LANL, Sandia Report Losing Classified Data 149
dread minerva writes "This week, Los Alamos and Sandia National Laboratories publicly reported that sensitive material stored on removable data storage devices was missing." In Sandia's case, "According to the Las Vegas Sun, this 'prompted the lab to halt all classified work Thursday while officials conduct a wall-to-wall inventory of sensitive data.' Sandia also reported that a 'computer floppy disk was missing.' However, according to the Albuquerque Journal, 'lab officials said they don't believe it contains any weapons information or any other information that could harm national security,' only admitting that the material on the disk was classified. Due to these latest events, LANL has shut down all work on classified projects as of Friday." (Read more below.) Update: 07/17 21:21 GMT by T : A correction -- research was shut down only at LANL (not, as I mistakenly claimed, at Sandia) -- and an update: Sandia's missing disk was recovered.
"These snafus have led the government to open up the labs to defense-contracting bids for the first time in their 60+ year history (until now the labs have been run by UC-Berkeley). As NPR reported on Friday, the researchers at the labs were upset by this move, as they are afraid of the labs losing their academic nature. Perhaps the best question to ask in this situation is why these labs are still using removable data storage devices to store sensitive information."
(Other institutions, including The University of Texas system, are also angling for a share of the lab's management.)
Cursed iPods :) (Score:5, Funny)
Re:Cursed iPods :) (Score:3, Insightful)
Re:Cursed iPods :) (Score:2)
Empty out the insides of the iPod and put the shell back together so it looks whole. Then carefully pry apart the floppy disk, and discard the plastic shell. If you very carefully bend the little magnetic disc, you can probably fit it inside the iPod. However, you probably run the signficant chance that you just borked all the data on the disk!
Re:Cursed iPods :) (Score:2)
Re:Cursed iPods :) (Score:2, Informative)
Sandia Labs is like (Score:5, Funny)
Terrorist: I'll take two hard drives with weapons research on them.
Sandia: That'll be $2000. Thank you and please come again.
Re:Sandia Labs is like (Score:2)
Re:Sandia Labs is like (Score:2)
Sandia: Would you like fries with that?
Should know better.. (Score:5, Funny)
Re:Should know better.. (Score:2, Interesting)
The idea isn't to hide the disk on top of your desk,, "Purloined Letter" style. The idea is to make sure it's completely obvious to anyone that sees it that the disk is classified, must be handled as classified, and no "but I didn't know it was classified" excuses.
The bad guys are already going to know what they're after. It's usually
Still associated with university? (Score:2, Funny)
Re:Still associated with university? (Score:5, Insightful)
Re:Still associated with university? (Score:1)
I'm not looking to start an off-topic flamewar or anything, but that's silly. If you plan on playing on the sports team, sure, but to fill the stands? I was divided between two schools with similar academics and chose my school because of its proximity to Mt. Baker, where I get to enjoy my sports in the first-person, not where I get drunk in the lodge and watch from a safe
Re:Still associated with university? (Score:2)
Re:Still associated with university? (Score:1)
> awareness of the school,
What happened to strong academic programs that create a national awareness? Though I would have to admit that this might be tough since it seems sports are more popular than intellectual activities here.
Re:Still associated with university? (Score:3, Insightful)
Re:Still associated with university? (Score:5, Funny)
Furthermore, they'll probably be happy with that new kind of exercise for the muscles. They would only require chocolate powerbars to go on. You can create the design for powerbar in 5 minutes (sugar, wheet, chocolate), give it to them, and have electricity to spend on all those more important projects (neverending-quantum-etc).
They'll of course have food and be together (males and females) in a sweaty environment which is all that disgusting, isn't it. Of course when feromones kick in they'll assure the continuity of the species AND have the design for the powerbars plus to feed their babies (which will be stronger).
See, it's a perfectly good example of evolution at work in these modern times.
sports teams? (Score:2)
Re: (Score:1)
Remind me again... (Score:5, Insightful)
What is it with computers that they are magnets for incompetent people? Before everything was stored electronically somehow I doubt people obtained sensitive info just because someone forgot to lock a vault door...
Re:Remind me again... (Score:5, Insightful)
Sprinkling it around at random does not necessarily improve security. Encryption can actually reduce security by distracting people from higher-risk threats. It also increases the probability of irrecoverable data loss unless unusual redundancy measures are taken.
Read Richard Feynman's accounts of the operational security of LANL. Their security has leaked like a sieve since the Manhattan Project days.Re:Remind me again... (Score:2)
Yeah, like floppy disk's are such a great media for avoiding data loss *cough*.
Re:Remind me again... (Score:2)
At least it usually works for me.
Re:Remind me again... (Score:1)
If you can freely walk around inside the building, you own the data.
The redundancy I mentioned was in regard to data corruption. With many encryption schemes, there's no such thing as corrupting one bit. Look up the bit error rates for commodity RAM sometime: it's scary.
Re:Remind me again... (Score:2)
Feynman was once able to crack the only safe at Los Alamos that held the collective classified data of the Manhatten project in a matter of seconds.
The Colonel in charge of the project never changed the safe combination from the default. He didn't even know you could do that.
KFG
Encrypted? It probably doesn't matter. (Score:2)
Re:Encrypted? It probably doesn't matter. (Score:2)
In this case, though, it's more likely that the floppy was used just to send some data between researchers, and once the data was copied onto computer the disk was destroyed, but the guy forgot to record the fact.
Stale news... (Score:5, Informative)
See here [cbsnews.com].
In any case it's not newsworthy.
Re:Stale news... (Score:3, Informative)
Re:Stale news... (Score:2)
When the news emerged it was newsworthy, at least on the UK 24hour rolling channels
Re:Stale news... (Score:1)
Classified Data (Score:5, Informative)
"Oh my GOD where is my Britney Spears pictures!!!."
Re:Classified Data (Score:1, Informative)
Re:Classified Data (Score:2)
As related to your scenario, the floppy write protection is optical in nature, and it is easy to hack the drive so that it sees all floppies as write-enabled.
I wouldn't worry too much about it. (Score:5, Funny)
The missing data was stored on Zip drive floppies.
In other words, the media itself will fail in about 6 months, and there wont be any Zip drives still working by then to read it.
Small but Important (Score:5, Insightful)
Re:Small but Important (Score:4, Insightful)
That single floppy could have contained the results of years of experimentation. Thus allowing anyone that obtained it, to forego that same xperimentation, and advance their studies further at the exspense of the United States Tax Payer.
Huh? At the expense of nobody.
If the citizens of the USA pay for research, and then somebody copies that research, it doesn't cost the citizens of the USA any more at all. They already paid for the research to be done, and they already have the benefits of the new knowledge. Somebody else having that same knowledge doesn't take it away from them or cost them anything.
I'm a UK citizen. You may have read the recent stories about the BBC opening up their archives under a Creative Commons license. That material was paid for by UK citizens. But people outside the UK copying it as much as they want doesn't cost the UK anything. I'm pleased that the BBC are taking these steps.
Re:Small but Important (Score:1)
Re:Small but Important (Score:1)
The one
Re:Small but Important (Score:2, Insightful)
Ultimately tax payers pay for the military advantage that classified research can give them. True, they pay the same amount whether or not a copy is made. However, the value of what they spent their money on is diminished if the information falls into the wrong hands.
Re:Small but Important (Score:3, Interesting)
Keeping research findings holed up is a good way to waste a lot of effort duplicating others' findings. No need to have every country individually figure things out.
One floppy disk, eh? (Score:3, Funny)
A:> unrar moab_blueprint_1.2.3.rar
Unpacking...
Please insert medium containing moab_blueprint_1.2.3.001 in drive A:
[A]bort, [R]etry, [F]ail, [G]o home and drink soup?
