Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Government Idle Your Rights Online

Ministry of Defense's "How To Stop Leaks" Document Is Leaked 141

samzenpus writes "A restricted 2,400 page-document put out by the MoD designed to help intelligence personnel with information security has been leaked onto the internet. Wikileaks notes that Joint Services Protocol 440 (JSP 440), was published in 2001 and lays out protocols to defend against hackers, journalists, and foreign spies. it says, 'Leaks usually take the form of reports in the public media which appear to involve the unauthorized disclosure of official information (whether protectively marked or not) that causes political harm or embarrassment to either the UK Government or the Department concerned... The threat [of leakage] is less likely to arise from positive acts of counter-espionage, than from leakage of information through disaffected members of staff, or as a result of the attentions of an investigative journalist, or simply by accident or carelessness.' " Looks like it's time to write JSP 441.

*

This discussion has been archived. No new comments can be posted.

Ministry of Defense's "How To Stop Leaks" Document Is Leaked

Comments Filter:
  • by pecosdave ( 536896 ) * on Tuesday October 06, 2009 @04:20AM (#29654417) Homepage Journal

    Documentation security - you're doing it wrong.

    • by ImNotAtWork ( 1375933 ) on Tuesday October 06, 2009 @04:25AM (#29654443)

      that causes political harm or embarrassment

      Other than military secrets like we have a spy in such and such position. I'm going to call upon.. "If you don't act in a manner that would embarrass yourself/department you should have nothing to worry about." They have been using it to justify countless forms of monitoring.. let's see how they like it when the positions are switched.. Yes I know I'm living in fantasy land.

      • I'm sorry citizen. 'If you've done nothing wrong then you have nothing to hide' is a rule we made for the hoi-polloi, we've been very careful to include exemptions for the ruling classes, now, please place a dna sample in the cup provided and move right along.

        Flippantly aside, for some good examples of what ( has been allowed to be published about what ) goes on in the name of the people, a 'history' of MI5 ( Military Intelligence, Section 5. Counter Intelligence and Security in the UK. ) has just been p
        • by Shakrai ( 717556 )

          now, please place a dna sample in the cup provided and move right along.

          I might need some magazines or an internet connection before I can accommodate your request ;)

          • Re: (Score:3, Insightful)

            The article on th efront page does not draw attention to the most remarkable - and horrible - aspect of the MoD document.

            It consistently groups "investigative journalists" into a category with "terrorists", "criminals" and "computer hackers".

            The document states "the "enemy" is unwelcome publicity of any kind, and through any medium". This is the military. "Enemy" is not a metaphor to these people.

            • Re: (Score:3, Insightful)

              That really hit me, as I read the article. By extension, any taxpaying citizen who would read the work of an investigative reporter would also be an enemy of the state. There is simply no way to justify the logic of their classification. Expect a new expose' in the US - people who request information under the FOI act are investigated by FBI/NSA/CIA etc ad nauseum.

            • Re: (Score:3, Insightful)

              by eyrieowl ( 881195 )
              If I am trying to prevent leaks of some type of information, anyone who might be actively attempting to get that information SHOULD be grouped together in a gross classification scheme. Or, to put another spin on it, let's say that I find it offensive that you grouped "computer hackers" with "terrorists" and "criminals".... You should stop seeing the grouping as a set of moral equivalences and recognize them as functional equivalences for a narrowly defined function (actively trying to get secret informat
              • Re: (Score:2, Insightful)

                They have placed the lawful activity of public interest journalism into the functional category of hostile, combat action.

                They are not "your" military, any more, are they?

              • The next step from saying that journalists are functionally equivalent to terrorists, is to say that by exposing information the government wants hidden they are helping terrorists. Then they are practically terrorists.

