Slashdot Mirror
CIA, FBI Launch Manhunt For WikiLeaks Source (cbsnews.com)
An anonymous reader quotes CBS:
CBS News has learned that a manhunt is underway for a traitor inside the Central Intelligence Agency. The CIA and FBI are conducting a joint investigation into one of the worst security breaches in CIA history, which exposed thousands of top-secret documents that described CIA tools used to penetrate smartphones, smart televisions and computer systems. Sources familiar with the investigation say it is looking for an insider -- either a CIA employee or contractor -- who had physical access to the material... Much of the material was classified and stored in a highly secure section of the intelligence agency, but sources say hundreds of people would have had access to the material. Investigators are going through those names.
Homeland security expert Michael Greenberger told one CBS station that "My best guest is that when this is all said and done we're going to find out that this was done by a contractor, not by an employee of the CIA."
Homeland security expert Michael Greenberger told one CBS station that "My best guest is that when this is all said and done we're going to find out that this was done by a contractor, not by an employee of the CIA."
Your missing the point. Theres a hell of a lot of "Originalists" who always seem to be the first to suggest changes, want clauses revoked, or happy for weird exceptions to be allowed through if thats whats required to sync their idea of politics with the constitution as written.
How many republicans still demand prayer in school or creationionism in classrooms despite the plain languaged absolute prohibition of government religion in the first ammendment.
And yeah libs arent much better on this, but at least thats not inconsistent with the interpretive school of constitutional thought
Excuse the Unicode crap in my posts. That's an apostrophe, and slashdot is busted.
If I worked there, I'd, as their computer guy, would be like, let's build an incorruptible and un-bypassable logging system of all access to all data, and exactly what was accessed, along with a physical process whereby the elected officials in Congress on the security committees would review it all. In this way, there could be no G. Gordon Liddy type "special" agents who misuse the data to advantage this or that political faction...
And I'd be quickly shown the door.
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
East Germany learned that after a massive data walk out. Every East German spy was on a list and West Germany got that list.
In the 1960's East Germany divided its information up into groups. The spy name if needed to warn them to escape, code words, the product all went to secure locations.
No staff member was allowed to put the parts together without in person supervision from the very top of the service.
No more data could walk out. Staff had product to work on, spies in the West knew their real names, warning networks and escape plan was secure.
The US idea was more about what a contractor could sell or rent to the US government. Fast data from global collection. Every interesting person had to have a bank account, fax, car phone, desktop computer, modem, email, use an online forum, smart phone, enjoy social media over the decades.
Interesting people stay in hotel rooms with a smart TV.
The next US idea was to pool all the data in plain text so it could be search over for decades. Everything was about the data, collection was cheap, sorting was cheap. Translation was getting better.
The problem was the US forget that first success in East Germany. Dont keep it all together in plain text.
The US issues is too many contractors all only understanding plain text as a policy so they can work on each others raw product.
If raw product collected globally is encrypted once it gets to the USA, no other contractor can bid to work with the encrypted data. Thats shutting out other party politically supported contractors with interesting ideas on how to translate, sort, index or work with raw data. Political support always allowed the contractors back in to plain text so they could bid for more mil, gov work.
Better just to secure the site, trust the contractors and have collection work with plain text. Every contractor can then bid for new work, sort, find data.
Too many contractors got hired in the last decade, low standards in data protection got to be policy, too many new private sector staff to do any real world background security work on.
Digital database look ups, short term internet log collection and a lie detector pass could see anyone try for US gov security access.
US staff wanting to join should have had their entire background walked by real US gov security. School, education, friends, family, faith, politics, protests, travel, languages, books, magazines, internet logs, parents should have been looked into per application. Applicants and their life story should have been interviewed in person, in every state until US gov security was sure the applicant was not a security risk.
Paper work in their town, city, state matched their life story? Do family and friends exist in the real world, not just as a list on a networked database in the same state?
Hire for the US mil or gov to ensure security. Contractors are not mil or gov as they are only thinking of the next job.
The UK and GCHQ faced most of the same issues. The UK fixed most of their staff issues by offering good wages and a real job to staff.
Once staff have the badge, could feel part of the system, have a good wage a esprit de corp sets in.
Staff can then plan their life, home, holidays, lifestyle based on a growing gov wage and job security with a good pension.
The US decided to go with more plain text collection, many more contractors, more random global collection, more overtime for contractors, more movment of new contractors to random locations and ever more contractors working on plain text.
Contractor profits are more important than security.
The final insight is from East Germany. East Germany did not like all its spy material been on paper so it went for a new digital for a list of spies to allow for rapid contact of many of its spies in the West. That would save time to issue complex commands that could be very time sensitive. The US security services found the East German digital master list and walked out with it.
Domestic spying is now "Benign Information Gathering"