Go Back  PPRuNe Forums > Aircrew Forums > Military Aviation
Reload this Page >

Loss of RAF Data

Wikiposts
Search
Military Aviation A forum for the professionals who fly military hardware. Also for the backroom boys and girls who support the flying and maintain the equipment, and without whom nothing would ever leave the ground. All armies, navies and air forces of the world equally welcome here.

Loss of RAF Data

Thread Tools
 
Search this Thread
 
Old 18th Jan 2008, 19:09
  #1 (permalink)  
Thread Starter
 
Join Date: Jun 2005
Location: UK
Posts: 769
Likes: 0
Received 0 Likes on 0 Posts
Loss of RAF Data

MOD confirms loss of recruitment data

The Ministry of Defence can confirm that a laptop was stolen from a Royal Navy officer in Birmingham last week, on the night of 9/10 January, and as a result, a large quantity of personal data has been lost

The stolen laptop contained personal information relating to some 600,000 people who have either expressed an interest in, or have joined, the Royal Navy, Royal Marines and the Royal Air Force.
LFFC is offline  
Old 18th Jan 2008, 19:27
  #2 (permalink)  
 
Join Date: Jan 2003
Location: England
Posts: 964
Likes: 0
Received 0 Likes on 0 Posts
That is serious information according to the link. Was it encrypted? Password protected? Lets hope the laptop was stolen by a junkie just wanting £20 for his next fix, and that the data has been wiped.
Tigs2 is offline  
Old 18th Jan 2008, 19:29
  #3 (permalink)  
Red On, Green On
 
Join Date: May 2004
Location: Between the woods and the water
Age: 24
Posts: 6,487
Likes: 0
Received 2 Likes on 2 Posts
So that will include details of AA Junior, and a fair few posters on the OASC thread. Luckily AA Junior is not yet 18, so applications for credit cards in her name won't get very far.
airborne_artist is offline  
Old 18th Jan 2008, 19:36
  #4 (permalink)  
 
Join Date: Sep 2007
Location: Wiltshire
Posts: 261
Received 2 Likes on 1 Post
600,000 names/details ??

I just wonder how far that will go back 5 - 6 years or more ??

Won't affect me, they were still using quills and parchment when I joined ( thought I'd say it before anyone else did )
OmegaV6 is offline  
Old 18th Jan 2008, 20:08
  #5 (permalink)  
 
Join Date: Jan 2002
Location: The front end and about 50ft up
Posts: 510
Likes: 0
Received 0 Likes on 0 Posts
applications for credit cards
I'd be more concerned about the information falling into the hands of unfriendly nations or terrorist organisations. I'm sure that data would be very valuable to certain undesirable outfits.
Fg Off Max Stout is offline  
Old 18th Jan 2008, 20:20
  #6 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
My laptop has an encrypted hard drive. A real br to use. So difficult in fact that the login and password routine stay with the laptop.

Now in that is not a bad thing, provided they are held separately from the laptop when in an insecure area.

Now of course it would never have been in the laptop case with the laptop. Would it?

If it wasn't in the case then I am sure he would have kept it secure in his briefcase and not left that in the car with the laptop. He would wouldn't he?



bets?
Pontius Navigator is offline  
Old 18th Jan 2008, 20:39
  #7 (permalink)  
 
Join Date: Nov 2000
Location: South Wales
Age: 63
Posts: 729
Likes: 0
Received 0 Likes on 0 Posts
Just shown my daughter the link. It is almost certain her full details are in that laptop somewhere. She is not happy.

I gave her plenty of moral support by taking the pi$$ out of the Navy and the incompetence of leaving such an item in a car in Birmingham. I did, of course, forget to mention the GW1 Wg Cdr Laptop incident.

Seriously though, my daughter’s information will almost definitely be there so if anybody has any more gen or advice please PM me.
SRENNAPS is offline  
Old 18th Jan 2008, 20:44
  #8 (permalink)  
Red On, Green On
 
Join Date: May 2004
Location: Between the woods and the water
Age: 24
Posts: 6,487
Likes: 0
Received 2 Likes on 2 Posts
The BBCi page has been updated:

"But for those who progressed as far as submitting an application to join the Forces, extensive personal data may be held, including passport details, National Insurance numbers, drivers' licence details, family details, doctors' addresses and National Health Service numbers."

"
The MoD said it was writing to 3,500 people whose bank details were on the laptop's database."

The most surprising (and uncorroberated) quote is:

"
Simon Davies, from pressure group Privacy International, told BBC News 24 he was "flabbergasted". "I cannot believe that our flagship security agency (what does he mean?) cannot get this right," Mr Davies said.

"The idea that someone could have the computer with the information unencrypted - it is on a par with the HMRC loss."


You do also have to ask what kind of data-management solution is designed to enable a laptop to contain so much key data. Why does it need to be on a laptop at all? Surely some/much of the info can be held on a server and viewed over a secure link when needed?
airborne_artist is offline  
Old 18th Jan 2008, 21:00
  #9 (permalink)  
 
Join Date: Nov 2003
Location: Swamp Land in East Anglia
Posts: 69
Likes: 0
Received 0 Likes on 0 Posts
Bl**dy priceless!!!

