• On The Insider: Sexiest Magazine Covers of All Time

July 24, 2007 3:09 PM PDT

Congress: P2P networks harm national security

WASHINGTON--Politicians charged on Tuesday that peer-to-peer networks can pose a "national security threat" because they enable federal employees to share sensitive or classified documents accidentally from their computers.

At a hearing on the topic, Government Reform Committee Chairman Henry Waxman (D-Calif.) said, without offering details, that he is considering new laws aimed at addressing the problem. He said he was troubled by the possibility that foreign governments, terrorists or organized crime could gain access to documents that reveal national secrets.

Also at the hearing, Mark Gorton, the chairman of Lime Wire, which makes the peer-to-peer software LimeWire, was assailed for allegedly harming national security through offering his product.

The documents at risk of exposure supposedly include classified government military orders, confidential corporate-accounting documents, localized terrorist threat assessments, as well as personal information such as federal workers' credit card numbers, bank statements, tax returns and medical records, according to recent studies by the U.S. House of Representatives Committee on Oversight and Government Reform, the U.S. Patent and Trademark Office, and private researchers.

Evidence that sensitive information is accessible through peer-to-peer networks illustrates "the importance of strengthening the laws and rules protecting personal information held by federal agencies" and other organizations, said Rep. Tom Davis (R-Va.), the committee's ranking member, who has sponsored a bill that would impose new requirements on government agencies that discover security breaches. "We need to do this quickly."

The politicians present Tuesday generally said they believe that there are benefits to peer-to-peer technology but that it will imperil national security, intrude on personal privacy and violate copyright law, if not properly restricted. Both Waxman and Rep. Paul Hodes (D-N.H.) dubbed P2P networks ongoing national security threats.

Congressional gripes about P2P networks are hardly new, and in the past, they have reinforced concerns raised by the Motion Picture Association of America and the Recording Industry Association of America. Four years ago, the same committee held a pair of hearings that condemned pornography sharing on P2P networks and also explored leaks of sensitive information. And throughout 2004, Congress considered multiple proposals that would have restricted--or effectively banned--many popular file-swapping networks. Waxman noted that he was not seeking to ban peer-to-peer networks this time around but rather to "achieve a balance that protects sensitive government, personal and corporate information and copyright laws."

News.com Poll

Is Congress clueless about P2P and national security?

Yes
No



View results

To be sure, the kind of information leaks that alarmed politicians at Tuesday's hearing are most likely already against the law or federal policy. It is illegal for government employees to leak certain types of classified documents without approval, either electronically or through traditional paper means.

Mary Koelbel Engle, the associate director for advertising practices in the Federal Trade Commission's Bureau of Consumer Protection, said her agency has found in its studies of peer-to-peer network use that risks to sensitive information "stem largely from how individuals use the technology rather than being inherent in the technology itself."

See more CNET content tagged:
national security, P2P, LimeWire, politician, copyright law

Add a Comment (Log in or register) 153 comments (Showing first 20 comments)
Americans in general harm national security...
by gsmiller88 July 24, 2007 3:55 PM PDT
If a government official is using a P2P network on a government
computer and storing sensitive data in the shared folder......Then
whose fault is that?
Reply to this comment View all 5 replies
National Security?
by billmosby July 24, 2007 3:57 PM PDT
A few years ago, when I had some reason to know how restricted
data, etc., were handled, computers containing such were not
allowed onto a network at all, at least where I worked. It sounds
like that's not the case anymore.
Reply to this comment View reply
broken zippers
by wewereright1054 July 24, 2007 4:02 PM PDT
I am not sure where to begin. I would write something witty about computers, however, I am now convinced that our government, who holds such hearings, have not the first clue on how any of this works. I know explaining firewalls and port blocking would go over the heads of the ones in charge of regulating technology, of which they are the least competent body of people to carry out such a task. I thought my mother's bridge club would be less competent, until I read this article of course.
So I will do my best to make this as simple as possible for someone like a US Senator or a congressman.
The government should not hire people that install file sharing on the same machines that they have classified information on. This would be equivalent of having someone taking home a bunch of classified documents they printed out and stuffed in a backpack with a broken zipper.
Congress, would this mean that backpacks with broken zippers are a threat to national security? I honestly think it is our hiring and electing process, but I could be wrong, of course I doubt it.
Reply to this comment
Idiots
by Dale Sundstrom July 24, 2007 4:13 PM PDT
These knee jerks might just as well say that COMMUNICATIONS TECHNOLOGIES are a threat to national security.
Reply to this comment View reply
Its frightening...
by limefan913 July 24, 2007 4:49 PM PDT
to think that people this stupid are in control of our nation. If they grew a brain cell, it would be very lonely. I can't imagine how these men do anything productive.

