The Trump Administration Accidentally Texted Me Their War Plans
-
-
I'm not terribly sure how accurate that tweet from Malcolm Nance is. Signal uses end to end encryption and while yes I'm sure foreign adversaries are targeting the cell phone devices of these folks, I'm not aware of any breach where all of the crap Malcolm says has been compromised. Even IF somehow they got access to their Signal chat (which they didn't), it's not like a master key to the whole phone.
-
-
https://dodcio.defense.gov/Portals/0/Documents/Library/Memo-UseOfUnclassMobileApps.pdf
SUBJECT: Use of Unclassified Mobile Applications in Department of Defense
Mobile applications (apps) are software products designed to function on mobile devices. The misuse and mismanagement of mobile apps poses a cybersecurity and operations security (OPSEC) risk and may result in the unauthorized disclosure of controlled unclassified information (CUI) and unclassified Department of Defense (DoD) information that has not been approved for public release (hereinafter jointly referred to as "non-public DoD information") and jeopardize operations, strategies, or missions, as described in references (b) and ( c ). This memorandum provides guidance on the use of mobile apps on unclassified DoD government owned, leased or issued, mobile devices (hereinafter referred to as "government owned mobile devices") and on the managed partition of non government owned mobile devices approved in accordance with reference (d) (hereinafter referred to as "Approved Mobile Device" (AMD)).
Numerous mobile apps access or use non-public DoD information (e.g., authorized email apps, collaboration apps, command/control apps). Other applications may be used in support of mission requirements but do not directly access non-public DoD information (e.g., travel and educational apps). Although mobile apps can provide ease of use and increased functionality for users across the Department, there are risks that must be considered. Mobile apps may contain malware or have vulnerabilities that can disclose CUI, personally identifiable information (PII), non public DoD information not approved for public release, or other sensitive information. This is all possible without the user's consent or knowledge.
In accordance with DoD Instruction 5200.48, DoD personnel will not use non-DoD accounts or personal e-mail accounts, messaging systems or other non-public DoD information systems, except approved or authorized government contractor systems, to conduct official business involving CUI. In accordance with DoD Instruction 5200.01, DoD personnel will not use unclassified systems, government issued or otherwise, for classified national security information. DoD CIO will continuously consult with all DoD Components to evaluate risks mobile applications may present to the DoD and update References (m), (n), and (o), as appropriate.
My understanding is that breaking this rule is grounds for dismissal from the military.
-
