Slashdot Mirror


Inspector General Says NSA Still Hasn't Implemented Its Post-Snowden Internal Security Measures (techdirt.com)

An anonymous reader quotes a report form Techdirt: In the immediate aftermath of an NSA contractor springing numerous leaks back in 2013, the NSA vowed this would never happen again. It has happened again and it hasn't just been documents. It's also been software exploits, which contributed to a worldwide plague of ransomware. The NSA was going to make sure no one could just walk out of work with thousands of sensitive documents. It laid out a plan to exercise greater control over access and fail safe procedures meant to keep free-spirited Snowdens in check. The NSA is the world's most powerful surveillance agency. It is also a sizable bureaucracy. Over the past half-decade, the NSA has talked tough about tighter internal controls. But talk is cheap -- at least labor-wise. Actual implementation takes dedication and commitment. The NSA just doesn't have that in it, according to a recent Inspector General's report: "The nation's cyber spy agency is suffering from substantial cyber vulnerabilities, according to a first-of-its-kind unclassified audit overview from the agency's inspector general released Wednesday. Those vulnerabilities include computer system security plans that are inaccurate or incomplete, removable media that aren't properly scanned for viruses, and an inadequate process for tracking the job duties of National Security Agency cyber defenders to ensure they're qualified for the highest-level work they do, according to the overview."

6 of 68 comments (clear)

  1. Re:Fact is this is the Deep State At work. by Anonymous Coward · · Score: 0, Insightful

    What is up with you deplorables being so obsessed with pedophilia and child sex rings? Methinks we'd find kiddie porn on your computer...

  2. SOP by datavirtue · · Score: 4, Insightful

    Seeing what I have seen in regards to security vulnerabilities reported to institutions and the general paralysis that ensues when anyone brings up real security in just about any organization...none of this surprises me...at all. In fact, I would have predicted nothing would be done, especially given the tell where the institution focuses on a single perpetrator or incident when in fact that is not at all the problem. When their security sucks, and they don't get it and can't fix it because they suck, they spin the focus on Snowden or whatever evil hacker dujour.

    --
    I object to power without constructive purpose. --Spock
    1. Re:SOP by BlueStrat · · Score: 3, Insightful

      Seeing what I have seen in regards to security vulnerabilities reported to institutions and the general paralysis that ensues when anyone brings up real security in just about any organization...none of this surprises me...at all. In fact, I would have predicted nothing would be done, especially given the tell where the institution focuses on a single perpetrator or incident when in fact that is not at all the problem. When their security sucks, and they don't get it and can't fix it because they suck, they spin the focus on Snowden or whatever evil hacker dujour.

      The issue is not the NSA's internal security. That's not what causes the leaks we've seen.

      The problem is the NSA itself performing domestic spying.

      The NSA will remain under attack by the NSA's own workers and the US's own citizens until that changes because the NSA has made itself the enemy.

      Strat

      --
      Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
  3. Cyber spy media not scanned for viruses? by najajomo · · Score: 4, Insightful

    The nation's cyber spy agency is suffering from substantial cyber vulnerabilities .. removable media that aren't properly scanned for viruses

    Jesus tapdancing Christ on rollerskates, the FSB must be laughing into their soup :]

  4. Re:What can the US gov do? by l0n3s0m3phr34k · · Score: 4, Insightful

    The NSA and other gov agencies just don't pay enough for your laundry list. Working for "God and country" doesn't fit with the US capitalism idea very well. They are on the low end of almost all salary ranges; and that is BEFORE you eliminate about 95% of the potential people with your list.

    What does "politics" or "faith group" even mean in your post? Many would point to a good chunk of our currently elected lawmakers in the Federal government who are associated with Dominion theology, "end timers", and other now-deeply ingrained ideals. Are you wanting non-political persons only? According to the Eastern Orthodox church, every Christian religious group that is associated with the Baptists is considered a "heretical cult". One third of the current US population doesn't believe anything the US intelligence agencies say about foreign politics and blindly believes anything Trump says, another third think his actions are nearly treasonous, so the idea of a "political litmus test" is a very tricky barrier; and is probably illegal anyway (there are Supreme Court cases around this). We currently have POTUS staff who are potentially (I say this because there has yet to be hearings, trials, or such) in violation the Hatch Act, so even the very top of this food chain is contaminated.

    If you define a "criminal past" as the FBI does, that only eliminates around 29% of the US population. If you take it further, and cull out anyone with any negative relations with law enforcement, including non-felonies, then it's more like half of black males and almost 40 percent of white males. Combined with the low pay, and one ends up in the position we are currently in: not enough people to do the job.

    While I understand what your getting at, your idea would require a huge, non-partisan overhaul of the underlying "security form" system. We can't even manage to approve money to have a plan to secure our elections in any meaningful way, and your idea goes directly against the ideals of the current administration and many elected officials. They want people who believe in the scourge of the "Deep State", not people who are willing to go work for the Deep State...by which I define "deep state" as the unelected bureaucratic apparatus that keeps the government functional in it's day-to-day workings. Many of the appointed Cabinet heads have publicly said they want to dismantle the bulk of the Federal government, so good luck finding anyone that fits your list who is willing to take home 80% of the average wage for their position.

  5. Spies Apply by ripvlan · · Score: 3, Insightful

    Given that low level people can access info beyond their pay grade, I'd assume spies are everywhere within the system.

    If Snowden exposed anything - it's how poor the security is and that people could easily steal data and give it to foreign governments. Should the person desire to do that of course.