Oh, and I'm pretty sure no one has an interest in "government secrets". Most of them seem to involve people like John Lennon anyhow.
Reply to this comment
security+internet=oxymoron
by dvthex July 24, 2007 4:50 PM PDT
If the law allows an internet-capable computer to store information that could compromise national security, then the problem is Congress. Likewise, portable computers.
Reply to this comment View reply
WTF? This is worse than the "tubes" debacle!
by Penguinisto July 24, 2007 4:59 PM PDT
I can see it now...

[i]Deep in NSA headquarters, it was 4am in the Mother NOC. All was quiet as data by the petabyte slipped quietly along Teh Intawebs...

Suddenly, an operative leaps from his desk and rushes to the General's desk, sweat puring from his brow and his breath coming in short pants. He wasn't tired... he was scared.

The General tried to calm him, but the operative shoved a piece of paper under the General's nose in reply.

As the Gray-haired officer began reading the missive, his eyes began to show fear. Fear he hadn't experienced since 'Nam. Fear that grabs a fistful of intestine and yanks downwards... hard.

And on the paper, there was but a simple note, with a source header that pointed to somewhere in China:"

[b]"LOLz Im in UR Intarwebz downl04d1nG y3r tR4nzf0rm3rz m00v33!"[/b]


- sheyah - what the frig ever.

Thanks Mr. Reid, for proving that the Democrat Party can be just as drop-stupid, brain-dead, and tech-ignorant as the rest of the friggin' political spectrums' respective ruling classes.

Idiot.

/P
Reply to this comment
if you use p2p software
by inachu July 24, 2007 5:47 PM PDT
If you use P2P software at work and you are a govt employee or contrator then you should get fired if the software is being used at the job site.
Reply to this comment View reply
What If Al Quaeda Accidently Shared Attack Plans?
by marccooper July 24, 2007 5:53 PM PDT
If only Al Quaeda improperly used Limewire in 2001 and went out of their way to set it to automatically share non-music/video documents, 9/11 could have been prevented. The government can now hope to stop all terrorist attacks, since p2p programs are so popular and terrorists will install the p2p programs and accidently go through dozens of steps to create torrents to share their communications, etc. So really, p2p is the only thing stopping terrorists from planning future sophisticated attacks, since the attacks take too long to carry out and in the meantime they will just be revealed by accidental file sharing. So, Congress needs to realize that p2p networks assure national security. In fact, all CIA field ops can be halted immediately. Just monitor Limewire and search the string 'bomb america' every few weeks and you are set.
Reply to this comment View reply
WTF!!!!!!!!!!!!!!!!!!!!!!!!
by vibezelect1 July 24, 2007 7:31 PM PDT
If the government has decent network engineers on staff...many overpaid ass government employees wouldn't be able to surf the web,let alone use P2P. I think the government needs to clean house internally instead of trying to place new policies in the private sector.
Reply to this comment View all 4 replies
My Congress?
by mustangjjz109 July 24, 2007 7:34 PM PDT
Keep in mind that it was a member of Congress that gave away on national tv a few years ago that we were tracking Bin Ladin through his cell phone. Where is he now? I agree, ban p2p from any sensitive or All gov't computers, jeez, how dumb are you up there? You are allowing these files, under YOUR care to get around so easily and Limewire is the bad guy? LOL Get with reality quickly Senators and reps or we'll through you bums out. Speak your minds on election day too, people. Honor the ammendments America.
P.S. Gas is three bucks a gallon here and it's putting people out of business. Can you fix that? Or fix my nearly worthless health insurance and our delapidated rural school system? Iraq????
Reply to this comment View reply
Missing the point
by The_Decider July 24, 2007 7:38 PM PDT
There are a million ways to leak sensitive data.

Yes, P2P is one way, but there are QOS tools to disallow P2P traffic.

What is next? Going after cars because they are murder weapons?

Why didn't we ban airplanes? They are a weapon of mass destruction.
Reply to this comment
Government employes allowed to install programs..?!?!
by imacpwr July 24, 2007 8:05 PM PDT
Simple solution would be to block all government employes from
installing software on their computers without the systems
administrator's permission (which I seriously doubt they are
allowed to do in the first place). In other words some moron is
trying to use 911 as an excuse to limit piracy online.
Reply to this comment View all 5 replies
Only a MORON thinks this is about "security"...
by Had_to_be_said July 24, 2007 8:26 PM PDT
>> "...it will imperil national security, intrude on personal privacy and violate copyright law, if not properly restricted".


This is nothing more than a ridiculous excuse for the power-mad (who have, quite frankly, illegally seized-control within the United States) to further tighten the screws... and, even further, bury any shred of lingering freedom.

This is about, effectively, criminalizing "unregulated" and un-controlled Internet-use. In fact, this is actually about extending absolute Government, and special-interest, CONTROL over virtually ANY private-technology.

Anyone who has actually been following such legislative-actions... so-called, "private" computer-security initiatives, such as, "Trusted Computing"... and the endless scare-tactics used by "our" Government ("The War on drugs", "The War on crime", and now, "The War on Terrorism"), to cow the citizens into giving up their most basic-rights... has known that this was coming, for years.

