this post was submitted on 11 Sep 2024
664 points (98.3% liked)
Technology
59099 readers
3204 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Serious question: Was this actually a likely or possible security risk?
Very yes. They could reveal their location for starters, which could spoil a mission and put lives at risk, but if they use the same device on both this and the ships network, you risk compromising the ship's network or even the Navy itself, giving our enemies all kinds of sensitive info.
We are in the midst of a world war being waged in cyberspace and the US is losing. Incidents like this are a genuine threat.
I was assuming they had their own hidden network going. I can't imagine they would be dumb enough to mess with the existing ship network.
There are regular unprotected Internet channels, and then there are secure networks like SIPRNet. Devices must not arbitrarily cross from one to the other. That's where a leak can happen. That's one thing I learned working for a company with an Army contract 20 years ago. Once a device was set up for secure access on the military network, our policy was to never have it touch the civilian Internet again. It had to be 100% verified destroyed at the end of its lifetime. I don't know details of how they handle it these days with mobile devices everywhere.
Doesn't really change much.
You NEVER connect to sensitive resources via wifi. Different orgs and levels have different rules about whether a device capable of wifi can even be in the same room, but the key is to not connect it to the secure network. This is commonly referred to as "an airgap". And if you are wondering how different ships can communicate with each other and The US? Don't ask questions!
For less sensitive resources? YOLO that shit. But it is also incredibly trivial to set up a security model where users cannot connect to arbitrary networks.
So StinkyNet would, presumably, only be usable by personal devices. Which should have absolutely nothing sensitive on them to begin with. And if anything on any of the ship's sensitive networks was even able to connect to StinkyNet then... the Navy done fucked up.
Which... might explain the rapid action to punish those who violated policy.
Wow that was super interesting! Thanks!