Hacker News new | past | comments | ask | show | jobs | submit login

I will admit I'm not well versed in how OpSec works. Are there no OpSec policies for what happens if something accidentally leaks? Are there no policies for what happens if a Top Secret file makes it to someone with the wrong clearance?

My gut would tell me that you want as perfect OpSec as you can manage, but then have contingencies for the occasion when something fails. Otherwise you would get the kind of flailing we're seeing right now after the Snowden leaks.




Two points:

1) When classified information is accidentally moved to a computer with a lower classification it is a shit storm. Everything stops. All hardware involved is isolated and scrubbed. If it can't be scrubbed with certainty (e.g. deallocated sectors on the hard disk that might contain classified data but can't be scrubbed anymore because they are deallocated) then the equipment is destroyed (or classified to match the level of the information that was leaked).

2) All information on a classified system is considered classified at the level of the computer system it is stored on. When there is a need to move not-really-classified information off that system (like send a log file that a vendor needs to help debug software) then it is manually inspected by a SME (subject matter expert) to positively verify it does not contain classified information and then copied off to unclassified media. But if there is any doubt, like a binary core file, the file is forbidden from leaving the system.

The main point here is that the SME positively identifies all the data as being unclassified. The assumption is that the data is classified and it must be pain-stakingly verified on a line-by-line basis. It is a real PITA.

Considering that these NSA programs are highly classified, at least TS and I'm thinking TS sci/codeword given the style of single-word names for the programs, the same sort of manual, positive identification process should be used when giving the data to another country.

Also, Israel is considered a major intelligence adversary by the US DoD. Israel and China are at the top of the list of countries they warn people with clearances to be careful of. Blithely handing over this raw SIGINT data is ridiculous given that context.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: