Endpoint // Privacy
6/30/2014
12:10 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

NSA Director Downplays Damage From Snowden Leaks

New NSA director tells The New York Times he'll have to be more open about agency's activities than his predecessors.

Admiral Michael Rogers, who three months ago replaced the retired General Keith Alexander as head of the National Security Agency (NSA), says it's impossible to prevent an insider attack at the agency from ever occurring again. But the fallout from the more than one million documents leaked by former NSA contractor Edward Snowden has not been devastating, Rogers told The New York Times in an interview.

Rodgers told the newspaper that terrorist groups have adjusted their communications operations to bypass the surveillance methods the Snowden documents revealed:

    "Am I ever going to sit here and say as the director that with 100 percent certainty no one can compromise our systems from the inside?" he asked. "Nope. Because I don’t believe that in the long run." …
    "You have not heard me as the director say, 'Oh, my God, the sky is falling.' I am trying to be very specific and very measured in my characterizations."

The key is for the agency to "ensure that the volume" of information leaked by Snowden can't be pilfered again, he said in the interview. Among other things, the agency since has instituted a two-man rule, where information systems professionals must provide codes to get access to sensitive information in NSA's systems.

Alexander, meanwhile, called Snowden's document leaks "the greatest damage to our combined nations' intelligence systems that we have ever suffered."

 

Kelly Jackson Higgins is Executive Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9605
Published: 2015-09-04
WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and create a system backup tarball, restart the server, or stop the filters on the server via a ' (single quote) character in the login and password parameters to webup...

CVE-2015-2990
Published: 2015-09-04
Directory traversal vulnerability in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.

CVE-2015-2991
Published: 2015-09-04
Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.

CVE-2015-5612
Published: 2015-09-04
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

CVE-2015-5688
Published: 2015-09-04
Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

Dark Reading Radio
Archived Dark Reading Radio
Another Black Hat is in the books and Dark Reading was there. Join the editors as they share their top stories, biggest lessons, and best conversations from the premier security conference.