one housing is a laptop and another a desktop, but others are to follow). The complete set of source codes available for all the components going into both the housings and computer cards designed around the EOMA68 standard. This includes keyboard controllers, LCD controllers, CPUs, and so on. All the places that we know at least one government has hidden backdoors and a 2nd we're reasonably confident has.

    1. Re: Tech sucks: We need minimize bloat to fix it by Anonymous Coward · · Score: 0

      IoT devices are getting hacked - read toasters, literally. Low tech hardware is no more secure than a supercomputer. Following your example, we should just go back to pencil and paper.

    2. Re: Tech sucks: We need minimize bloat to fix it by Actually,+I+do+RTFA · · Score: 1

      Removing features until hey can be added securely is the opposite of an IoT toaster. Also, why would anyone want an IoT toaster.

      --
      Your ad here. Ask me how!
    3. Re: Tech sucks: We need minimize bloat to fix it by Anonymous Coward · · Score: 0

      http://www.geappliances.com/ge/connected-appliances/

    4. Re: Tech sucks: We need minimize bloat to fix it by Anonymous Coward · · Score: 0

      You totally missed the point. IoT devices are easily hacked because there is simply no concern for security what-so-ever. But if we had a publicly maintained software stack for a standardized set of long term components that were modular that manufacturers could build around then we wouldn't be reliant on manufacturers for updates to the core components thus massively improving the security of these devices. The community could release a single distribution that would work on any number of different products.

      However you can take this farther as is what I'm suggesting by designing chips with the explicit intent that they will be manufactured and used in devices for a decade or so. When you have this specific intent to design secure long term components you can do what can't be easily done now: Minimize bloat, improve code, and perform third party security audits. This would allow more time for software developers to develop the code and improve security independent of a particular product or manufacturer.

    5. Re: Tech sucks: We need minimize bloat to fix it by Actually,+I+do+RTFA · · Score: 1

      I know what an IoT device is. I don't see why anyone would want one. Especially a toaster.

      --
      Your ad here. Ask me how!
  22. why don't they just add permanent staff? by swschrad · · Score: 1

    for instance, ex-military, which presumably would be copacetic with maintaining operational security. anybody with bingo-number resumes can qualify as a contractor, able to take a higher bid with no remorse.

    --
    if this is supposed to be a new economy, how come they still want my old fashioned money?
    1. Re:why don't they just add permanent staff? by tomhath · · Score: 1

      It's very, very difficult to get rid of non-performers who are protected by both civil service laws and their union. Using contractors gives the government more control, not less.

    2. Re:why don't they just add permanent staff? by plopez · · Score: 2

      Not really. You have to negotiate a deal with the contracting house as well. Trying to deal with non-perfomant contractors in my experience is a nightmare. Depending on the contract it could end up with your company having to "buy out" the contract or having the contractor replaced with a, just as bad, replacement contractor. Or go through a long and drawn out remediation process.

      It's as bad as dealing with a dysfunctional union contract.

      --
      putting the 'B' in LGBTQ+
    3. Re:why don't they just add permanent staff? by AHuxley · · Score: 1

      No bid contractors are sold as adding private sector ability and ingenuity to the US gov and mil.
      It has become very profitable to get clearance and then sell services back to the US gov at any cost in times of need.
      Tools, software, hardware, support, language skills, interrogations skills, medical devices, food, energy, crypto, design.
      The other part is the US can then talk about the easy option to ramp up support from the private sector allowing for some very fast results. Most of that action ends up in bank accounts.
      If the US gov or mil comments about quality, some states bipartisan political leadership makes a fuss until the private sector from their state is selling to the gov again.
      Once proprietary hardware and software is sold/rented into the US gov/mil, self cleared contractors have to follow in for support.
      That has really been a big pull between the NSA and GCHQ. To trust and guide up mil/gov only staff over decades on the traditional UK side. Better pay, wages, esprit de corps over decades. Or the US view that any contractor with skills can get clearance and it will all be great because the private sector is always by default good. The US view only works with the best vetting policy and total compartmentalization.
      Once the US stopped sending out staff to walk the life of applicants from home to education, interviewed friends the private sector had a free for all within the US gov and mil.
      Private sector staff could ensure their digital records matched what the US gov was looking for and security became a digital formality.
      Operational security is now about securing profits to the point of making it to no bid.

      --
      Domestic spying is now "Benign Information Gathering"
  23. I thought their job WAS to steal? by WillAffleckUW · · Score: 1

    Wasn't he doing his job to lie, cheat, and steal?

    And ignore the US Constitution and spy on American citizens without a specific court order and warrant?

    --
    -- Tigger warning: This post may contain tiggers! --
  24. So why keep hiring contractors? by ErichTheRed · · Score: 1

    The government seems to have the same accountants my company does...effectively paying twice for an employee but coming out ahead because OpEx.