- Seth
What? (Score:4, Interesting)
Re:What? (Score:3, Insightful)
Who ever said the data couldn't be used to threaten national security? There are other ways to threaten security other than just weapons data; infrastructure information, intelligence reports, and even science that nobody is quite sure what to make of at this point.
Re:What? (Score:2, Informative)
From the summary: "lab officials said they don't believe it contains any weapons information or any other information that could harm national security"
Re:What? (Score:3, Funny)
Aren't these the same lab officials who thought they had adequate security to protect classified data?
Re:What? (Score:1)
That would be due to the fact that stupid information propagates faster (less content, thus smaller mass), so it's vital to keep it in check. Now that you read this classified explanation, please do not leave your current premises - you will be contacted shortly with a choice of being moved to a secure location or a quick and painless death.
Security team,
Sandia Labs.
Re:What? (Score:1, Informative)
Whenever a disk touches a classified machine, it automatically because as classified as the information on that machine -- agai
Re:What? (Score:3, Informative)
Re:What? (Score:5, Insightful)
Re:What? (Score:3, Informative)
Remo
Culture of fear (Score:5, Insightful)
Of course it's appropriate to be anal about security when dealing with this type of stuff. But it takes a special kind of person to function well in a culture of fear, and such people are very rare, even more rare when you also require that they have advanced scientific degrees. So LANL has to strike a delicate balance between instilling fear to enhance security, and dealing with the unwanted, paradoxically security-degrading consequences of that fear.
When Wen Ho Lee backed up his work data, it was not even classified. It was designated "Protect As Restricted Data" (PARD), which is not a classified designation. The government retroactively classified it to prosecute him. Imagine working in that kind of environment. Not fun.
Failure to Report (Score:5, Interesting)
Re:Culture of fear (Score:1, Interesting)
When Wen Ho Lee backed up his work data, it was not even classified. It was designated "Protect As Restricted Data" (PARD), which is not a classified designation. The government retroactively classified it to prosecute him. Imagine working in that kind of environment.
First, PARD does not mean freely distributable. He was still legally obligated to protect the data.
Second, you claim he made a back up. But what you failed to mention is that that back up has never been found. Lee claims he tossed the
PARD (Score:2)
PARD is never intended to be a permanent marking. All PARD must be properly identified and marked with the appropriate level of classification in relatively short order.
Why do you believe that marking Wen Ho Lee's PARD as "classified" (SRD, presumably) was out of line? What is "retroactive" about the normal procedure of handling PARD?
Why use removable media for sensitive information (Score:5, Informative)
"...Perhaps the best question to ask in this situation is why these labs are still using removable data storage devices to store sensitive information."
I worked on projects that collected classified data and spec'd systems with removable storage. The reason we used removable storage was because it was easier to get DISCO (Defense Industrial Security Clearance Organization, yes, that really is the acronym courtesy of the Department of Defense Overly Contrived Acronym Certification Agency (DODOCACA)) to certify a system for classified use if we could show that all of the storage could be removed from the system and securely stored. Of course this relies upon having people who aren't going to lose the secure storage, which is another thing entirely. Given advances in storage since the 1990s when I was administering such systems I'd be surprised if any classified system wasn't built around removable storage systems. You can get a 320Gb firewire disk for $350. Of course you could also do your work on laptops and then lock them in your classified safe at the end of the day too.
Just to be clear ... (Score:1)
I just posted those (italicized) words to the page; However, I did add the snippet (non-italic) at the end about the folks vying to replace the UC system in managing LANL.
timothy
Oh, I hadn't noticed that bit at the end ;) [OT] (Score:1)
timothy
only in America... (Score:5, Funny)
Re:only in America... (Score:2)
Bigger news... (Score:5, Funny)
Really just a cynical ploy? (Score:3, Insightful)
Given that the disks have already been found, and never left the possesion of those authorized to have it, why make such a fuzz about it? Why do we see this on the news (I did)? Why shut down all work? Wouldn't you want to keep the fact anything is missing quiet, if only to cast doubt in the mind of any one being offered stolen secrets as to whether they really are genuine?
