{"id":6612,"date":"2017-02-13T17:45:24","date_gmt":"2017-02-14T01:45:24","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/02\/13\/news-431\/"},"modified":"2017-02-13T17:45:24","modified_gmt":"2017-02-14T01:45:24","slug":"news-431","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/02\/13\/news-431\/","title":{"rendered":"Trump\u2019s Mar-a-Lago Has a Secure Room? Great! Then Use It"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/www.wired.com\/wp-content\/uploads\/2017\/02\/SCIF-634808686-660x439.jpg\"\/><\/p>\n<p><strong>Credit to Author: Brian Barrett| Date: Tue, 14 Feb 2017 00:55:11 +0000<\/strong><\/p>\n<article class='content link-underline relative body-copy' data-js='content' itemprop=\"articleBody\">\n<p>Saturday evening, North Korea launched a ballistic missile that traveled over 300 miles before crashing into the Sea of Japan&#8212;far enough to hint at the ability to drop a nuke on one of the US\u2019 closest allies.<\/p>\n<p>Naturally, President Trump discussed the matter with Japanese Prime Minister Shinzo Abe, who was visiting the US, and National Security Adviser Michael Flynn. But here\u2019s the problem: He did so in full view of guests at Trump\u2019s Mar-a-Lago resort in Florida, with smartphone cameras and flashlights pointed at presumably sensitive material. <\/p>\n<p>On Monday, White House press secretary Sean Spicer said that \u201cno classified material\u201d was shared at dinner, and that the president had received an intelligence briefing beforehand in an on-site Sensitive Compartmented Information Facility, a specially outfitted room with one purpose: Keep out the spies. <\/p>\n<p>Whatever comfort that reassurance affords, it doesn\u2019t change the reality that a high-level diplomatic conversation took place that night in full view of waitstaff and nearby diners&#8212;at least one of whom posted about the show on social media.<\/p>\n<p>\u201cIt was fascinating to watch the flurry of activity at dinner when the news came that North Korea had launched a missile in the direction of Japan,\u201d wrote Richard DeAgazio in his now-private Facebook caption. A briefing may have happened in the SCIF, but plenty of discussion happened outside of it to. The documents in Trump\u2019s hands may not have been classified, but Flynn and White House adviser Stephen Bannon deemed them important enough to huddle over. <\/p>\n<p>If the bulk of the president\u2019s security discussions took place in a SCIF, great. If even a small portion of them didn\u2019t, Trump and his team took an inexcusable risk with national security.<\/p>\n<h3>SCIF It Good<\/h3>\n<p>Neither Mar-a-Lago nor the White House responded to inquiries as to whether the resort has a dedicated SCIF room, but Spicer indicated that it does. That tracks with how security officials have treated Trump\u2019s other properties; a Trump Tower conference room got a SCIF upgrade ahead of his inauguration. <\/p>\n<p>A SCIF designation doesn\u2019t connote a specific product or design. Rather, means a space that lives up to hefty requirements the Department of Defense imposes. They can be portable, as was the tent-like version President Obama traveled with, or built into existing structures; the Clintons <a href=\"http:\/\/www.politico.com\/magazine\/story\/2016\/09\/hillary-clinton-emails-2016-server-state-department-fbi-214307\" target=\"_blank\">had<\/a> one in each of their two homes during her tenure as Secretary of State.<br \/> SCIFs are more than just secluded spaces. Contracted companies construct them to comply with the NSA\u2019s TEMPEST spec, essentially a field guide to prevent radio or electrical signals, sounds, or vibrations from inadvertently giving away information to snoops. (Many TEMPEST specifics are still classified, and those that aren\u2019t involve a lot of detailed placement of wires and such.) Some even function as inhabitable Faraday cages.<\/p>\n<p>However different they may look from the outside or in, SCIFs all require self-contained power, data, and security systems. They\u2019re subject to regular, unannounced security inspections. Visitors require high-level clearances. And, perhaps most pertinently in this case, in most cases no electronic devices are allowed inside. Leave them with aides back in the restaurant. <\/p>\n<p>All of which makes a Mar-a-Lago SCIF the ideal place to discuss North Korean saber-rattling. And the polar opposite of the crowded dining area where at least some high-level conversation took place.