One interesting point is (will be) the recognition that the Apple fingerprint mechanism is a secure authentication mean, at least as secure as the traditional existing ones.
lloydbm4 wrote: »
This is correct. iPhones and iPads will not be able to enter classified areas (although exceptions will be made for a few, I am sure.) This is because Apple refuses to allow modifications to iOS or to the hardware. (Camera's and some of the mic's would need to be disabled or possibly even removed.) Apple has refused to alter their stance on this since at least 2009. Maybe even before then?
As for Blackberries, yes they are still being used by the USAF, but every single week, I see an outage for all BB devices on base and that the 'issue' is being worked on. The sheer mount of man hours and money being spent on these phones is mind boggling. Moving to iDevices for all non-secure needs will save a ton of time and money in the long run.
empires wrote: »
I think they should have purchased Acer Iconia w511p units. They are much better than iPads they have Windows 8 and Microsoft Office
lloydbm4 wrote: »
The acronym SCIF is not classified. Neither is SI/TK. Once upon a time it was, but no longer.
iPhones and iPads will not be able to enter classified areas (although exceptions will be made for a few, I am sure.) This is because Apple refuses to allow modifications to iOS or to the hardware. (Camera's and some of the mic's would need to be disabled or possibly even removed.) Apple has refused to alter their stance on this since at least 2009. Maybe even before then?
I wonder if Apple had a part in these guys' efforts not being repeated for the 5 and 5s. could have just been an unprofitable adventure too, as they seem to have bent over backwards to make it clear they weren't trying to gouge anyone.
The ironic thing about cameras is where I worked, there originally were only a few people authorized to use cameras on site. All of a sudden, anyone with management approval could carry a point and shoot. Our desk phones had speaker phone capability and they weren't controlled the same way as computers or mobile devices so you could have a speaker phone active in a classified area. Go figure.....
That is illustrative of the fact that camera use, per se, should not be regarded as a huge issue. The security posture, in most areas, is intended to prevent accidental, not malicious, compromise of classified information, so provided that camera use is controlled, and something equivalent to a DC review is required before the images are disseminated, there should be no problem. What you don't want is photos taken in limited or secure areas finding their way onto FB or the cloud and so, for example, photostream is generally disabled in the security profile on government iOS device.
I've never understood the lack of attention paid to the security risk presented by regular phones in classified environments.
Do you have a need to know?
The historical posture supposedly addressed accidental and malicious compromise by restricting access to anything close to classified information. In fact, most information was considered sensitive enough to keep everything in a limited area. It wasn't until maybe 15-20 years ago that management got tired of having to escort people they wanted to talk to into meetings that they started to open things up. Classified information was declassified, computer systems were attached to the open internet (no routers or firewalls at first), and people started thinking about security second (convenience first). I grew up during the lock-down period and had to shake my head during the enlightenment period.
I wasn't referring to the actual access to classified material - the rules governing that have not changed much in that period as far as I can see, except for how it is tracked in some cases. To clarify, my comment on preventing accidental disclosure referred to accidental disclosure of collateral classified material by persons already authorized for access. I don't think that declassification has been driven by convenience either. Information cannot be classified (in general) just on a whim, and it simply represents application of the original declassification guidance. And no classified computer systems are ever connected to the internet.
So if you're uploading a selfie to Instagram, make sure the aliens working on the death ray aren't visible in the background.