Ministry of Defence | Defence News | MOD confirms loss of recruitment data
David Hansen
ukcrypto at chiark.greenend.org.uk
Sun, 20 Jan 2008 13:20:13 -0000
On 19 Jan 2008 at 23:01, Ian Batten wrote:
> > He is most probably a Personnel Security Officer doing security
> > clearance vetting work !!
>
> On half a million punters? At once? That's quite a workload. He
> could do one a minute, working 24 hours a day, and be done by the
> middle of next year.
I haven't checked your arithmetic, but I agree with the point. Such a
person might have some details, though like the passport proposals if
some prat asked me about my bank account I would tell them that it is
none of their business. However, any details on a laptop should only be
about a weeks worth at most, even better a day's worth. We do have
encrypted communications these days, despite the best attempts of
government to prevent them.
I note from <http://news.bbc.co.uk/1/hi/uk/7197628.stm> that, "We will
require satisfactory answers from the MoD about their data protection
practices and a firm assurance that steps have been taken to improve
these practices before deciding on the appropriate action to take," [Mr
Thomas] said. Gosh, that will frighten the MOD. If they don't answer,
or any answer is not "satisfactory", Mr Thomas will send them a piece
of paper saying that their performance is not satisfactory. That will
really make them change.
As an aside I have been dealing with this bod's office regarding
criminals sending my company faxes offering their "services" to us
regarding "debt collection", despite us being registered with the fax
prevention scheme and instructing several of them not to spam us
directly. I have even provided a witness statement about one bunch of
criminals. It made precisely no difference to the activities of the
criminals. That is when they take an interest, on other issues they
can't even be bothered to look into things, for example they claim that
because the Westminster bunch have concocted something they cannot
challenge it or even look into it.
The UK Information Commissioner's Office is almost useless. The
Scottish one is rather better, but has a sloping shoulders to anything
that can be brushed off oonto the UK bod.
--
David Hansen, Edinburgh
I will *always* explain revoked encryption keys, unless RIP prevents
me
http://www.opsi.gov.uk/acts/acts2000/00023--e.htm#54