                • I specifically said for a narrowly defined function: actively trying to suss out secret information. There are many other functions which make them very different. Intent matters when determining what, if any, punitive response is required. Intent doesn't matter when figuring out what means people may use to gain access.
      • by Chrisq ( 894406 ) on Tuesday October 06, 2009 @05:05AM (#29654591)

        that causes political harm or embarrassment

        Other than military secrets like we have a spy in such and such position. I'm going to call upon.. "If you don't act in a manner that would embarrass yourself/department you should have nothing to worry about." They have been using it to justify countless forms of monitoring.. let's see how they like it when the positions are switched.. Yes I know I'm living in fantasy land.

        I think the UK government reached an all time low in this is when Thatcher's government tried to use the official secrets act to prevent it becoming public knowledge that they had encouraged Matrix Churchill and Sheffield Forgemasters to make Saddam Hussain's supergun [millbanksystems.com], even though keeping it quiet would have resulted in the directors going to prison. So they were prepared to see innocent men who had cooperated with the intelligence services (even offering to fit a tracking device) go to prison rather than be embarrassed.

        • Re: (Score:3, Insightful)

          by Shakrai ( 717556 )

          I think they reached their new all time low each time they took [wikipedia.org] rights [wikipedia.org] away [schneier.com] from their own citizens.

          • Pah!, guns are irrelevant if the SIS are deceiving us as to who should be shot! We would need Govt transparency to figure out that, and a sack of NH4NO3 (readily available in the UK, AFAIK) would take care of the rest.
    • by koolfy ( 1213316 )
      can't stop laughing... tears... can't breathe... heart stopped... death by Recursive Fail.

      October 6, 2009. Today, a comedian died in Slashdot.
      • by Hucko ( 998827 )

        October 6, 2009. Today, a comedian died in Slashdot.

        yep, that was a recursive fail

    • This problem has already been solved (by the Dutch no less). Put your finger in the dike!

  • by gmuslera ( 3436 ) on Tuesday October 06, 2009 @04:24AM (#29654437) Homepage Journal
    Declare an inexistent document the ultimate reference on how to stop leaks, put references to it in selected internal documents and even build fake leaks about its existence. As noone will be able to find it, will really work, even against the human factor. You can make a gigantic library of such documents, and put all of them in the unexistent parallel library of congress, where noone will be able to see what countain all those leak-proof documents against sensible matters of national security. Next time someone will try to make problems, will be so sure that will be a full non-existent document about him in that library where everything is afraid of become known is written that will discard that idea, making the world a safer place.
    • This Noone must be a real good agent then. If he's on weed, is he then called "High Noone"? And is he in any way related to the German singer "Heinoone"? Or rather to "Nooneien Soong"?

    • Those documents make a very interesting reading too, though you need a thaumic computer to get at them. It's a pain dealing with all the Out Of Cheese errors though...

    • If they had been clever, it would have been Joint Services Protocol 404. No one can find THAT file, let alone leak it
  • Britain (Score:5, Funny)

    by gijoel ( 628142 ) on Tuesday October 06, 2009 @04:29AM (#29654455)
    Now with 50% more irony.
  • by 1s44c ( 552956 ) on Tuesday October 06, 2009 @04:29AM (#29654461)

    These people are unable to adapt to a world where information can be sent around the world in seconds. They are the stupid, violent policemen who might punch you for looking at them but won't stop crime, terrorism, or anything else because they belong to some WW2 era not the current world.

    They want to play stupid games with hidden codewords so they can pretend they are more important than 'civilians', all they really do is waste resources.

    • Re: (Score:3, Insightful)

      by Dhalka226 ( 559740 )

      I'm sorry that you struggle to accept the fact that not all information belongs in public view. Perhaps you can explain your position to me while you hand over your bank account numbers and routing codes.

      I hate to shatter your world view, but sometimes keeping things from certain groups of people is the right thing to do and that doesn't change just because one of the entities is a government. Yes, it will be abused. Yes, abuse should be punished. No, that does not mean the concept is without merit or

      • by internettoughguy ( 1478741 ) on Tuesday October 06, 2009 @06:48AM (#29654965)

        I'm sorry that you struggle to accept the fact that not all information belongs in public view. Perhaps you can explain your position to me while you hand over your bank account numbers and routing codes.

