NSA has yet to fix security holes that helped Snowden leaks
Edward Snowden's success in leaking NSA data was chalked up in part to the agency's own security lapses, so you'd think that the agency would have tightened up its procedures in the past five years... right? Apparently not. The NSA Inspector General's office has published an audit indicating that many of the Snowden-era digital security policies still haven't been addressed, at least as of the end of March 2018. It hasn't correctly implemented two-person access controls for data centers and similar rooms, doesn't properly check job duties and has computer security plans that are either unfinished or inaccurate.
The audit also showed that the NSA hasn't implemented the latest federal security guidance, doesn't have a complete inventory of its IT framework and isn't gathering all the documentation it needs before it gives a computer system the go-ahead. And while Snowden didn't rely on malware, the NSA isn't thoroughly scanning for viruses on USB thumb drives and other removable media.
(Score: 5, Funny) by c0lo on Monday July 30 2018, @06:57AM (6 children)
Obvious solution: bring Snowden back and let him loose for pen-testing.
https://www.youtube.com/@ProfSteveKeen https://soylentnews.org/~MichaelDavidCrawford
(Score: 0) by Anonymous Coward on Monday July 30 2018, @12:57PM (3 children)
We tried [wikipedia.org] tobring him back. He may overstay his welcome in Russia. See also Julian Assange.
(Score: 3, Touché) by c0lo on Monday July 30 2018, @02:01PM (1 child)
Well, you tried to bring him for a trial, not pen-testing. No wonder he wasn't interested.
https://www.youtube.com/@ProfSteveKeen https://soylentnews.org/~MichaelDavidCrawford
(Score: 0) by Anonymous Coward on Monday July 30 2018, @06:06PM
You don't know how this works? We offer a plea bargain. You can work for us or go to prison. See: Sabu, Adrian Lamo, etc.
(Score: 2) by looorg on Monday July 30 2018, @02:19PM
There is no doubt in my mind that he will eventually overstay his welcome in Russia and find himself in the trunk of a car or similar. After all just like Assange he has not exactly faded into oblivion but instead keeps tweeting, posting and digitally-attend various conferences. Not to mention the Intercept keep making news now and then from as of yet unused leak material. The gift that keeps on giving will probably one day deliver some very bittersweet gifts.
(Score: 2) by looorg on Monday July 30 2018, @02:21PM (1 child)
Why bring him back? They clearly have not even learned any of the lessons from his last visit. No need to pile on more embarrassment then what they are already suffering.
(Score: 3, Insightful) by c0lo on Monday July 30 2018, @02:35PM
NSA and embarrassment suffering - that's weird. You reckon they still have the necessary organs to suffer the embarrassment?
I was under the impression it was a condition of employment to have that organ surgically removed - otherwise I can find no explanation how they can live with the shame of breaking your constitution for a living.
https://www.youtube.com/@ProfSteveKeen https://soylentnews.org/~MichaelDavidCrawford