News for hackers. Stuff that matters.
Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by seeknotfind on Saturday July 29, 2023 @02:05PM (#36922860)
This is my favorite part of the article:

> Installer files which were recovered in the search opened with a “CONFIDENTIAL RESTRICTED” pop-up, according to Forbes.

Woah woah woah. Are you saying this software said it's confidential? Well let me tell you something about this comment. This comment is confidential restricted!

Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by mlyle on Saturday July 29, 2023 @02:07PM (#36922882)
Marking systems and documents is a critical part of security.

It makes sure that you can prove that everyone is put on notice that misuse is subject to extreme punishment. This helps prevent accidental disclosure (Oh, I didn't think confidentiality applied to this), and it helps prove the case should anyone violate the rules.

Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by burnished on Saturday July 29, 2023 @02:16PM (#36922967)
isn't the security benefit from people genuinely not being confused and making accidental disclosures? You phrased it more focused on penalties applied after a failure which to my novice understanding is too late (and ineffective anyway).
Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by mlyle on Saturday July 29, 2023 @02:26PM (#36923038)
Absolutely one reason is why people follow confidentiality rules is fear of punishment.

I mentioned both:

- It prevents people from not knowing something is sensitive and mishandling information

- It prevents people from claiming that they didn't know something was sensitive after mishandling information

Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by qup on Saturday July 29, 2023 @02:13PM (#36922936)
I read a very confidential dossier on my last playthrough of Goldeneye 007 on N64.
Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by seeknotfind on Saturday July 29, 2023 @02:13PM (#36922934)
Yeah I mean compared to having private military keys, this was a funny tack on.
Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by ritwikgupta on Saturday July 29, 2023 @02:12PM (#36922927)
CONFIDENTIAL is one of the collateral security levels. It goes UNCLASSIFIED (this data can be also additionally marked CUI/FOUO, for official use only), CONFIDENTIAL, SECRET, and TOP SECRET. S and TS have compartments which further gate access to information.

The software being marked CONFIDENTIAL means that it is classified software, the exposure of which can cause damage to national security.

Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by jimmyswimmy on Saturday July 29, 2023 @03:07PM (#36923404)
While true, confidential restricted is not a US classification marking. It sounds more like the language on a clickwrap license installer, like what you would get for the radio programming software.

This sounds like not much. It would allow an eavesdropper to overhear LEO-type conversations or basic operational discussion but unlikely to be anything actual classified.

I have no idea of course. I don't even know where Arnold AFB is!

Re:Pentagon hit by ‘critical compromise’ of US Air Force com... by ritwikgupta on Sunday July 30, 2023 @04:20AM (#36929049)
You absolutely can have confidential restricted data, see [1].

[1] https://www.energy.gov/sites/prod/files/hss/Classification/d...