Poor PDF redaction torpedoes nuke sub secrets

Powered by SC Magazine
 

Who needs Wikileaks when Defence ministry blunder posts sub operations online?

Britain's Ministry of Defence has admitted accidentally leaking secret information on nuclear submarine operations in a compromised PDF posted to its website.

The Government department put the leak down to a technical error, which allowed anyone to copy and paste blacked-out parts of a Defence report into another document to reveal the sensitive information underneath.

The report, Successor SSBN safety regulators advice on the selection of the propulsion polant in support of the future deterrant review note, was placed online as a PDF file following a freedom of information request by anti-nuclear campaigners.

The department replaced the report with an updated document to prevent copying and pasting of secret data but too late according to Cryptome because Google already had translated its contents to searchable plain text.

“As soon as we were aware of this incident, we took immediate steps to ensure the document was removed from the public domain and replaced by a properly redacted version,” said a Defence spokesman.

“We will check past [freedom of information] responses and review our processes for the release of sensitive information to prevent any recurrence of this type”

Information in the report covered vulnerabilities in British submarines and expert commentary on how much of a structural failure could lead to a core meltdown onboard a nuclear sub, according to the Daily Star Sunday.

It also talked about US submarine operations when dealing with disasters, showing American vessels were twice as safe as Britain's in key areas.

A senior Defence source told the paper it was a “hugely embarrassing” incident.

“Whoever is responsible should be sacked. The Americans will be furious their procedures have been exposed,” the source added.

The US Government has been similarly compromised for parties failing to follow PDF redaction procedures

Adobe's Acrobat PDF creator prior to version 8 lacked robust redaction, a point acknowledged as a security risk on the blog of its business development manager Rick Borstein

The British Government has come under heavy fire for IT blunders in recent times.

An Institute for Government report released last month claimed the Government had wasted billions because of IT failures.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Poor PDF redaction torpedoes nuke sub secrets
 
 
 
Top Stories
NSW Govt gets ready to throw out the floppy disks
[Opinion] Dominic Perrottet says its time for government to catch up.
 
iiNet facing new copyright battle with Hollywood
Fighting to protect customer details.
 
The CISO’s dilemma: Do you trust your partner’s partner?
[Blog post] How far down the chain do you check?
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  25%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  22%
 
End user computing (desktops, mobiles, apps)
  15%
 
Software development
  26%
TOTAL VOTES: 314

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  58%
 
No
  42%
TOTAL VOTES: 119

Vote