- DOJ reaches largest-ever federal government settlement over auto loan discrimination
- U.S. Navy to start giving gay couples marriage benefits in Japan
- Sen. Harry Reid goes to hospital as a precaution
- Fla.’s Trey Radel exits rehab, ‘excited’ to resume congressional role
- U.S. nuclear general boozed it up, chased ‘hot women’ in Russia: report
- 45 Calif. students at one school test positive for tuberculosis exposure
- Rob Ford on women: Give them cash ‘and they are happy’
- Ku Klux Klan group holds recruitment meeting in Maryland
- Airport assassination: Mayor, 3 others killed at Manila airport
- Tea party-type lawmakers take mysterious, off-books trip to Mideast
NSA leaker Ed Snowden used banned thumb-drive, exceeded access
Question of the Day
Questions were raised Friday about security procedures at the ultra-secret National Security Agency, after it emerged that Edward Snowden, the contract employee who leaked details of the agency's broad-scale data gathering on Americans, exceeded his authorized access to computer systems and smuggled out Top Secret documents on a USB drive — a thumb-sized data storage device banned from use on secret military networks.
"He should not have been able to do either of those things" without setting off alarm bells, said one private sector IT security specialist who has worked on U.S. government classified networks. He spoke on condition of anonymity because of the sensitivities of his current employer.
NSA officials "were laying down on their job if they didn't disable the USB port," the specialist said, referring to the small socket on the side of a computer where thumb drives are plugged in.
The NSA, which is still trying to ascertain the full extent of the breach, did not respond to a request for comment.
The Los Angeles Times first reported that Mr. Snowden used a USB thumb drive to smuggle electronic copies of an unknown number of classified documents out of the NSA facility in Hawaii where he worked. A U.S. official confirmed to The Washington Times "that's one avenue" investigators are following.
The use of thumb drives on classified military systems -- including those at NSA -- has been effectively banned since malicious software, thought to be of Russian origin, infected the secret computer networks of U.S. Central Command five years ago.
A number of commercially available programs can switch off the USB port of every computer on the network.
"There is easily available software to do that," said the security specialist, noting that there were also low-tech, more permanent means available.
"I have seen places where they used a hot glue gun to block it," he said of the USB port.
Lawmakers briefed by NSA Director Gen. Keith Alexander have not commented on the thumb-drive, but have said that Snowden was able to do something else he should not have been able to — exceed his authorized access to the NSA's computer systems.
"It's clear that he attempted to go places that he was not authorized to go, which should raise questions for everyone," said House Permanent Select Committee on Intelligence Chairman Michael Rogers, Michigan Republican, on Thursday.
He said investigators were trying to "determine exactly what information [Mr. Snowden] may have gotten" from the NSA, following claims by Glen Greenwald, the Guardian journalist who first broke the story, that he had "dozens" more documents from the self-proclaimed whistleblower.
"Candidly, nobody really knows" how much he might have gotten away with, added Mr. Rogers. "I think we will know the answer to that shortly."
The specialist said Mr. Snowden's ability to access highly classified documents he should not have been able to was unsurprising, depending on his clearance level.
He noted that admitted Wikileaks leaker Pfc. Bradley Manning, even though a low level intelligence analyst had "very broad access," to the Secret-level classified US network called SIPRNet.
Historically, the U.S. intelligence community operated on a "need to know" basis -- even personnel with a security clearance were only allowed to see intelligence they had a need to know.
After U.S. agencies failed to share intelligence about some of the Sept. 11 suicide hijackers; and with the huge leaps in computer network technologies and the growth of the World Wide Web as an indispensable communications tool, need to know is being edged out by "need to share."
"SIPRNet is basically a parallel Internet at the Secret level," said the specialist. "The different agencies have Web sites, FBI, DEA ... Even at the Top Secret level [it's] the same ...You can surf around ... there are lots of Top Secret documents routinely posted there without any additional access controls" beyond the fact that are on a highly classified network to which only cleared personnel have access.
"Its beginning to look like the NSA may have had the same kind of issues," he concluded.
© Copyright 2013 The Washington Times, LLC. Click here for reprint permission.
About the Author
Shaun Waterman is an award-winning reporter for The Washington Times, covering foreign affairs, defense and cybersecurity. He was a senior editor and correspondent for United Press International for nearly a decade, and has covered the Department of Homeland Security since 2003. His reporting on the Sept. 11 Commission and the tortuous process by which some of its recommendations finally became ...
- Senator's memo shows Iran links in Homeland Security's troubled immigration program
- Help wanted: Homeland Security plagued by vacancies at the top
- Negotiators skirt customs, make flights easier from UAE to U.S.
- Dems back bill to fix problems in investor visa program
- Democrats proceed with Mayorkas vote despite pending investigation
Latest Blog Entries
By John McAfee
- Breaking Fad: Alligators becoming the new pit bulls for drug dealers, cops say
- D.C. to tout Obamacare among youth waiting for Air Jordans
- Huge backlash mounts over suspension of 'Duck Dynasty' star Phil Robertson
- TARGET credit card theft swells to 40 million victims
- Special ops vets slam military benefit cuts
- Obama: 2014 will be 'breakthrough year' for U.S.
- Dems use new filibuster rules to approve DHS nominee Alejandro Mayorkas under investigation
- Obamacare 'pajamas boy' gets roundly mocked
- Citing 'unfair system,' Obama commutes sentences for 8 crack offenders
- Homeland Security helps smuggle illegal immigrant children into the U.S.
Independent voices from the The Washington Times Communities
Top 10 handguns in the U.S.
Extraordinary day at Redskins Park
White House pets gone wild!
Let it snow