        Don't be ridiculous, they just admitted they were hiding dirty secrets "political harm or embarrassment", and generally destroying political transparency, and that is corrupt and undemocratic. Also using your bank account analogy their job Is not just to protect their account number, but also to steal yours (they call this information gathering). and all without any public or even legal oversight into their actions.

        • Also see the Ahmed Zaoui [wikipedia.org]case for some insight into how this lack of legal transparency is so fucked up.
        • Re: (Score:1, Informative)

          by Anonymous Coward

          Duh. You do realise that political embarrassment in the context of the military generally doesn't mean the Permanent Undersecretary having an affair, rather that they're doing things that they'd rather other countries didn't know about (and therefore there is the risk of embarrassment if the other country does find out) or that need to be secret and would simply look incompetent if they leaked, e.g the position of the on-watch SSBN. Or construction details of a particular kind of armour, which would be emb

          • Re: (Score:3, Insightful)

            You do realise that political embarrassment in the context of the military generally doesn't mean the Permanent Undersecretary having an affair,

            You are obviously unfamilar with UK politics. That is indeed the most frequent meaning.

            Other meanings include, but are not limited to, minsters being caught beaking the law they themselves are responsible for enacting, and various assorted high-ups being caught in various forms of large scale corruption, or acts which could reasonably be desribed as treason, whil

      • by slarrg ( 931336 ) on Tuesday October 06, 2009 @07:10AM (#29655081)

        Gee, it seems to me that the banks already give your account information to reporting agencies who will sell it to anyone with the money to buy it. So, despite my desire to keep the information secret, the governemt has already decided that we do not deserve this privacy.

        The problem with government secrecy is that rather than concentrating their efforts on information that is vital to keep secret, they mark almost everything as secret with very little justification. The more pieces of information you claim are secret, the more likely that some of that information will leak through the cracks. Meanwhile the attempt to keep many secrets removes focus from the truly vital pieces which makes any given secret more likely to slip out from divided attention.

        Couple this with the technology and recent government directives and we end up collecting even more public and private information, networking the information together for easy retrieval, and not focusing on the most important secrets which leads to a total mess.

        • by mpe ( 36238 )
          The problem with government secrecy is that rather than concentrating their efforts on information that is vital to keep secret, they mark almost everything as secret with very little justification. The more pieces of information you claim are secret, the more likely that some of that information will leak through the cracks. Meanwhile the attempt to keep many secrets removes focus from the truly vital pieces which makes any given secret more likely to slip out from divided attention.

          On the other hand you
          • by slarrg ( 931336 )

            Actually, the best way to keep a secret is to hide its very existence. To use your example, it's much better to have a small bag of trash that no one knows exists and kept hidden until it can be properly destroyed. This is far preferable to mixing your secret stuff in with the rest of your garbage on the curb in a big can marked "secret."

            As far as your assertion that nothing will fail to be processed because you label everything secret, this is just not true. If you only deal with a small amount of data m

      • by 1s44c ( 552956 )

        I hate to shatter your world view, but sometimes keeping things from certain groups of people is the right thing to do and that doesn't change just because one of the entities is a government. Yes, it will be abused. Yes, abuse should be punished. No, that does not mean the concept is without merit or that it's not worth trying.

        Hiding evidence that western governments have funded racist killers and dictators isn't in anyone's interest. If they have done wrong the evidence should be given to the public so democracy can work its magic. This document is about how to keep dirty secrets private from the very people who funded them, i.e. me and you.

        If people are allowed to hide wrongdoing it will only encourage them to do wrong.

    • by koolfy ( 1213316 )

      because they belong to some WW2 era not the current world.

      If you are also referring to the inability to keep an information secret, I should point out that during that WWII, the research on Enigma done by Alan Turing [wikipedia.org] was kept secret for years after the end of the war, including to his close friends or relatives.

    • by dword ( 735428 )

      This reminds me of the last released episode of Family Guy (S08E02) when Quagmire finds out about Internet Porn. We should make these people more aware of the fact that there is lots and lots of porn on the Internet and maybe they'll learn a thing or two about it out of "need".

