Poor PDF redaction torpedoes nuke sub secrets

Powered by SC Magazine
 

Who needs Wikileaks when Defence ministry blunder posts sub operations online?

Britain's Ministry of Defence has admitted accidentally leaking secret information on nuclear submarine operations in a compromised PDF posted to its website.

The Government department put the leak down to a technical error, which allowed anyone to copy and paste blacked-out parts of a Defence report into another document to reveal the sensitive information underneath.

The report, Successor SSBN safety regulators advice on the selection of the propulsion polant in support of the future deterrant review note, was placed online as a PDF file following a freedom of information request by anti-nuclear campaigners.

The department replaced the report with an updated document to prevent copying and pasting of secret data but too late according to Cryptome because Google already had translated its contents to searchable plain text.

“As soon as we were aware of this incident, we took immediate steps to ensure the document was removed from the public domain and replaced by a properly redacted version,” said a Defence spokesman.

“We will check past [freedom of information] responses and review our processes for the release of sensitive information to prevent any recurrence of this type”

Information in the report covered vulnerabilities in British submarines and expert commentary on how much of a structural failure could lead to a core meltdown onboard a nuclear sub, according to the Daily Star Sunday.

It also talked about US submarine operations when dealing with disasters, showing American vessels were twice as safe as Britain's in key areas.

A senior Defence source told the paper it was a “hugely embarrassing” incident.

“Whoever is responsible should be sacked. The Americans will be furious their procedures have been exposed,” the source added.

The US Government has been similarly compromised for parties failing to follow PDF redaction procedures

Adobe's Acrobat PDF creator prior to version 8 lacked robust redaction, a point acknowledged as a security risk on the blog of its business development manager Rick Borstein

The British Government has come under heavy fire for IT blunders in recent times.

An Institute for Government report released last month claimed the Government had wasted billions because of IT failures.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Poor PDF redaction torpedoes nuke sub secrets
 
 
 
Top Stories
There's no coke and hookers in the cloud
[Blog post] Where did the love go?
 
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
Five zero-cost ways to improve MySQL performance
How to easily boost MySQL throughput by up to 5x.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1029

Vote