PPRuNe Forums

PPRuNe Forums (https://www.pprune.org/)
-   Military Aviation (https://www.pprune.org/military-aviation-57/)
-   -   Loss of RAF Data (https://www.pprune.org/military-aviation/309178-loss-raf-data.html)

WeeMan18 21st Jan 2008 15:54

AA, Noted. It was widely reported as a PO but to be honest, the chap's rank doesn't really change things.

I'd agree with 'loser' though.

MostlyHarmless 21st Jan 2008 15:59

Totally agree that governmental IT is in the dark ages as far as having a responsible attitude to data security and needs to sharpen up.

However, we live in the real world and you need to look after Number #1 - if your current job requires you to carry stuff around unencrypted on a work / personal laptop, I would strongly recommend TrueCrypt - it's free, flexible and very,very strong.

airborne_artist 21st Jan 2008 16:00

Indeed - one would hope that whatever the rank, and commissioned or not, they would be adequately trained and monitored, and using systems that are fit for purpose.

airborne_artist 21st Jan 2008 16:13

That last comment went way over your head, AIDU. A suitable system, might for example, limit the number/age/type of records that could be downloaded, and prevent the download of personally sensitive data.

It might even ensure that that no or little personal data was held on a laptop, but viewed and manipulated over a secure link. It might also be fully encrypted, which seems not to be the case here.

Tigs2 21st Jan 2008 19:35

Weeman18

There are so many people implicated here, and as you say, why is a man/woman carrying your data 1 year after you have left. Find a good no win no fee lawer and go for it. Your security has been compromised --for what? You could for example, quite rightly want to sell your home and move address etc. Be one of the first in, the lawers will be itching for a case, as everyone else will take them on when they win.

airborne_artist 21st Jan 2008 19:41


Your security has been compromised --for what? You could for example, quite rightly want to sell your home and move address etc. Be one of the first in, the lawers will be itching for a case, as everyone else will take them on when they win.
To succeed in a civil court the claimant would need to prove a loss, which could be remedied by a payment of damages. The possibility of ID theft remains that, a possibility, and it would be hard as case law stands, to ascribe a financial value to that risk, other than the cost of changing account numbers at CC cos and banks, most of which will be for free. OK, a small amount of time, but no personal loss.

I can't see it happening right now. The idea that you need to move house to counter the risk of the MOD laptop is not viable, IMHO.

Tigs2 21st Jan 2008 19:46

But worth a try:E:E

airborne_artist 21st Jan 2008 19:48

But a no win no fee lawyer won't take it on if they reckon they have such a small chance of winning a very small amount. You'd have to front the costs, and be prepared to pay the costs of the other side if you lost.

JessTheDog 21st Jan 2008 20:15


I suspect, though, that most of this data is 'Staff in Confidence' whereas by virtue of the sheer volume of sensitive personal information it should be handled as Secret or Top Secret.
Not just by virtue as I recall. I am sure that the JSP had a requirement to increase the protective marking for aggregated data (ie a cabinetfull of Restricted may be PM Confidential).

The only silver lining to this cloud is that the ID cards scheme will never be implemented. The No 2 ID campaign's support base is likely to number in the hundreds of thousands or even millions, as opposed to thousands ot tens of thousands.

This is a catastrophic breach of the Data Protection Act.

D O Guerrero 21st Jan 2008 23:54

I didn't do it...
 
Wader - wasn't me actually...
I don't waste my time on ill informed websites like the BBC for my news. I get everything I need to know right here :rolleyes:

L J R 22nd Jan 2008 04:37

I have been told that to ascertain if your data is included, you have to supply more data to specifically identify you. Not unreasonable in the first instance, but why so much info to say - yes you have been compromised...Surely a name 'Fred Bloggs' is or is not included. If it IS included, then is is up to you to pursue if indeed it was your Fred Bloggs data. If Fred Bloggs' name is not on the list, you can remain anonymous.


How hard is that?.

.

El Mirador 22nd Jan 2008 05:04

In the case of my relative airborne artist, that could actually happen. They were contacted immediately by phone and given a special 'panic' number. Their personal saftey could be compromised. Absolutely furious about the whole thing!

Pontius Navigator 22nd Jan 2008 07:04

D O G, LOL, I guess someone might have cut n paste yr post then.

adr 22nd Jan 2008 08:13

Some comfort for ageing SERE types. Although I fall in the "enquired, applied or joined within the last ten years" band, I've received the "there are no records on the database relating to you" email. Maybe the data dump was filtered by age.

adr

MrBunker 22nd Jan 2008 09:03

Couldn't even find my details with a bloody service number and dates of service.

Inspiring.

Wader2 22nd Jan 2008 13:20

Unencrypted!

Didn't know there were any official unencrypted laptops out there. Certainly the rules about a year or so back called for the declaration of all the unencrypted laptops to be given protection.

Oh, I forgot, if some rules were ignored why not ignore the encryption rules too after all they make access difficult.

Was it even an MOD laptop and not a private one with the incident being reported only in case the military database on a private laptop turns up in the currant bun?

Lima Juliet 22nd Jan 2008 20:39

Just thought this might be of interest


Royal Air Force Wing Commander David Farquhar is not an internal auditor. But, on December 17, 1990 he discovered a security problem when a laptop that he had been using was stolen from an RAF staff car.

At the time the incident occurred, Farquhar was a member of the staff of Air Chief Marshal Sir Patrick Hine, Joint Commander of British Forces in the Persian Gulf. Farquhar was returning from a briefing for British Prime Minister John Major on plans for Operation Desert Storm when he stopped at a car dealership to examine several secondhand Range Rovers.

When Farquhar and his driver returned to the staff car, the laptop and two briefcases containing what were described as "sensitive papers" had been removed from it. The briefcases were recovered from a rubbish dumpster within hours, their contents apparently intact.

Royal Air Force officials concluded that the laptop had been taken by a petty thief rather than by an intelligence agent, and that the unit most likely had been taken in a so-called "crime of opportunity" by someone who apparently was unaware of the nature of what he was stealing. Reportedly, the subsequent RAF investigation concluded that the laptop most likely had been sold by the thief to someone who deals in the purchase and resale of stolen goods. Eventually the incident and the publicity surrounding it cost Farquhar his career.
I wonder what will happen to the RN chap?

D O Guerrero 23rd Jan 2008 03:30

Didn't Alan West lose a few post-its on his early AM canal tow-path stroll? Didn't seem to him any harm....

Whenurhappy 23rd Jan 2008 10:21

DVA Reports
 
Anyone who have been recently interviewed - or re-interviewed for a DV or similar will be aware of the requirement to be offered a copy of the report (as it is held on a data-base). If you ask for that copy, it will be, as a default, be sent by second class post to your home address in a window envelope (with the DVA header clearly visible). No signature required, no positive control over a highly sensitive document.

Mrs W opened the envelope guessing it was my OJAR and read the report... but my concern is the sloppy disregard of the handling of personal information by an organisation that is largly built on trust and absolute discretion.

VMD+12 23rd Jan 2008 16:33

Wader 2 you are incorrect. The Wg Cdr was not promoted. He was Court Martialled and, despite several very senior officers speaking in his defence, he was fined and lost all his seniority as a Wg Cdr with pension implications. He retired a couple of years later still a Wg Cdr (very junior).


All times are GMT. The time now is 08:34.


Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.