  • Oh man (Score:2, Funny)

    The Irony Department is going to get it for this.
    • Come on doesn't anyone else see it? A ginormous 2400 page secret document about preventing leaks is leaked just after Monty Python's 40th anniversary? We're all being meta-trolled by the British government.

      Well played.
  • 2400 pages? (Score:5, Insightful)

    by DamienNightbane ( 768702 ) on Tuesday October 06, 2009 @04:35AM (#29654491)
    Seriously? Who the fuck would read something that long? How can they expect a document that long to have any effect on anything aside from bureaucracy? If the document had only been two or three pages people probably would have read and understood it.

    Whoever drafted and approved the document should be shot. Same with all the people that write bills that are hundreds or thousands of pages long, and doubly so for the people that vote for and sign them without having ever read them.
    • by Entropius ( 188861 ) on Tuesday October 06, 2009 @04:49AM (#29654535)

      I ran the text of the DMCA -- yes, all untold pages of it -- through an advanced semantic data compression algorithm.

      The output was just the string "CITIZENBENDOVER".

      • Re: (Score:3, Funny)

        by Hurricane78 ( 562437 )

        Let me guess: It went something like this (pseudo-code):


        while (!stdin.eof) buf = stdin.read();
        print("CITIZENBENDOVER");

    • There is a thing called index....
    • by ace123 ( 758107 )

      This strategy to stop leaks is brilliant! While we waste our time reading and discussing this document, we won't have time to notice any other leaked documents.

    • I could be wrong, but I don't think the intention is for anyone to read all of it. I think in general even people who are Security Checked [wikipedia.org] tend not to have access to all of the document, even though it is only Restricted and SC lets you have regular access to Secret material.

      Doesn't quite excuse 2400 pages, but it does make it seem more like "we've mashed what could have been lots of documents in to one".

      • Doesn't quite excuse 2400 pages, but it does make it seem more like "we've mashed what could have been lots of documents in to one".

        So essentially, they're making the document leak process more efficient?

        Instead of having to leak 15 different documents, you can do it all in one fell swoop?

    • by tcdk ( 173945 )
      I stopped on a random page and read six page of nonsense on how to make a security taskforce of some kind - it was mostly concerned with titles of the members...
    • by Adambomb ( 118938 ) on Tuesday October 06, 2009 @06:17AM (#29654869) Journal

      Robert Jordan fans.

      • by Aladrin ( 926209 )

        Ow. That hit close to home. I'm re-reading the entire series in prep for the final books. ;D

        • It's okay... masochism is becoming more and more accepted these days. As such, there's no need to be ashamed of your choice of lifestyle. ;)

      • 2400 pages is barely enough for introducing the basic premise. A 2400 page volume is nice and everything but where are the volumes 2 through 13? And, of course, the diminutive (at just 300ish pages) volume 0?

        Seriously, it's no wonder this was leaked. 2400 pages would barely be enough to describe the proper procedures for the handling of braids, much less information security.
      • Also:

        Terry Goodkind fans. (11 Books)
        Steven Erikson fans. (8 Large books)
        L. Ron Hubbard fans. (10 Books)

        (Jordan had 11)

        and not to be insensitive by Goodkind and Erikson are still alive and writing more in those series.

        Also the later wheel of time books were really hurtin' near the end, I couldn't even force myself to read the last one (just to say I completed the damn thing) as I found it so bad and nauseating. Goodkind also suffers from this to a certain extent, but IMO not as bad. Erikson series in my view

    • by hAckz0r ( 989977 )
      How do you think WikiLeaks got a hold of it in the first place? Obviously someone fell a sleep reading the fine manual, and someone else came along and lifted it from them. Unfortunately for the reader, he hadn't gotten to that chapter yet. I'm absolutely sure that chapter 2 would have covered that topic thoroughly. </sarcasm>
      • by hughk ( 248126 )

        You have got it wrong.

