The 'huge' hole in the government's Russian software ban

[DonViejo]

DHS' ban on Kapersky software doesn't cover networks that contractors operate, even though employees may use them to discuss government work.

By ERIC GELLER 11/24/2017 07:43 AM EST

The Trump administration’s order barring certain Russian software from government networks doesn’t fully cover one troubling vulnerability — the teeming ranks of government contractors.

That omission could leave open gateways for hackers looking to pilfer government secrets, cybersecurity specialists warn, something that has reportedly happened in recent years with contractors from the CIA and the NSA. But legal experts say the government has only limited ability to require contractors to uproot Kaspersky Lab’s products from their computers.

“It’s a huge area of risk, especially with some of the recent breaches at the NSA and the CIA where it was clear that these contractors were the source of it,” said Trevor Rudolph, the former head of an OMB team that helps agencies improve their cyber defenses.

Matt Keller, who advises government clients on digital security programs as a vice president at GuidePoint, dubbed the issue a “moderate to high risk” for federal agencies.

It’s impossible to quantify the risk exactly, but hundreds of thousands of federal contractors hold top secret clearances.

more
https://www.politico.com/story/2017/11/24/the-huge-hole-in-the-governments-russian-software-ban-259473

[dalton99a]

1. Kick.

[OregonBlue]

2. Tillerson just hired a company run by Putin's KGB understudy to run security for all

US embassies and consulates in Russia. He obviously believes that either the Russians need to know everything that goes on at our Russian embassies or that they already know everything that goes on because our government is already telling them.

[VOX]

3. Rexxon did so in spite of the long history of the KGB spying on our embassy.

Begs the question: Why would he do that? Why would the U.S. Secretary of State hire an outfit with KGB ties to handle security for our Russian embassies? Especially when there is a long history of the Russians using extreme measures to wire and eavesdrop on our embassies. Is Tillerson monumentally stupid, or ???

Has Russia ever hired anyone with CIA ties to take charge of security in their embassies in the U.S.? No, and why would they?

[OregonBlue]

4. Exactly. I can only conclude that Tillerson is actually working for the Russian cabal. He is very

close with Putin and has made a point of destroying the State Department. People seem to think that since he ran a major company for many years that he's a true American but in fact, Exxon has no loyalty to anyone. Their loyalty is to the buck or the ruble or the pound or euro or whatever is selling at the highest rate. I honestly believe that this is a very large conspiracy to sell America to the highest bidders for profit. They fully expect to take over the government as they did in Russia and the oligarchs will run it from here on out.