August 17, 2007
THE BLOGS OF WAR....Noah Shachtman reports on the results of an internal Army audit that was recently released after the Electronic Frontier Foundation filed a FOIA lawsuit:
The audits, performed by the Army Web Risk Assessment Cell between January 2006 and January 2007, found at least 1,813 violations of operational security policy on 878 official military websites. In contrast, the 10-man, Manassas, Virginia, unit discovered 28 breaches, at most, on 594 individual blogs during the same period.
So: official sites cranked along at an average of 2.06 OPSEC violations per site. Milblogs had 0.05 violations per site. The conclusion is clear: blogs are an operational threat and need to be more closely controlled. Roger that.
—Kevin Drum 12:34 PM
Permalink
| Trackbacks
| Comments (12)
Blogs are a threat to the official story line. Did anyone ever believe it had anything to do with security?
Posted by: thersites on August 17, 2007 at 12:38 PM | PERMALINK
I'll hazard a theory: Blogs - written by actual members of the military. Official sites - written by contractors.
Posted by: Quaker in a Basement on August 17, 2007 at 12:39 PM | PERMALINK
Blogs carry personal responsibility; official military sites do not.
Posted by: Disputo on August 17, 2007 at 12:54 PM | PERMALINK
Be careful! We are all susceptible to the Padilla Treatment now, and no judgement by fearful peers will protect you from state calumnies.
Posted by: Brojo on August 17, 2007 at 1:03 PM | PERMALINK
Having worked in classified environments I got the impression that most security breaches came from upper management. Either they wanted to brag and included details they shouldn't or they didn't really understand the classification.
On one project I wound carrying a small razor knife. Inevitably when there was a briefing with handouts the handout would associate information whose association was classified. Thus people would either have to destroy the handouts or excise enough so the handout no longer contained classified information.
Posted by: MonkeyBoy on August 17, 2007 at 1:03 PM | PERMALINK
There's a mirror or parallel to that at the related site (also was or is still run by Noah) Defense Tech:
">Link I think, different commenters can post separately at the two places, so that might be good to check for scoop.
Posted by: Neil B. on August 17, 2007 at 1:04 PM | PERMALINK
where's the post bashing the US News rankings?
Posted by: Princetonian on August 17, 2007 at 1:06 PM | PERMALINK
this is just more rancid MSM bullshit.
if this was true, ConYankee and Ace would've uncovered this months ago and worked tirelessly to make sure it was fixed.
but they didn't.
total bullshit!
Posted by: cleek on August 17, 2007 at 2:36 PM | PERMALINK
I'm no fan of the policy but I do have to point out the possibility that any leaks of classified information is generally bad and anything that can be done to avoid that should be done. That being said I think the better place to focus attention on should be the one leaking more classified information. I also think there would be better ways to stop leaking over blogs without shutting down the entire system.
Posted by: Tcox on August 17, 2007 at 2:52 PM | PERMALINK
Tcox, I do have to point out that sometimes information is classified because it is embarrassing rather than a risk to security(well, I guess you could argue some things are a risk to job security.)
Agreed that the bigger leaks should be plugged first.
Posted by: kenga on August 17, 2007 at 3:49 PM | PERMALINK
MonkeyBoy >"...I got the impression that most security breaches came from upper management..."
Hmmm, for some reason the name "Scooter" comes to mind...
"...human security can be defined better as 'knowing risks' rather than 'eliminating risks'." - Hans van Ginkel
Posted by: daCascadian on August 17, 2007 at 9:54 PM | PERMALINK