Pentagon Halts Chinese Coders Affecting DOD Cloud Systems (defense.gov)
- Reference: 0178932478
- News link: https://tech.slashdot.org/story/25/08/29/1928258/pentagon-halts-chinese-coders-affecting-dod-cloud-systems
- Source link: https://www.defense.gov/News/News-Stories/Article/Article/4288992/pentagon-halts-chinese-coders-affecting-dod-cloud-systems/
> Defense Secretary Pete Hegseth said the Pentagon has [1]halted a decade-old Microsoft program that has allowed Chinese coders, remotely supervised by U.S. contractors, to [2]work on sensitive DOD cloud systems . In a digital video address to the public posted yesterday, the secretary said DOD was made aware of the "digital escorts" program last month and that the program has exposed the Defense Department to unacceptable risk -- despite being designed to comply with government contracting rules.
>
> "If you're thinking 'America first,' and common sense, this doesn't pass either of those tests," Hegseth said, adding that he initiated an immediate review of the program upon learning of it. "I want to report our initial findings. ... The use of Chinese nationals to service Department of Defense cloud environments? It's over," he said. Additionally, Hegseth said DOD has issued a formal letter of concern to Microsoft, documenting a breach of trust, and that DOD is requiring a third-party audit of the digital escorts program to pore over the code and submissions made by Chinese nationals. The audit will be free of charge to U.S. taxpayers, he said.
[1] https://www.defense.gov/News/News-Stories/Article/Article/4288992/pentagon-halts-chinese-coders-affecting-dod-cloud-systems/
[2] https://it.slashdot.org/story/25/07/25/1613250/microsoft-used-china-based-support-for-multiple-us-agencies-potentially-exposing-sensitive-data
The real question is? (Score:2)
Who thought this was a good idea and what else have they touched?
Everything touched must be considered 100% compromised..
must be getting desperate (Score:2)
Doing something that actually makes sense instead of just effectively committing arson? They must be desperate to look like they are helping
Better make sure there are good backups! (Score:2)
Before disabling the users active directory accounts! lol ;)
Hopefully not just focusing on CCP coders (Score:2)
Any non-US person(and H1B) should be off limits to all sensitive government and critical infrastructure systems.
Re: (Score:3)
> Any non-US person(and H1B) should be off limits to all sensitive government and critical infrastructure systems.
Reminds me of Elon Musk facing the conflicting requirements from the Biden administration that SpaceX was to hire some percentage of immigrants/aliens or face punishment, and the requirement from the DOD/DOE/etc. that prohibits non-citizens from having access to technology concerning anything that could be remotely considered a weapon delivery system like a rocket that can reach orbit. SpaceX chose to hire only citizens and so faced fines for it. Musk was not pleased about this, and stated such publicly.
maybe we need more H1Bs? (Score:2)
As the job market keeps getting smaller ant the layoffs keep getting bigger maybe just as a cherry on top we could allow more H1B visa?
Holy crap! (Score:3)
Pete Kegsbreath said something sensible and did something useful! Must have been a mistake...
Re: (Score:2)
Even a broken clock is right twice a day.
Re: (Score:3)
> Pete Kegsbreath
I'll never be able to remember his real name now.
Handing Hegseth a free W (Score:2)
The system hates the American worker so much that they vetoed hiring cleared Americans to do the coding.
The system hates the American worker so much that they vetoed hiring cleared Americans to oversee uncleared Americans to do the coding.
The system hates the American worker so much that ONLY hiring cleared Americans to oversee foreign nationals working remotely was considered acceptable. And only, I'm sure, because they couldn't talk everyone out of needing cleared Americans to do the supervising. That w
Good (Score:2)
Sometimes you have to outsource or rely on subcontractors to get an actual expert involved, there is not always an expert on [whatever] on staff.
Relying on subcontractors of an outsourced service to perform day-to-day work is bad planning.
Relying on foreign subcontractors of an outsourced service for something that is potentially of national security interest is holy-shit stupid.
It's kind hard to argue against this (Score:3)
Unless there's something they're not telling us, having a hostile foreign government (which is probably what's happening) have access to your sensitive data is a bad thing(tm). I'm curious who is going to think this is a bad thing(tm)