4 ms·

I don't disagree, however... human beings can be lazy, short-sighted or take short-cuts. I wouldn't put it past someone to keep something where it shouldn't be,

I don't disagree, however... human beings can be lazy, short-sighted or take short-cuts. I wouldn't put it past someone to keep something where it shouldn't be, intentionally or by accident.

jjcon 6y ago
I don’t think you understand how difficult it would be to get classified information on your unclassified laptop and there isn’t a chance in hell you could do it by accident
- Robin_Message 6y ago
  Just wondering as I have no special knowledge, but suppose I am a senator and I receive a number of classified briefings on a particular issue. Could I use Outlook to take some notes on my thoughts on that issue? Say as a draft e-mail? I don't think there would be anything technical to stop me, and it's not going to set off any automatic exfiltration flags. But those notes could very well need to be classified. Does everyone in the Capitol with access to classified material have the necessary skills and incentives not to make notes about them on their personal computer?
  - jjcon 6y ago
    If you are receiving a classified briefing you cannot be on a machine that has internet access - the briefing would be in a secured area with no personal devices and the only machines in that area are airgapped (and they are airgapped forever, no switching back and forth). You could of course write stuff down afterwards in an unsecure place but that is day 1 essential huge fucking deal no no. You don’t even discuss classified info outside a secure area, not in your public office not in the outback not ever. That doesn’t mean people don’t do it but when they do and it is found out it is a really big deal. Accidents do happen and there are protocols in place to deal with them when they occur. 99.9% of these leaks are extremely mundane low tier classification and are due to document misclassification etc. Sometimes the name of a project is classified and is leaked by reference etc but when it comes to actual important stuff people are quite competent at keeping that in secure areas.
    - MagnumOpus 6y ago
      Though of course all those rules are subject to Trump's Law: "When you are a star they let you do it". A random member of the military or the administration would go to jail for a long time, a senator especially from the same party as the president would get away with it with impunity.
  - astura 6y ago
    >Does everyone in the Capitol with access to classified material have the necessary skills and incentives not to make notes about them on their personal computer? Access to classified information comes with training on properly handing classified information. Mishandling classified information is a crime if you have a security clearance
- richardwhiuk 6y ago
  You write an email that references something you read in a classified briefing? Nancy Pelosi is part of the Gang of Eight - https://en.wikipedia.org/wiki/Gang_of_Eight_(intelligence) https://en.wikipedia.org/wiki/Gang_of_Eight_(intelligence) which is briefed on National Security matters by the Executive Branch (this is top secret, special forces operations style stuff).
  - Jtsummers 6y ago
    That's actually how a lot of real-world classified data leak incidents happen. Either someone records a classified fact/detail on an unclassified system through carelessness or lack of caution, or compiles a set of facts that are (in aggregate) classified but individually unclassified. The latter can be particularly pernicious as it's hard to know the aggregate classification. I may be able to say in separate contexts "The XF-42 is capable of exceeding 1200 nautical miles per hour" and "The XF-42 is capable of flying in excess of 60k feet" but placing the two facts together can actually be classified (in practice, usually more than two details).
    - setr 6y ago
      This seems nonsensical -- why are the sum of the parts more classified than the individual? If I put together a long list of facts about the XF-42, it's classified, but if I separate each item onto a different page and tell someone else how to recompile the information (eg page numbers), it's fine? I can't imagine a scenario where this model makes sense -- ignoring absurdities like classifying basic facts (sky is blue) and words (help) due to cascading classification. It seems to me the rule should be that of poisoning -- any information in a document with classification X poisons the rest of the document to the same classification; or rather, a document classification is the maximum of its children
      - jjcon 6y ago
        I’ve never seen exactly what they are talking about but what they may be getting at is actually information compartmentalization - group A can know fact A and group B can know fact B but neither group can know AB. Some higher up official can know AB but must keep those facts separated in documentation because they may share portions with the groups. Having said that - both A and B are classified. You can’t have unclassified compartmentalized info.
- deleted 6y ago
  [deleted]