It is so, painfully, obvious what... and, WHO, is actually behind this... Which is why I cannot believe that ANYONE could actually still fall for these, perennial "...security", "safety", and "...terrorism", lines of COMPLETE-BS, anymore.

But, then, what do you expect in a country that compliantly-abandoned its freedom, and no longer has any semblance of a legitimate government (the Federal-Government lost ALL claims to legitimacy when they effectively, permanently suspended the U.S. Constitution, Habeas Corpus, the Rule-Of-Law, began illegally spying on Americans, ...and, especially, when the "Executive-Branch", flat-out, declared itself above the "...will of the people", and utterly beyond the reach of ANY LAW... what-so-ever... in ANY matter that it arbitrarily chooses.

Oh, but... We are at "WAR"...

Oh, and, "enemies" are just everywhere...

And, we just have to do whatever "the Government" ORDERS us to do... Dont we..?

Well...

Welcome to ABSOLUTE TYRANNY...
Reply to this comment View all 3 replies
IDIOT POLITICIANS!
by txlakeside July 24, 2007 8:32 PM PDT
They obviously know very little about IT Security when they attack the software vendors and not thier own IT managers for allowing the software to be installed! They can shut down limewire tomorrow and they will be replaced by 10 new P2P or Torrent packages to replace it! This current administration loves to jump on the "buzz word" band wagon. This is really just some Record or Movie CO lobbyist who now want to blame the continuing slide in Media CO revenues to some SW package ..... IDIOTS!

They need to talk to S JOBS and EMI and just maybe they have a model that actually may work!
Reply to this comment View reply
It's a management issue
by kojacked July 24, 2007 9:27 PM PDT
Once again technology is taking the lame for a managment problem. They don't want to deal with, fire, or hurt the poor wittle feelings of their precious employees to say "No No little Billy, you can't share your MP3s from your work computer... DO IT AGAIN AND I'LL FIRE YOUR ARSE!"

I sickens me that either:
a. The government feels we are too incompentant to manage employees who abuse their workplace, have no work ethics, etc.
OR
b. Thinks we are stupid enough to believe this is a technology problem. Why not just take the computers away. That's the true source of the risk anyway. All it takes is an employee browsing the wrong web site on an unpatched browser and say bye-bye to anything private on your computer. Now where is P2P in that picture?

Any rep or senator from my state that speaks for or votes for any such legislation is definintly NOT getting my vote.

I wonder who's contributing to Waxman's coffers...
Reply to this comment View all 2 replies
Some NFS implementations
by JadedGamer July 25, 2007 2:28 AM PDT
... had this amusing little "feature" that if you exported a directory with default flags, it was world read- and writable. Maybe such defaults made sense when it was developed in a closed environment back then... and those default were left in.

Did they ban NFS because of it?
Reply to this comment View reply
Amatures
by Carion July 25, 2007 4:25 AM PDT
In my country (The Netherlands), government and army officials leave behind USB sticks with confidential information in taxi's. A prosecutor even put his Windows computer, riddled with viruses and kiddy-porn outside on the sidewalk to be collected as garbage because he thought the thing was broken. These are much more efficient ways to leak information....
Reply to this comment
Where is IT?
by rpruett July 25, 2007 5:38 AM PDT
At our college no faculty or staff member can install software on their computers. All software is either pushed down or manually installed by IT. Guess what? There is no P2P running on on our business network. Student network is a whole issue in its self.
Reply to this comment
Practical solutions
by bluemist9999 July 25, 2007 6:30 AM PDT
If a computer contains sensitive information, the computer should NOT have peer-to-peer software installed. So, why are government employees installing such software on their work systems?

I think any system containing such sensitive information should not even be connected to the Internet.

So why is that the peer-to-peer software maker's problem?
Reply to this comment
 See all 153 Comments >>
Powered by Jive Software
advertisement

Latest tech news headlines

Resource center from News.com sponsors
You Need The Speed of Norton 2009
Introducing Norton Internet Security™2009

Click Here!
With one-click, one-minute install, under 8MB of memory usage and fewer, shorter scans, it's the fastest security suite anywhere. Norton. Smart Security, Engineered for Speed. Get a FREE trial today!

Click Here!
The Fastest Security Suite Anywhere

Experience the revolutionary Norton Internet Security™ 2009. With Norton™ Insight, a new feature, you get precision security that targets only at risk files for fewer, faster, shorter scans

Win a Trip to Space!*

Enter the Blast Off with Norton Sweepstakes for your shot at a trip to space. You could experience being fast and weightless, just like the new Norton 2009. *No purchase necessary; click for full details.

FREE Trial!

Act now to get your FREE trial of Norton Internet Security 2009. Try it for the protection. Love it for the speed

Norton Safe Web NEW!

A community-based system that rates web site safety

Norton Labs NEW!

Users can download new security technologies and share input directly with developers. Help us shape our future products!

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement

Inside CNET News

Scroll Left Scroll Right