    Why in the world would the government hire contractors to work in the intelligence agencies? Even if they have their clearances, etc. you exercise less control over a contractor than you would your own employee. I saw a post above saying GS workers can't be fired and the government can't pay talented people enough -- I'd be tempted to take the "can't be fired" with a grain of salt given most /.'er's political leanings, but I could be wrong. Hiring contractors to work on sensitive material doesn't make too much sense to me. In my IT experience, contractors tend to be much more transient than permanent employees and a whole lot less interested in doing a good job (beyond what it takes to keep getting renewed.)

    To me, it would make sense to fire all the contractors, hire FTEs to replace them, and bump up a few salary grades so they can be assigned to techies. That's one thing my current company does right -- the first 2 management ranks out of 4 are assignable to technical people as well, which allows smart people to be compensated for being smart rather than having to go into full blown management-only career paths. You're expected to mentor and supervise, but the political crap gets handled by managers. If government workers really do top out at a low salary, the benefits may not make it worth sticking around. However, with the spectre of offshoring and constant downsizing, I could definitely see the attraction of a very stable job in the next 10 years or so...people have different priorities. Some want to make as much as possible, and others want to do the family thing and have a safe income to fall back on.

    1. Re:So why keep hiring contractors? by Anonymous Coward · · Score: 0

      Not sure what reality you're from. Hillary was the one with improper FBI files

      http://www.nytimes.com/1996/06/05/us/hillary-clinton-s-fingerprints-among-those-found-on-papers.html?_r=0

    2. Re:So why keep hiring contractors? by organgtool · · Score: 1

      Why in the world would the government hire contractors to work in the intelligence agencies?

      The government loves contractors because it provides someone else to blame when the shit hits the fan. It's like keeping a scapegoat on retainer.

    3. Re:So why keep hiring contractors? by Anonymous Coward · · Score: 0

      I don't know where you are getting your misinformation. Security clearances have always been vetted by the government. For the DOD it was the Defense Investigative Service from 1972 until name changed to Defense Security Service in 1999. Most personnel clearance work was transferred to OPM in 2004.

    4. Re:So why keep hiring contractors? by Anonymous Coward · · Score: 0

      One of the reasons the government hires contractors is that their training in certain areas is more current than most government employees'. I've heard government employees complaining many times over the difficulty of getting training. Commercial companies have a vested financial interest in training their people, then landing government contracts to capitalize on those capabilities.

      As for 'insourcing' contractors, it takes months at a minimum to create a position, get the position description approved, advertise, hire, and clear someone appropriately. And sometimes the organization's structure makes it impossible. Bottom line is that it just ain't that easy.

    5. Re:So why keep hiring contractors? by Anonymous Coward · · Score: 0

      Because the good high end contractors make much more than they can as a government employee. I can make 50% more in the private sector but believe in the mission. I told a VP from my company a few months ago that if it was about the money I would be long gone. I have had several offers in the privater sector that would double my salary.

    6. Re:So why keep hiring contractors? by AHuxley · · Score: 1

      They run the collect it all systems that connect into the private sector. They know the jargon and terms that allow them to pass effortlessly back into the big US brands and telcos undercover or as part of a gov team.
      Re "Hiring contractors to work on sensitive material doesn't make too much sense to me."
      That policy is driven by political contacts, no bids and legal teams. If access to the private sector is not granted, access is demanded by politics and the need for creating local jobs.
      Re "bump up a few salary grades"
      The issue is the skills offered by contractors and the skills the gov, political class and mil then think they need for the collect it all missions.
      A rush to the private sector to keep skills and get new skills saw a huge flood of rushed digital clearances or past self signed equivalent digital clearances been updated.
      That allowed the US gov to be sold on the story that tech skills, language skills, people with skills that only living within a faith, community or the private tech sector could be found by using contractors.
      The huge issue is security teams have not interviewed around the life history of a lot of contractors or even gov staff. No long interviews with extended family, questions to very local courts about sealed local paperwork in the past, no interviews with teachers, friends, looked over a home, looked at books around a home. i.e. radicalisation, cult membership, political issues or the value of another nation.
      All the classic work that builds a real picture of the person, not just that they exist on a digital file on some computer in some fly over state.
      The other aspect is criminal pasts. The need for language skills, cultural insights, having travelled the world, jargon, slang saw a rush to hire anyone.
      Finally political aspects as to who can now get into the US gov is changing. Nothing to do with security just yet, but within a generation the US gov will be flooded with people hired on very different priorities, i.e. basic gov security is not even a consideration anymore.
      "Obama’s DOJ blames criminal, citizenship checks of job seekers for lack of police diversity" (Sept. 25, 2016)
      http://www.washingtontimes.com...
      Other nations will ensure trusted generations of their sympathisers, cult members, faith get in and rise up the ranks of the US bureaucracy.
      Bulk collection and collect it all will not be able to track insiders as they will never risk any digital device, a distant holiday or religious service will give them time with their handlers.
      The fix is so easy, keep it within gov/mil, hire correctly on merit, compartmentalise, walk the real US life story of all US applicants.
      Give great rewards, further education and allow for advancement based on merit.
      People who have cult, faith or political issues, put their "other" nation first will always be a risk for decades as trusted contractors or staff.
      The US always had a great system to hire the best and ensure their pasts showed no sign of working for other interests.
      Sadly with political pressure and no bid contractors all that has changed and within a generation a lot of strangers will have total access to mid and low level US secrets daily and without question. How far did they get up the gov and mil system?