<\/p>\n<h3>Security Lapses<\/h3>\n<p>Discussing sensitive information within earshot of, well, anyone is grossly irresponsible. But the photo DeAgazio posted to Facebook had even more bad news: staffers huddled behind Abe and Trump, holding up smartphones with flashlights on to illuminate documents. As CNN first <a href=\"http:\/\/www.cnn.com\/2017\/02\/12\/politics\/trump-shinzo-abe-mar-a-lago-north-korea\/index.html\" target=\"_blank\">reported<\/a>, the politicians and their aides placed calls to officials in Washington and Tokyo in plain sight of the well-heeled resort crowd. <\/p>\n<p>While short of a full briefing, it remains terrifying. Assuming the smartphones staffers held aloft were consumer devices, they\u2019re basically bugs waiting for someone to activate them. Android phones are notoriously insecure outside of the most recent update, and even then aren\u2019t guaranteed safe. And while iOS devices generally fare better against hackers, a <a href=\"https:\/\/citizenlab.org\/2016\/08\/million-dollar-dissident-iphone-zero-day-nso-group-uae\/\" target=\"_blank\">report<\/a> from Citizen Lab last fall showed that the going rate for an iOS \u201czero day\u201d hack\u2014one unknown to the vendor, and therefore highly exploitable\u2014was a million bucks. That\u2019s well within the budget of a nation-state looking for intel. \u201cThe idea that somebody could target these phones is not science-fiction,\u201d says Matthew Green, cryptographer at Johns Hopkins University. \u201cIt\u2019s actually a pretty standard, well-understood threat.\u201d <\/p>\n<p>Once compromised, a smartphone can cough up whatever information you could imagine. \u201cThat\u2019s the screen, the keyboard, the camera, the microphone,\u201d says Green. In this case, that means listening in on sensitive international security discussions, or snapping illicit photos of private documents. <\/p>\n<p>And that\u2019s before you consider the fact of <a href=\"https:\/\/www.wired.com\/2017\/01\/trump-android-phone-security-threat\/\" target=\"_blank\">Trump\u2019s own Android phone<\/a>, from which, as the <em>Washington Post<\/em> <a href=\"https:\/\/www.washingtonpost.com\/news\/politics\/wp\/2017\/02\/13\/trump-ran-a-campaign-based-on-intelligence-security-thats-not-how-hes-governing\/\" target=\"_blank\">notes<\/a>, he had tweeted just a few hours before his dinner with Abe. It would be more surprising, at this point, if Trump\u2019s phone somehow weren\u2019t compromised than if it were.<\/p>\n<p>\u201cWe had this big election where one of the issues was the security of handling classified information, and at the same time we have this cavalier attitude,\u201d says Green. \u201cDo these people really not believe that they are targets?\u201d<\/p>\n<p>If they did, they never would have left the SCIF.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/2017\/02\/trump-north-korea-scif\/\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Brian Barrett| Date: Tue, 14 Feb 2017 00:55:11 +0000<\/strong><\/p>\n<div class=\"rss_thumbnail\"><img decoding=\"async\" src=\"https:\/\/www.wired.com\/wp-content\/uploads\/2017\/02\/SCIF-634808686-660x439.jpg\" alt=\"Trump\u2019s Mar-a-Lago Has a Secure Room? Great! Then Use It\" \/><\/div>\n<p>A recent public display of high-level diplomacy at the president&#8217;s resort should have happened in a SCIF instead. The post <a href=\"https:\/\/www.wired.com\/2017\/02\/trump-north-korea-scif\/\">Trump\u2019s Mar-a-Lago Has a Secure Room? Great! Then Use It<\/a> appeared first on <a href=\"https:\/\/www.wired.com\">WIRED<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[11324,11051,11325,714,152],"class_list":["post-6612","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-mar-a-lago","tag-national-affairs","tag-scif","tag-security","tag-trump"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=6612"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6612\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=6612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=6612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=6612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}