Slashdot Mirror
Top Defense Contractor Left Sensitive Pentagon Files on Amazon Server With No Password (gizmodo.com)
Sensitive files linked to the National Geospatial-Intelligence Agency -- which works with the nation's intelligence agencies to analyze aerial data -- were apparently left on a public Amazon server by an employee of Booz Allen Hamilton, one of the nation's top defense contractors, reports Gizmodo. From the article: A cache of more than 60,000 files was discovered last week on a publicly accessible Amazon server, including passwords to a US government system containing sensitive information, and the security credentials of a lead senior engineer at Booz Allen Hamilton. What's more, the roughly 28GB of data contained at least a half dozen unencrypted passwords belonging to government contractors with Top Secret Facility Clearance. The exposed credentials could potentially grant their holders further access to repositories housing similarly sensitive government data. Countless references are made in the leaked files to the US National Geospatial-Intelligence Agency (NGA), which in March awarded Booz Allen an $86 million defense contract. Often referred to as the Pentagon's "mapmakers," the combat support agency works alongside the Central Intelligence Agency, the National Reconnaissance Office, and the Defense Intelligence Agency to collect and analyze geospatial data gathered by spy satellites and aerial drones. The NGA on Tuesday confirmed the leak to Gizmodo while stressing that no classified information had been disclosed.
Accidentally, on porpoise?
> . . . an employee of Booz Allen Hamilton
Isn't that the company Snowden worked for?
I'll see your senator, and I'll raise you two judges.
Refuse to allow Booz any new government contracts for their incompetence. (Won't happen)
Make me a map, Find me a find, catch me a catch...FOTR
Especially if no harm was done.
> The NGA on Tuesday confirmed the leak to Gizmodo while stressing
> that no classified information had been disclosed.
So no harm, no foul fowl.
> “NGA takes the potential disclosure of sensitive but unclassified information
> seriously and immediately revoked the affected credentials,”
> an agency spokesperson said.
I feel safer already. They closed the barn door after it came to their attention that the horse had escaped.
> The Amazon server from which the data was leaked was “not directly
> connected to classified networks,” the spokesperson noted.
That makes me wonder how the information got there then. It must have been some really strange kind of unintentional accident if there is no possible connection between the networks.
> Typically, US government servers hosted by Amazon are segregated into
> what’s called the GovCloud—a “gated community” protected by advanced
> cryptography and physical security. Instead, the Booz Allen bucket was found
> in region “US-East-1,” chiefly comprised of public and commercial data.
So however these 60,000 files weighing in at 28 GB, and "contain[ing] at least a half dozen unencrypted passwords belonging to government contractors with Top Secret Facility Clearance", must have gotten there through some amazing series of unintentional accidents.
Will wonders ever cease?
I'll see your senator, and I'll raise you two judges.
Triangle. Congress critters control taxpayer money used by the military. The military uses private contractors in those congress critters' districts. Those private contractors control the money given to congress critters, thus completing the triangle.
I'll see your senator, and I'll raise you two judges.
let's see how well the hillary defense holds up on this one.
This guy should go to jail.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
Intent does not change the color of the pregnancy test stick.
Intent does not bring people back to life after collision with drunk driver.
Intent is not going to undo the results that will follow from putting a clown circus in power.
The road to somewhere is paved with good intentions.
I'll see your senator, and I'll raise you two judges.
Why do documents with plain-text user credentials exist ANYWHERE, for ANY REASON in the first place? Is the government (or at least the NGA) really that completely incompetent? This is shocking! I don't care that it was leaked. We need to assume that is ALWAYS going to happen. I care that such documents were ever created in the first place.
> The Amazon server from which the data was leaked was “not directly
> connected to classified networks,” the spokesperson noted.
That makes me wonder how the information got there then. It must have been some really strange kind of unintentional accident if there is no possible connection between the networks.
I don't understand the confusion. The Amazon server was never connected to a classified network and no classified information was leaked. It would be a really strange accident if data had migrated off of a classified network. That didn't happen.
He's getting rather old, but he's a good mouse.
Possible options:
Idiotic contractors
Idiotic employers
Any blend of the above
Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
...quick question: did this numbskull ACTUALLY GET FIRED?
Because what I'm finding in our firm's dealing with government and contractors is that very, very few people are ever *actually* held accountable for fuckups.
And I'm talking about people from congresscritters and senior presidential staff on down.
-Styopa
An unintentional act of treason . . .
"I believe in Karma. That means I can do bad things to people all day long and I assume they deserve it." : Dogbert
Was someone just typing in random url's or ip addresses with random sub-directories and .... surprise??
If the US uses gov workers thats more union workers and tax money needed to support them.
If the US gov offers bids to contractors thats full employment in the private sector been paid for by the US tax payer.
The costs allow US political leadership can cling to its "private" sector policy.
With private sector workers all looking at the same US product and US data sets, everything is kept in plain text too. So all the contractors can bid and work with gov/mil data.
If the US gov encrypts its own data then the private sector would have less ability to work with the gov data or bid for work.
So its all kept open, in plain text and contractor friendly so politicians can say they fully support the private sector.
Domestic spying is now "Benign Information Gathering"
I hope the people on gizmodo put up a torrent with the files somewhere, because sharing is caring.
So no harm, no foul fowl.
Stop trying to make this about fauna you animal!