        The MOD produced this document that apparently nobody was reading. It doesn't really contain much that is contentious, so why not leak it and have everyone reading it.

    • Seriously? Who the fuck would read something that long?

      Nobody in the DoJ. Obviously.

    • I would read the full 2,400 pages. If you want to understand something fully, you have to read all of it, not just read a few pages and think you understand something when clearly you don't! IMHO this is the difference between a professional soldier and one that is amateur and cannot be arsed. Can you be arsed? http://www.arrse.co.uk/ [arrse.co.uk] you will find more indepth banter about this topic there than on wikileaks from people who really are in the know :) Regards, NSN
    • I've become convinced that long government/corporate/thinktank documents exist so as to conceal unpleasant information. For example, the notorious 'Rebuilding Americas Defences' document bleats on about nothing for ages before it gets to "wouldn't another Pearl Harbor be awesome" and "lets make ethnically-targeted biological weapons".
    • Who the fuck would read something that long?

      Nobody..Hence the leak.

    • by mpe ( 36238 )
      Seriously? Who the fuck would read something that long? How can they expect a document that long to have any effect on anything aside from bureaucracy? If the document had only been two or three pages people probably would have read and understood it.
      Whoever drafted and approved the document should be shot.


      Or maybe their document should be printed out and dropped on them. Which might encourage them to write less or at least get them use duplexing printers :).
  • Quick solution (Score:2, Insightful)

    by s1lverl0rd ( 1382241 )

    A quick solution would be to just have less secrets. Telling everyone what you are doing isn't that hard - and the foreign spies, hackers and journalists will find out anyway.

    • by 1s44c ( 552956 )

      A quick solution would be to just have less secrets. Telling everyone what you are doing isn't that hard - and the foreign spies, hackers and journalists will find out anyway.

      Creating and looking after secrets is whats keeping half the organization employed.

    • Re: (Score:3, Interesting)

      by jimicus ( 737525 )

      But there's a problem with that.

      You see, s1lverl0rd, we live in a world that has walls. And those walls have to be guarded by men with secrets. Whoâ(TM)s gonna do it? You, s1lverl0rd? They have a greater responsibility than you can possibly fathom. You weep for the truth and you curse the government.

      You have that luxury. You have the luxury of not knowing what they know: that secrets, while tragic, probably save lives. And their existence, while grotesque and incomprehensible to you, saves lives...

      You

      • You see, s1lverl0rd, we live in a world that has walls.

        If the walls are porous by design, should we care?

      • You see, s1lverl0rd, we live in a world that has walls. And those walls have to be guarded by men with secrets.

        If they had less secrets, they wouldn't need so many walls. And most of those secrets were caused by greed and resulting corruption, or perhaps I have that backwards.

      • Re:Quick solution (Score:5, Insightful)

        by Aceticon ( 140883 ) on Tuesday October 06, 2009 @08:16AM (#29655427)

        I think we all understand the need to for the intelligence services to keep some secrets.

        What most of us are worried about is their focus on protecting information:

        that causes political harm or embarrassment

        - When people find out that MPs submitted expenses to parliament for buying duck-houses or cleaning moats ... that's politically embarrassing.
        - When people find out that sitting ministers are evading taxes ... that's politically embarrassing.
        - When people find out each and every situation of waste, incompetence and pure and simple disregard for the money that we pay in taxes on the part of politicians or people directly nominated or overseen by politicians ... that's politically embarrassing.

        Those leaks are often also politically damaging for those responsible for the problem.

        And here we have the intelligence services' manual for protecting information from the which amongst other things directs them to protect "information that causes political harm or embarrassment" from the prying eyes of such evil people as ... journalists.

        If I didn't already believe that the UK is a corrupt and decadent nation, this would convince me.

        • Show me a single developed country that does not do the same. The real point about MP's corruption in the UK, by world standards, was how little money was involved. Blair squirrels away a few millions; Berlusconi's companies get fined hundreds of millions and he passes a special law to protect himself; how much did the Bush family benefit from the oil price spike?

