Hacker News new | ask | show | jobs
by dguido 3549 days ago
Here's the criminal complaint. Check Paragraph 12, sounds like he just liked to take work home with him. I'm leaning on the side that this IS NOT ShadowBrokers.

https://lawfare.s3-us-west-2.amazonaws.com/staging/2016/Mart...

EDIT: Yeah, Martin is not even being charged with unauthorized disclosure. Not ShadowBrokers, sorry to burst everyone's bubble.

5 comments

Whilst trying to remain as politically neutral as possible, isn't this basically what Clinton did?
Whilst trying to remain as politically neutral as possible, this the kindest possible interpretation of one thing that Clinton did.
In the interests of neutrality, isn't this basically what the Bush administration did as well?
A little more context please? I think everyone is familiar with the FBI investigation of Clinton related to her handling of classified material that very recently occurred. We may be less familiar with a similar investigation that occurred 8-16 years ago...
Nobody has managed to find any documents that passed through Clinton's email server that were labeled as classified, let alone Top Secret.

(One or two documents had classified sections, which were labeled with small (c) marks. The document should have had big CLASSIFIED marks, but since it didn't, missing a (c) next to a paragraph is not an arrestable offense)

You are not being neutral by using the Clinton spin of "labeled as classified". The existence of markings is irrelevant. From the FBI statement:

110 e-mails in 52 e-mail chains have been determined by the owning agency to contain classified information at the time they were sent or received. Eight of those chains contained information that was Top Secret at the time they were sent; 36 chains contained Secret information at the time; and eight contained Confidential information, which is the lowest level of classification. Separate from those, about 2,000 additional e-mails were “up-classified”

https://www.fbi.gov/news/pressrel/press-releases/statement-b...

I find the situation she engendered as ridiculous as everyone else, but the public report, at least as far as I could tell, did not differentiate sending and receiving of information. Ascribing criminal culpability to her is therefore unclear based on the public form of the report, and the lack of charges implies that it's unclear in the classified version of events as well.
I think people fault her because the server was setup, maintained and used on her authority. Since she created the unsafe situation, she's responsible.
Stop pushing this myth.

I want Hillary to win as much as the next reasonable person, but that doesn't mean she didn't mess up.

There were dozens of classified emails that were in fact classified at the time they were sent. Some of which were Top Secret. Some of which were even Special Access Programs.

Whether something is marked or not is actually irrelevant. Part of her responsibility and this contractor's responsibility under the clearance agreement is to identify classified content regardless of markings.

Point taken. You're correct on all points.

Discussing classified matters through an insecure method is a far cry from physically taking documents home, not least because it's clear the discussions were being undertaken as part of her official duties. Taking documents home is a lot more ambiguous as to intent.

> Discussing classified matters through an insecure method is a far cry from physically taking documents home

It is identical. He is being accused of moving classified information to unauthorised locations. She moved information to unauthorised locations. She literally had people send classified information to the basement of her home.

Plus I'd argue that sending classified information to an insecure server is a far bigger threat to national security. Even if he got robbed on the way home the overall scope is lower than if the server gets broken into by foreign entities.

>to an insecure server

Email is insecure regardless of who owns the server or where it's located. The government's own position is that emails in transit are postcards, not letters, and emails at rest are abandoned property, not personal papers and effects.

On the scale of how bad this is, plain old email on a private dedicated server is a 10/10, but plain old email on an @state.gov server would have been at least a 9/10. From an "endangering national security" perspective, we should be equally angry about everyone who used the official State email server for classified information.

It's not just information disclosure. Imagine the lulz to be had from the fact that the Security of State can't distinguish between an email from the President and any idiot who knows how to forge a FROM header.

Also, that time when it turned out that the State Department let the Russians have RCE on its email server for more than a year [1].

[1] http://gizmodo.com/state-dept-just-shut-off-part-of-email-sy...