Well at least he will be able to raise a glass or two on his, no doubt, very forthcoming promotion.......
Lord Trenchards Brat is offline  
Old 18th Jan 2008, 21:05
  #10 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
According to a completely reliable source, Mrs PN said that if the information was encrypted it would be a given that the encryption passwords would have been with the laptop.
Pontius Navigator is offline  
Old 18th Jan 2008, 21:13
  #11 (permalink)  
 
Join Date: Jan 2003
Location: England
Posts: 964
Likes: 0
Received 0 Likes on 0 Posts
PN
they are probably stuck on the laptop in Dymo tape!
Tigs2 is offline  
Old 18th Jan 2008, 21:17
  #12 (permalink)  
 
Join Date: Nov 2003
Location: Swamp Land in East Anglia
Posts: 69
Likes: 0
Received 0 Likes on 0 Posts
Just in case you have found the laptop without the attached passwords inside just rely on the good traditional infosec tradition of using the word 'password' as this seems to be a good starter for ten on any MOD laptop I have the displeasure of using.
Lord Trenchards Brat is offline  
Old 18th Jan 2008, 21:37
  #13 (permalink)  
 
Join Date: Feb 2003
Location: uk
Posts: 3,225
Received 172 Likes on 65 Posts
I had to remember 93 keystrokes to access mine. Never did manage it. Never used it. My efficiency improved no end.
tucumseh is offline  
Old 18th Jan 2008, 22:01
  #14 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
tumeseh has it right. They made it TFD so that dymotape was the only way.

Now of course i don't have any notes on my desk with my random 21 alfa password do I?

the obvious solution is too easy for the plods.

Now I had one of my own passwords that was a simple one like:

"Oh to go down to the seas again to the lonely seas and the sky"

Try cracking that with a dictionary cracker program.
Pontius Navigator is offline  
Old 18th Jan 2008, 22:08
  #15 (permalink)  
 
Join Date: Mar 2002
Location: Henley, Oxfordshire
Posts: 165
Likes: 0
Received 0 Likes on 0 Posts
It's alright. It's not a problem at all. Apparently all the information came from JPA so none of it's accurate anyway.
Mick Smith is offline  
Old 19th Jan 2008, 00:31
  #16 (permalink)  
Thread Starter
 
Join Date: Jun 2005
Location: UK
Posts: 769
Likes: 0
Received 0 Likes on 0 Posts
Thief steals MoD laptop with details of 600,000 staff - The Mail

Incredibly, the information was not encrypted - meaning it would be easily accessed by anyone with basic technological knowledge.


And the government wants everyone to trust them with ID card details? I think not somehow - either that policy is washed up, or this government is! Perhaps both.
LFFC is offline  
Old 19th Jan 2008, 01:18
  #17 (permalink)  
 
Join Date: Aug 2006
Location: Essex
Posts: 365
Likes: 0
Received 1 Like on 1 Post
Oh dear.

So the next generation of cannon fodder will be hieing into battle on the back of a lot of credit card debt run up by a man in Burundi.

Oops.
Phil_R is offline  
Old 19th Jan 2008, 02:50
  #18 (permalink)  
Nixor ut Ledo
 
Join Date: Dec 2007
Location: obviously NOT in the same kindergarten playground as the management!
Posts: 23
Likes: 0
Received 0 Likes on 0 Posts
At least you now know that when you get an email from the "desk of" Jokoma Hungalunga inviting you to act for him with your bank account you will know that you definitely have been 'personally' selected and that he already has your account details!
allan908 is offline  
Old 19th Jan 2008, 07:34
  #19 (permalink)  
 
Join Date: Mar 2006
Location: cambridge
Posts: 395
Likes: 0
Received 0 Likes on 0 Posts
never mind, the poor sods get to join us who's details that were "lost" on the disk that had the child benefit details on it! me thinks that this government are hanging on by a thread to any trust we may have had in the system or their ability to look after us. as for any one with brain cells, then i'm afraid we are at a complete loss. that's because not long after my details were lost i received a letter from the child benefit agency apologising that they had lost my details and were doing all they could to get them back, so imagine my suprise when at the top right hand corner of the letter were my details. i felt like writing back to them and saying " guess what i've found them!"


plebs the bloody lot of them
chappie is offline  
Old 19th Jan 2008, 07:56
  #20 (permalink)  
 
Join Date: Jul 2007
Location: @exRAF_Al
Posts: 3,297
Likes: 0
Received 0 Likes on 0 Posts
Wasn't there a Wingco who stopped to look at a car showroom, leaving Orbats etc for Granby on a laptop in his boot? Which went awol.

I wonder if there's such a thing as a time lock for hard drives.. even with access verified, data is unobtainable for a certain time, and possibly an auto wipe facility?

Either way, this isn't good. I have opted out of the NHS records system, and I am anti ID card, not on principle, but because I don't trust g'ment to a) do its job properly and preserve my security and b) stick to its word about what the ID card will be used for.
Al R is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.