Slashdot Mirror
DOD Seeks Classification 'Clippy' To Help Classify Data, Control Access (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: The DOD has issued a request for information (RFI) from industry in a quest for technology that will prevent the mislabeling and accidental (or deliberate) access and sharing of sensitive documents and data. In an announcement posted in May by the Defense Information Systems Agency (DISA), the Pentagon stated that the DOD CIO's office -- part of the Office of the Secretary of Defense -- is "investigating the use of commercial solutions for labeling and controlling access to sensitive information." Defense IT officials are seeking software that "must be able to make real-time decisions about the classification level of the information and an individual's ability to access, change, delete, receive, or forward the information based on the credentials of the sending and/or receiving individual, facility, and system."
In other words, the DOD is looking for a classification Clippy. In a response to questions regarding the RFI issued in late June, DOD officials said that the system should be able to ideally protect "any file type on a Microsoft operating system (OS) file system and active directory domain."
In other words, the DOD is looking for a classification Clippy. In a response to questions regarding the RFI issued in late June, DOD officials said that the system should be able to ideally protect "any file type on a Microsoft operating system (OS) file system and active directory domain."
NTFS and a decent admin(s)?
I don't see the problem here. Access control should be EASY for people to setup and use. Especially for non-technical people who are the source of the classified material in question.
There seems to be a bit of condescension in the article...typical IT geek bullshit that drives me up the wall. Our job is to give people good tools to do their jobs, not go "you're too stupid to use computers".
So Clippy gets a security clearance. What can go wrong?
Goodbye, Slashdot!
It looks like you're writing a letter. Would you like help determining the content's security classification?
It looks like you are trying to declare war on North Korea; would you like me format a letter for you to the President detailing your request for nuclear weapon strikes?
"That's the way to do it" - Punch
...just not on Windows. Hmmmm...is "good luck" a valid response?
Security is DIFFICULT.
Hire (and pay well for) good people.
All up and down the stack. Even your janitors need at least enough intelligence to maintain the security classification.
If a worker that just doesn't "get it" is required, then they need a constant escort secretary to maintain that security.
Any sort of 'assistant' or other replacement for the above just won't work for anything that really matters.
"It looks like you're trying to leak classified information to WikiLeaks... would you like help with that?"
I've abandoned my search for truth; now I'm just looking for some useful delusions.
"You've marked this 'Sensitive - NoForn'. Did you know that if people from other countries see this, you could get executed?"
"Helpful hint: If information would hurt the current administration, leak it to CNN so it can be called 'Fake News'. If it can help the current administration, leak it to Fox."
Mimetics Inc. Twitter
We here are lowrest bid for make classified automated A.I.
We your install software to synergize classification of documents. Data is read into cloud, and our human mimicry of A.I. in no sweatshop reads the information and classificies the information. Data grab you!
Lowrest bid: $5000 first
Hire (and pay well for) good people.
Take a page from Twitler's Mar-a-Lago playbook: hiring 78 foreign workers on H2B visas.[1]
Because why? He can't find Americans that are willing to work for $12.75 an hour?
Willing? Or just can't actually live on $12.75 an hour.
[1] http://thehill.com/homenews/administration/396346-mar-a-lago-requesting-permission-to-hire-78-foreign-workers
must be able to make real-time decisions about the classification level of the information and an individual's ability to access, change, delete, receive, or forward the information based on the credentials of the sending and/or receiving individual, facility, and system."
In other words, the DOD is looking for a classification Clippy.
Only an idiot would reach that conclusion. I would assume they are looking for something along the lines of Symantec / Sophos / others - DLP solutions.
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
"It looks like you're trying to steal classified information! Would you like some help?"
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
So this is access control based on role?
What does it have to do with Clippy?
Janitors have keys to *everything*.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
Look, your problem isn't apps.
Your problem is you're infested with Russian operatives and Nazis.
It took me years to clean up Pacific Region from a nonclass state to a vetted classification state.
We all know where the problem is.
-- Tigger warning: This post may contain tiggers! --
It actually sounds like they want something similar to the failed FBI project Virtual Case Files or Sun Microsystems now defunct Trusted Solaris OS.
Mr. President, you appear to be sharing classified intelligence with a Russian citizen and known spy. Perhaps you'd like to share this other secret too?
Click Yes to Continue!
50M kickback
2K for the real work.
After all, if you're connected well enough 'no reasonable prosecutor' would bring a case against you regardless of how many documents you mishandle. If you're just a lowly sailor then they will throw the book at you even for minor infractions. Until justice is evenly applied then it's all a rather obvious scam.
I thought it was masterful when MS used him as the voice of Clippy.
Most Americans are I am sure reassured in the knowledge that their military is dependent on Microsoft for its security. Let's invade some country - let's foist a few BSODs on them.
Like a cheap slasher movie bad guy, he keeps coming back to life.
no....no, they don't
So the DOD simply wants Solaris 11 with Trusted Extensions then?
ref:
http://www.oracle.com/us/produ...
https://www.youtube.com/watch?...
PS. Give self negative 1Billion karma for mentioning Oracle...
Hey don't bother clicking those links since it will just be cre1mer telling you the same things but slowly. I watched the at ua-video, the privacy respecting non-google alternative to YouTube and that was literally all the useful content in a single post.
Janitors in these spaces are either escorted or they are taken out of hide from the cleared personnel working there.
It looks like you're trying to set up a classified server in your spare room, would you like help with that?
Cre!mer is spamming his youtube channel.
He has said that he intends to make over 1/10th of his retirement by spamming links to his youtube channel on Slashdot.
He has also encouraged other people to follow in his footsteps so they can make "coffee money" too. Can you imagine what would happen to Slashdot if we were all here trying to get each other to view monetized links.
He is cancer to the places that he posts.
You'd be surprised when you discover the amount of access to various places janitors and coffee machine maintenance personnel has. They may be escorted around, but they will see a lot too.
If you have some serious secrets then the workers have to mop the floors themselves.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
From what I've seen personally, it may start out with janitors being escorted, but over time that tends to fall by the wayside.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
An uncleared janitor might have access to a secure area, but any classified documents will be put away, and classified systems will be locked, before they enter, and will stay that way until they leave.
Oh man this is just too good.
We, the government can't manage our own security, so we want industry to do it for us.
Hmmm, why don't you encrypt that stuff, huh?