The Mother Of All Government Data Breaches Is Happening Right Now
It’s been more than a month since the federal government shut down.
We all know the familiar story of the 800,000+ workers, and the millions of contractors, who are not receiving paychecks.
(Plus there are millions of other workers and small businesses in the private sector whose incomes depend at least partially on the government– and they’re all suffering as well.)
But now the shutdown is starting to affect cybersecurity.
Because it turns out that there are now at least 200 federal websites whose SSL certificates have expired ever since government employees were furloughed.
If you’re not familiar, SSL (and its updated version TLS) are standard encryption technologies that ensure information passed between Internet users and the websites they visit is secure.
Without SSL and TLS, your data (including credit card or other personal information) could easily be intercepted by hackers.
And nearly every website you visit now, from Google to our own SovereignMan.com, uses this encryption.
Each site has to have a “certificate”, which is really just a digital file that forms part of the encryption key. These certificates expire from time to time and must be renewed… ideally by competent professionals who know what they’re doing.
Like I said before, there are now at least 200 US government websites whose SSL certificates have expired.
But most agencies no longer have competent professionals on hand to update the certificates.
Instead, the IT guys are sitting at home waiting for the shutdown to end.
Remember that when the government shut down, federal employees were grouped into two categories: ESSENTIAL and NON-ESSENTIAL.
The non-essential employees were sent home and told to wait it out, with a warning that it’s actually against the law for them to even log in to their work emails.
The essential employees, meanwhile, are inexplicably forced to keep working for no pay– which is something that was supposedly outlawed in the Land of the Free back in 1863.
About HALF of all federal employees, it turns out, are non-essential, with more than 380,000 waiting at home for the shutdown to end.
And depending on the agency, the numbers are even more pronounced.
Cybersecurity seems especially hard-hit: the National Protection and Programs Directorate, which the US Computer Emergency Readiness Team (US-CERT), has lost more than 80% of its workforce since the furlough began.
https://www.zerohedge.com/news/2019-01-26/mother-all-government-data-breaches-happening-right-now