5 ms·

> worse things like breach of export control laws The entire Department of Defense runs on PowerPoint, along with all of their contractors. It is not at all un

> worse things like breach of export control laws The entire Department of Defense runs on PowerPoint, along with all of their contractors. It is not at all uncommon to produce slide decks that are either classified or covered by ITAR; this is a disaster waiting to happen.

jimnotgym 4y ago
Do they run on the same infrastructure as the rest of us?
- 0xbadcafebee 4y ago
  No. DOD/Gov projects can be hosted in completely secure locations, and Azure for Government follows all the required standards. Office365/Sharepoint supports FedRAMP High. Most agencies are in the process of finishing migrations so that both their desktop and online apps use the same data in secure cloud installations.
  - ssteel 4y ago
    Sometimes classified leaks onto unclassified networks via human mistake, coincidence, or ignorance. I've literally seen classified PowerPoint slides marked unclassified due to ignorance. This situation requires security to confiscate all machines the data may have leaked to.
    - jyrkesh 4y ago
      Oh, I've absolutely seen similar, and I don't doubt it's extremely commonplace. But Microsoft generally supports policies for enforced disabling features like the one referenced in the post. Similarly, data exfiltration from managed to non-managed devices is an entire cottage industry. And generally that's why govt employees are expected to use separate, locked down devices where their compliance-obsessed (hopefully, but not always in practice) admin has total root. And I don't believe you're implying this, but certainly I don't think it makes sense for companies to _not_ build internet/cloud-connected experiences and features just because there's a possibility that govt officials won't follow their own security policies and best practices.
- itsmillertime4u 4y ago
  No they run in isolated networks. No classified DoD networks have any access to the internet.
  - CobaltFire 4y ago
    ITAR regulated information isn't only on the SIPR/High side. From the perspective of Classified Data this SHOULD not be a problem, but I highlight the "SHOULD" because sometimes these barriers get crossed unintentionally. Mission briefings, etc. may accidentally leak info, and those are almost all PowerPoint. For the ITAR data though, that's absolutely not only on isolated networks.
  - galleywest200 4y ago
    I think the user met the same networks on Microsoft's end.

jimnotgym 4y ago

Do they run on the same infrastructure as the rest of us?

0xbadcafebee 4y ago
No. DOD/Gov projects can be hosted in completely secure locations, and Azure for Government follows all the required standards. Office365/Sharepoint supports FedRAMP High. Most agencies are in the process of finishing migrations so that both their desktop and online apps use the same data in secure cloud installations.
- ssteel 4y ago
  Sometimes classified leaks onto unclassified networks via human mistake, coincidence, or ignorance. I've literally seen classified PowerPoint slides marked unclassified due to ignorance. This situation requires security to confiscate all machines the data may have leaked to.
  - jyrkesh 4y ago
    Oh, I've absolutely seen similar, and I don't doubt it's extremely commonplace. But Microsoft generally supports policies for enforced disabling features like the one referenced in the post. Similarly, data exfiltration from managed to non-managed devices is an entire cottage industry. And generally that's why govt employees are expected to use separate, locked down devices where their compliance-obsessed (hopefully, but not always in practice) admin has total root. And I don't believe you're implying this, but certainly I don't think it makes sense for companies to _not_ build internet/cloud-connected experiences and features just because there's a possibility that govt officials won't follow their own security policies and best practices.
itsmillertime4u 4y ago
No they run in isolated networks. No classified DoD networks have any access to the internet.
- CobaltFire 4y ago
  ITAR regulated information isn't only on the SIPR/High side. From the perspective of Classified Data this SHOULD not be a problem, but I highlight the "SHOULD" because sometimes these barriers get crossed unintentionally. Mission briefings, etc. may accidentally leak info, and those are almost all PowerPoint. For the ITAR data though, that's absolutely not only on isolated networks.
- galleywest200 4y ago
  I think the user met the same networks on Microsoft's end.