      --
      Domestic spying is now "Benign Information Gathering"
    7. Re:So why keep hiring contractors? by dcw3 · · Score: 1

      You're full of shit. Nobody gets TS and above access with only a credit check.

      --
      Just another day in Paradise
    8. Re:So why keep hiring contractors? by dcw3 · · Score: 1

      The government has even more control over contractors than it does over it's own employees (who they can never seem to get rid of when there's incompetence)...I've been on both sides for 40 years now...there's no "grain of salt" necessary. Go look up how often, government employees are laid off, or fired, and get back with us. A contractor can be dumped very easily. Contractors are hired to do jobs that the Feds can't, and that's typically because highly skilled employees typically go for better paying jobs, and the Feds simply can't pay as well, so normally don't have enough skilled people. The government also hires contractors who are OEMs to be advisors for the equipment, applications or other products that they've sold to the govt. Contractors who are granted access are subject to the same legal penalties as government employees, so the "transient" issues is a non-starter. Also, people who get clearances, tend to move to other companies/jobs where they'll be able to keep them...there's a little more money & job security as these positions never go off-shore. I've seen the government attempt to replace contractors in several locations, and fail...it rarely ever works.

      --
      Just another day in Paradise
  25. paraphrased by Anonymous Coward · · Score: 0

    the emperor has no clothes. The groupthink is lies. Not all dogs go to heaven.

  26. contracts by Anonymous Coward · · Score: 0

    "violation of employment contract" seems correct to me. Of course sometimes you discover that such a crime is a less ethically problematic compared to obeying the employment contract.

    1. Re:contracts by AHuxley · · Score: 1

      Unconstitutional bulk domestic spying is the key to undoing any "Theft of secrets" color of law comments. The US gov/mil cannot hide a from the United States Constitution by invoking a few decades of "secrets".
      Whistleblowing and criminal investigation would never work in the US if the gov can just pull "secrets" over any other part of the gov or mil asking legal questions.
      So the US is very careful to allow the "secrets" part to drop when discovering legal issues within its gov/mil.
      If not US gov/mil/contractors could just quote "security" all day before any US court as a form of total immunity and the US court system would not function.
      That is why so much effort is spent hunting whistleblowers and their first contact with the press. "The Most Intriguing Spy Stories From 166 Internal NSA Reports" (May 17 2016)
      https://theintercept.com/2016/...
      FIRSTFRUIT was the effort to scan the media to find any contact with the press and track whistleblowing efforts.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:contracts by Anonymous Coward · · Score: 0

      Whistleblowing and criminal investigation would never work in the US if the gov can just pull "secrets" over any other part of the gov or mil asking legal questions.

      That's exactly what they apparently did to Richard Marcinko.

      Not saying it was legal then, nor is it legal now in any jurisdiction that respects the Bill of Rights. But I'm not sure how many of those are left. We are suffering from the effect of many decades of "campaign contributions" from associations of legal professionals. Since politicians select judges, these contributions appear to have ensured that no judge gets selected for higher office that will rock the boat on fundamental issues of concern to groups in the legal profession.

  27. Almost by Anonymous Coward · · Score: 1

    Snowden did the right thing because the oversight is not/was not working. I agree that he should be held accountable for his actions, and I'm pretty sure he does also. The concern he had in seeking asylum is that he could not get a fair trial in the US, which I also agree with.

    In other words, past where you said "I think Snowden did the morally right thing." there should not have been a "but".

  28. Re: Third Time Actually by Anonymous Coward · · Score: 0

    oh fuck off. Please.

  29. Re: Third Time Actually by Anonymous Coward · · Score: 1

    Criminal intent is a prerequisite under the due process clause.

  30. Re: Third Time Actually by AutodidactLabrat · · Score: 3, Informative

    Sorry, the law REQUIRES intent to distribute as the third test of crime.
    Here we thought you knew what you are talking about.

  31. and with the new salary pay laws that must go up by Joe_Dragon · · Score: 1

    and with the new salary pay laws that must go up

  32. Meanwhile, Hillary Clinton remains free... by Anonymous Coward · · Score: 0, Interesting

    ...even though she committed far worse. Typical liberals. OK for me, not for you unwashed deplorables.

  33. Another Week by Anonymous Coward · · Score: 0

    Another week, another NSA leak. Ho-hum.

    How about, the NSA notifies us on the weeks they don't have a data leak? That would be more efficient and effective use of the public's time. Just a thought.

  34. Should this white male be tortured and then execut by Anonymous Coward · · Score: 0

    Should this white male be tortured and then executed?

  35. Re:Should this white male be tortured and then exe by dcw3 · · Score: 1

    Well, it was "catch and release" with HRC. I'd personally skin them both.

    --
    Just another day in Paradise
  36. Would you 3D print a car? by CmdrTamale · · Score: 1

    Come on, guys. It's just copyright infringement, and he hadn't even distributed.
    --
    I am serious sometimes but I'm not very good at it.