4 ms·
It seems like a lot of them contain largely public info from unclassified manuals, but also have a few base-specific things thrown in that cause the problem. F
by morpheuskafka 5y ago
It seems like a lot of them contain largely public info from unclassified manuals, but also have a few base-specific things thrown in that cause the problem.
For example [1] is basically a standard police academy study guide, but it also has the names of which armored car services are allowed entry to post, which parking lots are used for storage of nuclear materials during Safe Haven event, [2] has real world and exercise countersigns mixed in with non-sensitive form names and acronyms. Another one had a list of duress words (all named after spices), though it says these are changed every six months. A lot of stuff you could guess easily but still identifies weaknesses (ex. school buses can get on base with a district badge, which is nowhere near as hard to copy as a CAC). [3] has the location of a SCIF. Some other ones had room numbers of buildings containing information networking infrastructure (no public map, but googling the building number returned a picture of the facility from the architect's site).
I'm not military, so I'm curious how big of a deal this is relatively? Like is this stuff that a credible attacker could easily find out anyway or is it actually a major weakness?
[1]: https://quizlet.com/411678831/qc-questions-flash-cards/ https://quizlet.com/411678831/qc-questions-flash-cards/
[2]: https://quizlet.com/347943371/bdoc-flash-cards/ https://quizlet.com/347943371/bdoc-flash-cards/
[3]: https://quizlet.com/478059813/iec-qc-flash-cards/ https://quizlet.com/478059813/iec-qc-flash-cards/