News

US Military Spying Archive Left Open in Amazon Web Service

Here’s a lesson why hiring the lowest bidder usually is not the brightest idea. The US military just got caught with their pants down, leaving terabytes of data wide open. Found on Amazon Web Service S3 buckets, the data contains social media spying archives and other sensitive data. These are all gathered information by the US military to identify and profile various persons of interest.

Zero Effort Put in Security

Chris Vickery, UpGuard’s veteran security-breach hunter found the archives during a routine scan of open Amazon data silos. The data is wide open and there is no effort in security. In fact the buckets have names like centcom-backup, centcom-archive and pacom-archive directly. Centcom is abbreviation for US Central Command, while Pacom stands for Pacific Command. PACOM involves the US’ operations in Asia, China and Australasian region.

Vickery said he took 400GB of samples but “there were many terabytes of data up there”. The text archives are actually under compression. So extracting them would actually magnify the size by a factor of ten. Which means the data is significantly larger than it already appears. Dozens and dozens of terabytes, according to Vickery’s own estimate.

One of the buckets has 1.8 billion social media posts that are 8 years worth. These are from central Asia and includes comments from American citizens. The database appear to show that this is part of a social media and influencing campaign. The target of which are overseas youth to counter terrorism.

While the program itself is not questionable, the security effort in place protecting it is. Amazon actually has protections in place so that these kinds of cock-ups don’t happen. Including full folder encryption, yellow warning lights for open buckets, and tighter access controls. However, Vickery says these security features are relatively new and in place after the discovery.

This is certainly one of the most glaring displays of incompetence there is in recent memory. Which makes one wonder how many so-called sensitive government information is not secure out there. It is very easy to find even for anyone not looking. It is especially risky with several states ramping up cyber attacks and accelerating frequency of data breaches.

Ron Perillo

Disqus Comments Loading...

Recent Posts

BenQ MOBIUZ EX2710Q 27″ QHD 165Hz 1ms, HDRi IPS Gaming Monitor

SpeakersSpeakersYesSpeaker amount and power output2x 2 WattDimensionsLength / Depth252.5 mmWidth614 mmHeight525.8 mmWeight7.4 kgStandards / SpecificationsAdaptive…

3 hours ago

Intel Core i7-12700KF 3.60GHz Socket LGA1700 Processor

Thermal SpecificationsMax. TDP125 WCPUCPU ManufacturerIntelCPU SeriesIntel Core i7CPU Socket1700CPU ArchitectureIntel Alder Lake-SCPU Cores12CPU Threads20Performance Cores8Efficiency…

3 hours ago

AOC 24B3HA2 24″ 1920×1080 VA 100Hz 1m Widescreen LED Multimedia Monitor 

AOC 24B3HA2 23.6 1920x1080 VA 100Hz 1m Widescreen LED Multimedia Monitor - Black High-performance clarity…

3 hours ago

Corsair Hydro Series iCUE Link H115i RGB Performance Liquid CPU Cooler

Fan SpecificationsFan Size140 mmColourPrimary ColourBlackSecondary ColourWhiteMaterialsMaterialsAluminium, Copper, RubberLightingLightingYesLighting ColourRGBLighting CompatibilityCorsair iCUEAdditional ContentsIncluded fans2x 140 mmTypeCPU…

3 hours ago

Philips Evnia 34″ 34M2C6500/00 3440×1440 QD-OLED 175Hz 1ms FreeSync Curved Ultrawide Gaming Monitor

This monitor is built with features that make incredible visuals. With VESA ClearMR 9000 and…

3 hours ago

Asus Radeon RX 7900 XTX TUF OC 24GB GDDR6 PCI-Express Graphics Card

The AMD RDNA™ 3 Architecture elevated by buffed cooling and power delivery to effortlessly churn…

3 hours ago