I don't disagree, however... human beings can be lazy, short-sighted or take short-cuts. I wouldn't put it past someone to keep something where it shouldn't be, intentionally or by accident.

jjcon 6y ago

I don’t think you understand how difficult it would be to get classified information on your unclassified laptop and there isn’t a chance in hell you could do it by accident

Robin_Message 6y ago
Just wondering as I have no special knowledge, but suppose I am a senator and I receive a number of classified briefings on a particular issue. Could I use Outlook to take some notes on my thoughts on that issue? Say as a draft e-mail? I don't think there would be anything technical to stop me, and it's not going to set off any automatic exfiltration flags. But those notes could very well need to be classified. Does everyone in the Capitol with access to classified material have the necessary skills and incentives not to make notes about them on their personal computer?
- jjcon 6y ago
  If you are receiving a classified briefing you cannot be on a machine that has internet access - the briefing would be in a secured area with no personal devices and the only machines in that area are airgapped (and they are airgapped forever, no switching back and forth). You could of course write stuff down afterwards in an unsecure place but that is day 1 essential huge fucking deal no no. You don’t even discuss classified info outside a secure area, not in your public office not in the outback not ever. That doesn’t mean people don’t do it but when they do and it is found out it is a really big deal. Accidents do happen and there are protocols in place to deal with them when they occur. 99.9% of these leaks are extremely mundane low tier classification and are due to document misclassification etc. Sometimes the name of a project is classified and is leaked by reference etc but when it comes to actual important stuff people are quite competent at keeping that in secure areas.
  - MagnumOpus 6y ago
    Though of course all those rules are subject to Trump's Law: "When you are a star they let you do it". A random member of the military or the administration would go to jail for a long time, a senator especially from the same party as the president would get away with it with impunity.
- astura 6y ago
  >Does everyone in the Capitol with access to classified material have the necessary skills and incentives not to make notes about them on their personal computer? Access to classified information comes with training on properly handing classified information. Mishandling classified information is a crime if you have a security clearance
richardwhiuk 6y ago
You write an email that references something you read in a classified briefing? Nancy Pelosi is part of the Gang of Eight - https://en.wikipedia.org/wiki/Gang_of_Eight_(intelligence) https://en.wikipedia.org/wiki/Gang_of_Eight_(intelligence) which is briefed on National Security matters by the Executive Branch (this is top secret, special forces operations style stuff).
- Jtsummers 6y ago
  That's actually how a lot of real-world classified data leak incidents happen. Either someone records a classified fact/detail on an unclassified system through carelessness or lack of caution, or compiles a set of facts that are (in aggregate) classified but individually unclassified. The latter can be particularly pernicious as it's hard to know the aggregate classification. I may be able to say in separate contexts "The XF-42 is capable of exceeding 1200 nautical miles per hour" and "The XF-42 is capable of flying in excess of 60k feet" but placing the two facts together can actually be classified (in practice, usually more than two details).
  - setr 6y ago
    This seems nonsensical -- why are the sum of the parts more classified than the individual? If I put together a long list of facts about the XF-42, it's classified, but if I separate each item onto a different page and tell someone else how to recompile the information (eg page numbers), it's fine? I can't imagine a scenario where this model makes sense -- ignoring absurdities like classifying basic facts (sky is blue) and words (help) due to cascading classification. It seems to me the rule should be that of poisoning -- any information in a document with classification X poisons the rest of the document to the same classification; or rather, a document classification is the maximum of its children
    - jjcon 6y ago
      I’ve never seen exactly what they are talking about but what they may be getting at is actually information compartmentalization - group A can know fact A and group B can know fact B but neither group can know AB. Some higher up official can know AB but must keep those facts separated in documentation because they may share portions with the groups. Having said that - both A and B are classified. You can’t have unclassified compartmentalized info.
deleted 6y ago
[deleted]