And why suddenly decide to break open the bidding for the contract, within days/hours of an incident?
How convenient.. Perhaps.. a bit too convenient?
Re:Really just a cynical ploy? (Score:2)
> And why suddenly decide to break open the bidding for the contract, within days/hours of an incident?
It sounds too convenient because that statement is wrong. The contracts for LANL and LLNL had already been opened up. LLNL has been granted an extra two years under UC management, but LANL's contract will be go
Re:Really just a cynical ploy? (Score:2)
I have a question (Score:2)
What I'm getting at is this, the secret on nuclear weapons is out. Everyone in the world knows HOW to make them, the problem is that it isn't easy to get fissionable materials. Biological and Chemical weapons are even easier to make. Anyone here could mix up lethal chemical or biological weapons in their garage.
The genie is out of the bottle, so what kind of information has been lost?
LK
Re:I have a question (Score:2)
Re:I have a question (Score:2, Insightful)
No matter what we want our equipment to be the most effective out there, no matter what. Being in the military I know that when I'm out there, I'm using the world's best equipment and gear, and personally I'd like to keep it that way.
Sandia isn't run by UC (Score:3, Informative)
Never mind the data (Score:2)
A few terrorists with box cutters have got us to the state t
Re:Never mind the data (Score:1)
He's one of them there white flag bearing terrorists!
*snort*
Re:Never mind the data (Score:2, Informative)
At the risk of going slightly offtopic, I don't think that risk is too high. If a commercial airliner has lost all radio contact they would not be able to get through to air traffic control at the airport, making the landing dangerous. Under the new provisions military jets would be scrambled and attempt to divert the plane to a sec
Re:Never mind the data (Score:4, Informative)
It is possible, but not very likely, to lose radio contact. A commercial aircraft usually has several generators (one per engine) and at least one battery. The battery is never used, except in emergencies. Normally all generators work and all the equipment is powered up. If one or several generators fail then automatically some equipment is disconnected, in order of importance. The radio stays on even if *all* generators fail (it is then powered from the battery, and will last for long enough to land the aircraft. The battery will also provide electrical power to the engines (fuel pumps etc.)
In any case, if the radio indeed fails, the ATC on the ground will know it before even the pilots do. And as soon as pilots realize that they have no contact, they will take some safe course until instructed by any means possible to land. Any other aircraft may be instructed to approach and to lead them, not just a military one.
Re:Never mind the data (Score:3, Informative)
A dirty bomb has two main effects. First, it's a large explosion, just like a conventional bomb, and that blast can kill people. Second, people are incredibly afraid of "radiation" and "nuclear", so it ha
Purposeful disinformation dissemination (Score:5, Interesting)
To ensure that they believe that what they have is real, it is quite important to ocassionally make a big stink about the faked data that was lost. However, if you loose real data, it is better to keep it quiet and even produce lots of alternative data sets (a form of data denial of service attack) that pop up around the acquirer...
Don't you guys know anything about information warfare?
Classifed? (Score:3, Insightful)
Considering the way that Congress classifies even the most mundane stuff these days, and assuming that this practice has spread (as it helps the CYA crowd) there's probably a good chance that this information really wasn't of any importance. For all we know, it could have been someone's list of Pr0n sites.
Slashdot Article is Wrong! (Score:4, Informative)
That sucks. (Score:2)
And then what? It turned out to be a MS DOS 3.3 boot disk that someone was gonna throw out? I wouldn't be surprised.
Re:That sucks. (Score:2)
Re:That sucks. (Score:2)
And this is probably a wise choice, joking about common sense aside. It's just like when your server gets h4x0r'd... you can't trust any
Hey, at least now it's again being considered a... (Score:1, Informative)
From http://www.frontpagemagazine.com/Articles/ReadArt i cle.asp?ID=12701
"Most notoriously, Clinton appointed an anti-military, environmental leftist Hazel O'Leary to be Secretary of Energy, a department responsible for the nation's nuclear weapons labs. O'Leary promptly surrounded herself with other political leftists (including one self-described "Marxist-Feminist") and anti-nuclear activists, appointing them as her assistant secretaries with resp
Cowboys are getting to be a real problem (Score:3, Funny)
You see, the researchers used to be able to roam all over the 'Net. Was a time you could drive a meg of bytes all the way from MAE West to Atlanta. But then, what happened was, these firewalls started popping up and the days of free range data transfer were over.