          As for pork barrel, we aren't even in the same room as the US, where it is part of business as usual, Alaskan bridges, protection of industries, y

      • Actually, the problem inherent in the system is that you, jimicus, believe that there are truths so terrible that we are better off never knowing them. Looking back at history, the holocaust and countless other genocides were not terrible enough to hide from the common man. So, you believe that our government is hiding something far worse than the genocide of millions...and that it's better that we don't know.

        If you're too weak to handle reality, then someone failed at raising you. Terrible, unspeakable c

      • Its scary when a Tom Cruise movie quote gets rated 3-interesting... Strange things are happening.. We're jolly green giants, walking the earth, with guns!
      • by upside ( 574799 )

        Rejected, plagiarism. http://www.imdb.com/title/tt0104257/quotes [imdb.com]

      • Judging by past secrets that have been declassified, the dark secrets you refer to are mostly mundane details well-known from public sources along with some embarrassing or shameful information whose release would be harmful to a few "important" people. Oh, and I suppose there may be some information legitimately hidden to protect the country, but since foreign intelligence services have detailed knowledge of this information, our confidence that it is protected by secrecy is just as likely a liability as n
      • Are you paraphrasing a quote from Heinrich Himmler or Lavrentiy Beria? Or perheaps Erich Mielke?

        Because, you know, they all would have been very fond of something like that.

        • by jimicus ( 737525 )

          No, I'm shamelessly ripping off A Few Good Men [imdb.com].

          My own opinion is that the world is simply too big and complicated to say that nothing ever needs to be kept secret.

          Though I find it hilarious that a movie - a work of fiction - is considered sufficiently important as to be modded 4 - interesting.

          • Unfortunately for that theory, secrecy is increasingly more unworkable. Even back in the WWII days it already required full-time efforts of organizations like the ones headed by the "gentlemen" I listed .... and it still did not quite work.

            And with technological progress, any attempts at secrecy will by definition require more and more draconian methods to accomplish.

            Which is incidentally the true aim of the vast majority of those who harp on the "need for secrecy" and "protecting ignorant people" and "wa

    • by R2.0 ( 532027 )

      "A quick solution would be to just have less secrets."

      fewer secrets, or
      less secrecy

      Sorry, had to. Just had this conversation with my daughter.

  • by Datamonstar ( 845886 ) on Tuesday October 06, 2009 @05:04AM (#29654587)
    I heard you like leaks...
  • by Goodl ( 518602 ) on Tuesday October 06, 2009 @05:06AM (#29654597)
    How not to be seen (Caption on screen: 'HM GOVERNMENT, PUBLIC SERVICE FILM NO. 42 PARA 6. "HOW NOT TO BE SEEN"') Voice Over: In this film we hope to show how not to be seen. This is Mr. E.R. Bradshaw of Napier Court, Black Lion Road London SE5. He can not be seen. Now I am going to ask him to stand up. Mr. Bradshaw will you stand up please In the distance Mr Bradshaw stands up. There is a loud gunshot as Mr Bradshaw is shot in the stomach. He crumples to the ground Voice Over: This demonstrates the value of not being seen.
    • Re: (Score:2, Funny)

      by Goodl ( 518602 )
      How is my post in any way informative, it was meant to be titter worthy for the Python crowd
  • It's already clogged and impossible to get. So in essence MoD may yet find another way to prevent general public from getting the documents. Create rule to "slashdot" web site hosting documents..
  • tag (Score:2, Funny)

    by shentino ( 1139071 )

    epic fail

  • One scenario is that this removes any value in the security document....so it's no big issue if it is leaked.

    (yes, there's a difference between method and implementation)

  • Fail classified document is fail?
  • Stop letting congress-critters have the information. When Bush was president, Democrats selectively leaked classified information to harm him. I have no doubt it will happen the other way around now with Obama and the Republicans.
  • No spy is as pervasive or unstoppable as the internet.

"Protozoa are small, and bacteria are small, but viruses are smaller than the both put together."

Working...