The primary argument would be one of agency - while I agree that it was a terrible thing to have done, if she neither requested nor sent any (additional)* classified information from that system, it lacks the same kind of agency that a person explicitly taking classified data out of a secured location has.

* - additional here meaning that I wouldn't claim it to be deliberate to, say, reply to an email containing classified portions and leaving the classified portions in the reply.

> Nobody has managed to find any documents labeled as classified, let alone Top Secret.

Really? So you can just delete all the classification labels and send the document to a yahoo account. Look no labels, so it is fine? You better ask your friendly Security Officer about that (actually don't you'll be highly suspicious doing that).

She had 10 or so TS/SCI satellite images in there. Other people would go to jail for that...

She deliberately set up her own separate server, that wasn't an oops I slipped, one doesn't accidentally stumble and end up with a separate email server. Then classified documents up to TS/SCI were found on that server. Imagine an NSA or NRO employee doing that.

"So yeah, Jim, I just set up my own work email server at my house, just send work email there". "Oh, you found some satellite images there? You think you got me, however, see, classification markings are not there so it's fine"

> one doesn't accidentally stumble and end up with a separate email server.

Have managed email servers. Can confirm. Would be more likely to arrive at Mordor on foot.

> Imagine an NSA or NRO employee doing that.

Well, one kind of did, but we like him. He's one of us.

The "just send work email there" bit seems highly inaccurate. It seems pretty clear that the intention was for this server to be used for unclassified communication. You can't even send email from a classified to an unclassified network without clearly marking it as such.

Now clearly it is at best highly naive to think that a server handling the kind of volume of email that the Secretary of State would receive, much of it from people handling classified information, is going to be able to stay 100% free of classified contamination.

The existence of the email server to begin with blocked journalists attempts to investigate on State Department activities in Libya, and violated the FOIA Federal Law (a felony).

Partisan political actors are quick to redefine the problem as 'labeled as classified' and make claims about intentions, etc.

Spilling the beans on classified information is still illegal, even if it's not properly portion marked in big capital letters.
Yes, but the presence of three or so poorly marked emails among tens of thousands of them over four years does not do a great job of establishing intent - as opposed to this case, where the Booz employee was found with tons of presumably clearly marked classified documents.
Even the destruction of evidence is illegal. The State Department ordered her to return all emails, she had staff (incidentally without security clearance) delete tens of thousands of them.

The state department has recovered emails sent and received to her (for official functions) which she failed to turn over. This is in the FBI's report and also in the private lawsuit filed by the Republican group.

What's to say $FOREIGN_INFOSEC_ACTORS don't try to target employees like him? Maybe he did "take his work home" and a FSB operative stole it from his home or hacked his home computer?

I'm saying this as if this was Russia and he was a Russian infosec guy, I wouldn't put it past the NSA TAO to go do just that.

Yes, this is dangerous; people shouldn't be allowed to bring government secrets home with them... unless they are cabinet level officials?
Actually, this argument has some merit, as cabinet level officials probably have a security detail, and hence much less likely to be infiltrated than a random contractor (at least physically; electronically is another matter)
Exactly! They should go to jail as well, but well you can't win them all... Clinton should be in jail.
That would in fact be their job. Far more so than monitoring each of their fellow citizens for shits and giggles. And porn.
Sounds like is being made the fall guy for this.
So there have been at least three leaks from the NSA? That's ridiculous; they need some drastic changes and urgently.
People enforce all security physical and digital. If people don't believe in the mission there will be leaks.

The biggest change might simply be that they need to start doing unambiguous good or their workers will keep leaking stuff.

>The biggest change might simply be that they need to start doing unambiguous good or their workers will keep leaking stuff.

Didn't James Earl Jones address this idea in "Sneakers"?

"We're the US government: we don't do that sort of thing!"

MANY have said that its possible there was another NSA patsy covering for Snowden or definitely at least another spy.

http://observer.com/2016/08/the-real-russian-mole-inside-nsa...

http://www.nytimes.com/2016/09/01/world/europe/wikileaks-jul...

Many == Russia?