Naturally, a lot of cowboys were sore about what happened to their livelihood, and they're in an ornery mood. You tell 'em they have to follow these here procedures and they all, "haw haw, listen to the uptight city slicker try to tell us rules!"
sigh... (Score:2)
if i was a reporter i'd go investigate that. bummer news organisations gave up on hiring reporters.
ah well, it's not like a democracy needs a strong press. oh, wait, it's dictatorship that doesn't need that. huh. ah well, the trains run better in those, so who really cares?
When I was in the US Navy... (Score:3, Funny)
One day, some contractors came through the desk - on their way out - while I was there. My man asked them what was in the box and they said, "Nothing. Just some test equipment."
My man almost let them through when I told them we'd need a look inside. They became a little annoyed and started pleading their case in the hopes that we lowly E-4s and below would just back down; but, I was incistant.
When the box was opened it contained two classified manuals. The base commander, several 'real' security guards and the civilian's boss chewed them out on the quarter deck in front of everyone.
Turned out, they had clearance and even had authorization to carry classified information (but they forgot their cards.) Thinking they'd just brow-beat us they attemted something stupid.
I got an 'atta-boy' for that one. {sigh - oh well.}
Because removeable media works. (Score:2, Insightful)
Because it's fairly cheap to purcase a safe large enough to physically secure a single disk. Yes, you can also use a diskless computer to access data over a network, but if your workflow requires a computer with disk (for data caching, OS loading, swap, whatever), then that disk needs to be tracked as classified media (inventoried, placed in a secure reposit
The real eventuality is renewed nuclear tests (Score:2)
--jeff++
student vs. laser (Score:2)
Re:Nuclear terrorism is inevitable no matter what (Score:1, Flamebait)
Re:Nuclear terrorism is inevitable no matter what (Score:2)
Re:Nuclear terrorism is inevitable no matter what (Score:2)
Re:Nuclear terrorism is inevitable no matter what (Score:1)
The rest of the world calls that "terrorism." Changing your own personal meaning of a word does not alter the idea behind the word; it merely emphasizes your delusion.
[OT] your sig (Score:2, Funny)
There's this old joke that communism comes only after the last communist has died. Makes me wonder, what will happen if the last terrorist is eliminated :H
Re:[OT] your sig (Score:1)
UPDATE: all of los alamos halts work (Score:5, Interesting)
Re:UPDATE: all of los alamos halts work (Score:4, Informative)
On a side note, the stand-down on Friday was due to a safety incident (One major injury, no fatalities) that actually occured Wednesday afternoon after Nanos' all-hands meeting.
Re:UPDATE: all of los alamos halts work (Score:2)
Well THAT makes me shudder. I've been thru those infamous retraining exercises. "We think maybe possibly one person screwed up and we're g
Re:UPDATE: all of los alamos halts work (Score:2)
Re:UPDATE: all of los alamos halts work (Score:2)
You can take it I'm not telling you where or for which government agencies I've worked.
Re:UPDATE: all of los alamos halts work (Score:2)
Actually, in my view, it's totally ridiculous. There are a large number of people working at Los Alamos who have absolutely nothing to do with the weapons programs, but who work "outside the fence" on open research. Involving them in this security farce is just wasting their time (which, re
Re:Casual (Score:4, Funny)
Re:Trying to fix this (Score:1)
What's an NC?
Non-Comissioned officer? NeXT Computer? Non-Classified (Something)? Nuclear Computer? Newbie Compiler? Naked Chest? Norwegian Concierge?
Hmmm. Is it Network Computer (i.e. thin client)?