5 ms·

i dont really know the story other than this article... but seems she was given a awkward but approved secure email methodology. she was repeatedly told that wh

by apalmer 11y ago

i dont really know the story other than this article... but seems she was given a awkward but approved secure email methodology. she was repeatedly told that what she was doing was insecure. she more or less just chose to take this approach because it was more convenient... at least according to this article. just seemed like she had really bad communication discipline and didnt believe it was that big a deal. did get the impression that there really wasnt anyone who really wanted to step up and forbid her to do certain things not sure if there is a role who has authority to do that

jacobolus 11y ago
It seems to me like their procedures and systems were established in an era of telephones, paper memos, and (barely) desktop computers, and that workflow was horribly painful for someone with several years experience doing all communications on a Blackberry. I can understand where Clinton is coming from. If I took a new job and they told me I had to use the ed editor to write code, and could only send patches by fax, I would either demand to keep using my networked laptop, a version control system, and preferred editor, or quit on the spot. It’s ridiculous that the NSA, the White House, and the State Department couldn’t work out some kind of secure mobile device solution for Clinton.
- x0x0 11y ago
  To reiterate harryh's point, the sitting US secretary of state couldn't get a working email solution out of the nsa or state dept internal IT. Simply amazing. And where did everyone who fucking emailed her the entire duration of her employment think emails addressed to HDR22@clintonemail.com were going, exactly?
  - Natsu 11y ago
    She was told she could use a secure laptop or desktop. She was not without secure e-mail, she was without secure e-mail on a device she preferred. The new spins on this story continue to amaze me. There was a lot of discussion some time ago when essentially the same story hit Slashdot: https://news.slashdot.org/story/16/03/17/2242233/emails-show-nsa-rejected-hillary-clintons-request-for-secure-smartphone https://news.slashdot.org/story/16/03/17/2242233/emails-show... EDIT: Lest I forget, this also happened after she'd set up the home email server...
dogecoinbase 11y ago
awkward but approved secure email methodology. Awkward is insecure.
- apalmer 11y ago
  explain what this means?
  - oofabz 11y ago
    If someone needs a tool to do their job, and they are supplied with a bad tool, there is a high chance they will use their own tool instead. If this goes poorly, both parties are to blame. Therefore if it is your job to keep communications secure, it is not enough to supply users with a secure system, it is also your job to supply them with a usable system.
    - apalmer 11y ago
      fundamentally as far as i can tell based on what i know of the details primarily based on the article here... sometimes in real life processes are by necessity awkward. 2 factor authentication is awkward, long complex alphanumeric password are awkward, not being able to use private thumbdrives on certain networks is awkwards... sometimes the secure alternative is awkward. she had as far as i can tell a usable system, i am under the impression it is usable because pretty much everyone else besides her and the president who have top level security clearance use the system and do their job...
      - e12e 11y ago
        I remember seeing a great picture in a security presentation of some kind, and for the life of me I can't find it again. Basically it was a 10' tall sign outside of a maximum security prison that read: "Security is not a convenience".
    - ethanbond 11y ago
      It's weird that hundreds of thousands of other people with similar clearances don't run into this issue.
basch 11y ago
"not sure if there is a role who has authority to do that" that's probably the most likely scenario. they can punish her but they cant control her real time.

by apalmer 11y ago

jacobolus 11y ago

It seems to me like their procedures and systems were established in an era of telephones, paper memos, and (barely) desktop computers, and that workflow was horribly painful for someone with several years experience doing all communications on a Blackberry. I can understand where Clinton is coming from. If I took a new job and they told me I had to use the ed editor to write code, and could only send patches by fax, I would either demand to keep using my networked laptop, a version control system, and preferred editor, or quit on the spot. It’s ridiculous that the NSA, the White House, and the State Department couldn’t work out some kind of secure mobile device solution for Clinton.

x0x0 11y ago
To reiterate harryh's point, the sitting US secretary of state couldn't get a working email solution out of the nsa or state dept internal IT. Simply amazing. And where did everyone who fucking emailed her the entire duration of her employment think emails addressed to HDR22@clintonemail.com were going, exactly?
- Natsu 11y ago
  She was told she could use a secure laptop or desktop. She was not without secure e-mail, she was without secure e-mail on a device she preferred. The new spins on this story continue to amaze me. There was a lot of discussion some time ago when essentially the same story hit Slashdot: https://news.slashdot.org/story/16/03/17/2242233/emails-show-nsa-rejected-hillary-clintons-request-for-secure-smartphone https://news.slashdot.org/story/16/03/17/2242233/emails-show... EDIT: Lest I forget, this also happened after she'd set up the home email server...

dogecoinbase 11y ago

awkward but approved secure email methodology. Awkward is insecure.

apalmer 11y ago
explain what this means?
- oofabz 11y ago
  If someone needs a tool to do their job, and they are supplied with a bad tool, there is a high chance they will use their own tool instead. If this goes poorly, both parties are to blame. Therefore if it is your job to keep communications secure, it is not enough to supply users with a secure system, it is also your job to supply them with a usable system.
  - apalmer 11y ago
    fundamentally as far as i can tell based on what i know of the details primarily based on the article here... sometimes in real life processes are by necessity awkward. 2 factor authentication is awkward, long complex alphanumeric password are awkward, not being able to use private thumbdrives on certain networks is awkwards... sometimes the secure alternative is awkward. she had as far as i can tell a usable system, i am under the impression it is usable because pretty much everyone else besides her and the president who have top level security clearance use the system and do their job...
    - e12e 11y ago
      I remember seeing a great picture in a security presentation of some kind, and for the life of me I can't find it again. Basically it was a 10' tall sign outside of a maximum security prison that read: "Security is not a convenience".
  - ethanbond 11y ago
    It's weird that hundreds of thousands of other people with similar clearances don't run into this issue.

basch 11y ago

"not sure if there is a role who has authority to do that" that's probably the most likely scenario. they can punish her but they cant control her real time.