Live data from Hacker News

China hacked a Navy contractor and secured sensitive data on submarine warfare

washingtonpost.com

1–10 of 46 posts

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#3
> The data stolen was of a highly sensitive nature despite being housed on the contractor’s unclassified network.

Former government contractor here: Dumbasses need to keep their sensitive data air gapped and inside a SCIF.

If you need to network stuff, there are ways for contractors to implement NSA-approved "type 1" crypto with the appropriate personnel and infrastructure.

Also, I think whoever improperly classified that as not requiring SECRET level protections is going to have a hard time justifying it to their bosses.

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#5
post #3

> The data stolen was of a highly sensitive nature despite being housed on the contractor’s unclassified network. Former government contractor here: Dumbasses need to keep their sensitive data air gapped and inside a SCIF. If you need to network stuff, there are ways for contractors to implement NSA-approved "type 1" crypto with the appropriate personnel and infrastructure. Also, I think whoever improperly classified…

There's stupid and then there's "stupid" putting my tinfoil hat on here: maybe they were allowed to steal the data. I mean really? Oh WOOOPS we stored 613 GB of classified data on an unsecured network in the EXACT place hackers would look... aww that sucks, welp we'll try to do better next time.

I call BS, this level of incompetence smells more like treason disguised as stupidity.

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#6
post #3

> The data stolen was of a highly sensitive nature despite being housed on the contractor’s unclassified network. Former government contractor here: Dumbasses need to keep their sensitive data air gapped and inside a SCIF. If you need to network stuff, there are ways for contractors to implement NSA-approved "type 1" crypto with the appropriate personnel and infrastructure. Also, I think whoever improperly classified…

Are there penalties written into contracts to address failures like this? ISTR when China got loads of F-35 data, Lockheed was "punished" by getting to spend another year and hundreds of millions more dollars "fixing" the plane.

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#7
post #4

Why doesn't the US do something about that? China almost seems overt about stealing secrets like that.

Are you implying that the US are not actively doing the same against nations they see as a threat? It's basically how and why any intelligence service operates - know your enemy and keep up with their technological advances.

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#8
post #3

> The data stolen was of a highly sensitive nature despite being housed on the contractor’s unclassified network. Former government contractor here: Dumbasses need to keep their sensitive data air gapped and inside a SCIF. If you need to network stuff, there are ways for contractors to implement NSA-approved "type 1" crypto with the appropriate personnel and infrastructure. Also, I think whoever improperly classified…

There's stupid and then there's "stupid" putting my tinfoil hat on here: maybe they were allowed to steal the data. I mean really? Oh WOOOPS we stored 613 GB of classified data on an unsecured network in the EXACT place hackers would look... aww that sucks, welp we'll try to do better next time. I call BS, this level of incompetence smells more like treason disguised as stupidity.

A true believer would say the point was to suggest intentionally bad technology (e.g. screen doors!), to retard progress in Chinese submarine design...

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#9
post #7
post #4

Why doesn't the US do something about that? China almost seems overt about stealing secrets like that.

Are you implying that the US are not actively doing the same against nations they see as a threat? It's basically how and why any intelligence service operates - know your enemy and keep up with their technological advances.

I mean overtly responding by taking action against trade or something of the sort.

Re: China hacked a Navy contractor and secured sensitive data on submarine warfare

#10
post #9
post #7

Earlier quoted context omitted.

Are you implying that the US are not actively doing the same against nations they see as a threat? It's basically how and why any intelligence service operates - know your enemy and keep up with their technological advances.

I mean overtly responding by taking action against trade or something of the sort.

[deleted]
Post reply on HN