Poor PDF redaction torpedoes nuke sub secrets

Powered by SC Magazine
 

Who needs Wikileaks when Defence ministry blunder posts sub operations online?

Britain's Ministry of Defence has admitted accidentally leaking secret information on nuclear submarine operations in a compromised PDF posted to its website.

The Government department put the leak down to a technical error, which allowed anyone to copy and paste blacked-out parts of a Defence report into another document to reveal the sensitive information underneath.

The report, Successor SSBN safety regulators advice on the selection of the propulsion polant in support of the future deterrant review note, was placed online as a PDF file following a freedom of information request by anti-nuclear campaigners.

The department replaced the report with an updated document to prevent copying and pasting of secret data but too late according to Cryptome because Google already had translated its contents to searchable plain text.

“As soon as we were aware of this incident, we took immediate steps to ensure the document was removed from the public domain and replaced by a properly redacted version,” said a Defence spokesman.

“We will check past [freedom of information] responses and review our processes for the release of sensitive information to prevent any recurrence of this type”

Information in the report covered vulnerabilities in British submarines and expert commentary on how much of a structural failure could lead to a core meltdown onboard a nuclear sub, according to the Daily Star Sunday.

It also talked about US submarine operations when dealing with disasters, showing American vessels were twice as safe as Britain's in key areas.

A senior Defence source told the paper it was a “hugely embarrassing” incident.

“Whoever is responsible should be sacked. The Americans will be furious their procedures have been exposed,” the source added.

The US Government has been similarly compromised for parties failing to follow PDF redaction procedures

Adobe's Acrobat PDF creator prior to version 8 lacked robust redaction, a point acknowledged as a security risk on the blog of its business development manager Rick Borstein

The British Government has come under heavy fire for IT blunders in recent times.

An Institute for Government report released last month claimed the Government had wasted billions because of IT failures.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Poor PDF redaction torpedoes nuke sub secrets
 
 
 
Top Stories
Innovating in the sleepy super industry
There’s little incentive to be on the bleeding edge, so why is Andrew Todd fighting so hard?
 
How technology will unify Toll
The systems headache formed through 15 years of acquisitions.
 
Immigration breached Privacy Act with data leak
Pilgrim slams "copy and paste" of asylum seeker data.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  7%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 820

Vote