Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The Times reported that the CIA created a special network share with the cables that the staffers were supposed to review, and that the staffers "had penetrated a firewall inside the C.I.A. computer system that had been set up to separate the committee’s work area from other agency digital files".

That sounds overblown to me. The SSCI committee hires from the same general pool as the rest of the Hill -- ambitious PoliSci grads, lawyers, and the like. They pay the same crappy wages too. They aren't getting Kevin Mitnick.

My guess is that some incompetent windows admin didn't set the permissions right and they were able to click on network neighborhood and access the files in question.



Maybe - but remember, we're talking about the CIA. My encounters with anyone potentially related to the agency has been that they're quite competent, to say the least. When considering an agency such as the CIA, it's safe to say that incompetence only occurs in areas where competence is not a priority, incompetence is on purpose, or where the situation is beyond the competence of anyone.

So my guess is they applied little care to the oversight committee and handed them a sheet of what not to do, such as attempt to browse external web sites. The staffers did so anyway, and now are "penetrating" the firewall that didn't even exist except on paper. The agency now has a reason to restrain activities of oversight staffers that they didn't have before (for violating policy).


> So my guess is they applied little care to the oversight committee and handed them a sheet of what not to do, such as attempt to browse external web sites. The staffers did so anyway, and now are "penetrating" the firewall that didn't even exist except on paper. The agency now has a reason to restrain activities of oversight staffers that they didn't have before (for violating policy).

That sounds likely, but that also sounds like incompetence on the CIA's part. It also seems absurd for the CIA to decide what the CIA overseers can see.


it's safe to say that incompetence only occurs in areas where competence is not a priority, incompetence is on purpose, or where the situation is beyond the competence of anyone.

Such as setting up file-access auditing on sensitive files, like what they (or Booz Allen Hamilton, their contractor) didn't do? Hard to believe basic Microsoft sysadmin training concepts evade their competency filter.


Oh duh, the Booz comment was intended to include Edward Snowden's name.


You're confusing the NSA and the CIA. They are, actually, different entities.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: