US CTO Tries To Wean the White House Off Floppy Disks 252
schnell writes: MIT grad and former Google exec Megan J. Smith is the third Chief Technical Officer of the United States and the first woman to hold the position created five years ago by President Obama. But, as a New York Times profile points out, while she fights to wean the White House off BlackBerries and floppy disks, and has introduced the President to key technical voices like Tim Berners-Lee and Vint Cerf to weigh in on policy issues, her position is deliberately nebulous and lacking in real authority. The President's United States Digital Service initiative to improve technology government-wide is run by the Office of Management and Budget, and each cabinet department has its own CIO who mandates agency technical standards. Can a position with a direct access to the President but no real decision-making authority make a difference?
She is an advisor (Score:3)
Re:She is an advisor (Score:5, Funny)
Pretty much the same as any CTO. You're expected to keep things secure and allow the CFO to install dancingPigs.exe at the same time.
Re: (Score:3, Funny)
I am intrigued.
Re: (Score:3)
Ha! We've outed you, mister C-level.
Would you like to subscribe to our newsletter?
floppy disks don't contain silicon ICs (Score:3)
wait... floppy disks are a particularly coarse-grained media, meaning that they are quite likely to survive (in storage) for a very long time. also, they don't contain silicon ICs. does anyone remember the great idea of SD Cards with built-in OSes and a WIFI antenna, and how those have been used as spyware tools? likewise USB sticks could have absolutely anything in them. so i don't think it's such a good idea for the whitehouse to move away from floppy disks.
blackberries on the other hand, i heard a story back in 2007 that the entire email infrastructure at the time ran off of *two* machines (two physical machines). one for the US, one for the rest of the world. i trust that the whitehouse email doesn't go through a single server. that would be... bad.
Re:floppy disks don't contain silicon ICs (Score:4, Interesting)
Not really survivable.
Or more to the point, not any more.
Back in the day, floppies were amazing. Quite pricy but nuless you slid your finger across the surface (later slid the cover open and did the same), or hacked it apart with scissors, they basically worked and retained data very reliably.
They were quite expensive.
Somewhere towards the end of their reign of dominance, more when they started to be pushed out by being too small to be of any use and cheap CD-Rs (not USB back then---it worked like crap) they got super cheap and started to massively suck. Some would work only a few times before conking out.
Re:floppy disks don't contain silicon ICs (Score:4, Insightful)
Back in the day, floppies were amazing [...] they basically worked and retained data very reliably.
Not by today's standards they didn't. Anything remotely important, I would put on at least two floppies. I still need to experience the first USB stick failure.
(Okay, okay, USB sticks may fail too, I know, but not nearly as often as floppies).
Re: (Score:2)
Compared to when?
IFrom what I remember, the downturn happened sometime in the early mid 90s. Before, floppies were -reliable-. I used floppies a *LOT* more than USB disks since I didn't have a hard disk so I used them for literally everything.
And failures were rare.
I've had dead flash disks too, but not nearly as many as floppy failures later on when the price plummeted and the build quality went to crap with it.
Re: (Score:2)
I think you're looking at the past through rose-coloured glasses. I've been using floppies from when I first got my 286
A 286 would have a hard disk, so you'd do a lot of stuff off that. I was thinking of my old beeb which had a 5.25" single floppy drive and an audio cassette adaptor. Every time I wanted to do anything at all, I'd have to load something from the disk, and any time I saved anything, that went to the disk as well.
For this they were used more for local storage than transmitting data between com
Re: (Score:2)
I have two old ones I can lend you to help you out on that. one is 128megs the other is a 1 gig.
Re: (Score:2)
Quite pricy but nuless you slid your finger across the surface (later slid the cover open and did the same), or hacked it apart with scissors, they basically worked and retained data very reliably.
The disk drives for a C64 would wipe floppies. Take a disk out, put it on top of the drive. Put #2 in, #1 is now unusable. It wasn't every drive, but it was a common problem at the time. I had a friend with one. Also, I've seen a USB left in a pocket survive a wash cycle. It wasn't water or weatherproof. I've never seen a floppy work after being dunked in water, though I hadn't tried that much. Floppies are more fragile than USB drives. At least from my experience.
Bad Sectors! (Score:2, Informative)
Floppy disks did not survive in storage or in everyday use. They were an unreliable temporary way to store data. They often developed bad sectors. Those of us around back then will remember people bringing disks to us that they could not longer read files off of, and having to use things like Norton Utilities to try to recover data, which was often as not unsuccessful.
I had a huge number of floppy disks in storage in the 1990s, and copied them to more reliable media - what I could of them - a lot of them ha
Re: (Score:3, Informative)
Re: (Score:3)
Did you check that the drive itself worked? I've seen the drives go bad from long-term disuse, though admittedly that was in an area where the humidity rarely drops below 90% and the ocean is a few feet away, so it was rather hostile to electronics. We used to need to open up the laptops' keyboards and clean all the contacts about every other month. Good luck trying to fix a modern laptop in a similar situation...
Re: (Score:2)
I was able to read all of them, no failures.
At the time I was already backing them up to Zip drives and they are also very reliable.
Re:Bad Sectors! (Score:5, Funny)
I was able to read all of them, no failures.
I think he was referring to the data, not the label on the outside of the disk.
Re: (Score:2)
blackberries on the other hand, i heard a story back in 2007 that the entire email infrastructure at the time ran off of *two* machines (two physical machines). one for the US, one for the rest of the world. i trust that the whitehouse email doesn't go through a single server. that would be... bad.
This has nothing to do with the BlackBerry as a solution and everything to do with the infrastructure they put in place to support them. It can be fixed without changing any BlackBerry.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Static magnetic fields have no affect on humans at all, or most other forms of life. Changing ones have to be running at a silly intensity to do anything, though if you crank them up enough you can jam areas of the brain. It's useful in research for safely probing things without having to open the skull.
Re: (Score:2)
Well understood technologies ... (Score:5, Insightful)
There is a chance that the Whitehouse is using obsolete technologies because that's the way that things were always done. Yet there can be other reasons behind it.
Consider that floppy diskette. Assuming the OS is properly configured, a disk is a disk. Contrast that to a USB flash drive: is it behaving as a flash drive, or is the firmware causing it to behave as something else? Contrast that to a network connection: properly handled physical media has a clear chain of responsibility, while network connections (even internal ones) may be managed by many more people and have more access points. Yes, there are ways to deal with security in such situations. No, they are not foolproof. That's particularly true with high-stakes institutions like the Whitehouse.
Another consideration is the providence of the technology. It is bad enough when you have to go through a single vendor (e.g. Blackberry or Microsoft) or are dealing with contractors. Many modern technologies make things worse by being a service. Products become property of the government when purchased. Contractors can be replaced when contracts come up for renewal, or in the intervening period if terms are violated or appropriate clauses are added. Services are a different issue though, and that's exactly what a lot of modern "technologies" are. Does the Whitehouse want to create a situation where another party has control over their data. Even if they could guarantee the security and portability of the data, it could be difficult to find or create a replacement. Businesses take advantage of this difficulty all of the time, and literally milk the government because of it. In most cases it is because of the cost of complying with government regulations. In the case of services, it could simply be because there is no alternative.
Re: (Score:3)
She complains of having to use a laptop from 2013? WTF? The same goes for the Blackberry, if it's doing it's job - what's the problem that it's not "cutting edge"?
The problem here isn't the technology the White House is using, the problem is a manager without a clue. (Which shouldn't come as a real surprise, as she doesn't appear to have any actual qualifications for the job other than having worked at Google.)
Re: (Score:2)
Is she complaining or the NYT?
Re: (Score:3)
Re: (Score:2)
I don't see the problem. (Score:2)
Comment removed (Score:5, Insightful)
Re: (Score:3)
What's the argument? Not a lot of apps? That's an argument in its favor with the federal government.
Have you ever put a Blackberry owner in a room with a Google or iPhone zealot? Certainly the majority of people use their phone and plenty think it's great without trying to convince everyone they need to switch immediately, but this woman comes from Google's Google Glass division, so of course she'll claim that moving anyone towards Google is an 'upgrade'. I'm certainly interested to hear her explain how moving from, arguably, the most secure phone, to the phone with the most malware is an 'upgrade'.
Re: (Score:2)
Remember that many places are still running older devices (e.g. Bold 9900) with their old operating system (OS 7.x or below). This old OS is what everyone continues to point to and make an example of when complaining about the company and their products. Often this is done in an atmosphere of complete denial at the very existence of their newer OS and products.
I wouldn't be the least bit surprised if the Whitehouse has not yet upgraded their devices and infrastructure from BB7 to BB10.
Some comparable jumps
Re: (Score:2)
There is an Android emulator for Z10 if you need other apps.
If you like your floppy you can keep it? (Score:3)
j/k
To be fair, it depends on the context. A few years ago I was working for a company whose bank still required the large amount of end-of-month transactions for automated processing to be submitted via a 3.5" disk instead of an encrypted connection. Part of the reason why the company eventually switched to a major bank with a decent infrastructure.
Re: (Score:2)
Re: (Score:2)
A major health insurance company still runs token ring in their headquarters. Instead of putting in conduit they put token ring into the concrete. Their upgrade so far has been wifi but they are still buying token ring cards that costs more than the laptop they connect to.
Re:If you like your floppy you can keep it? (Score:4, Interesting)
Think god I had a city college education! The contracting company for IBM hired to fresh out of high school students who thought they were hot stuff because they can unbox a Dell computer without looking at the unboxing diagram on the box. The job was simple: unplugged the token ring cable, plugged in the Ethernet cable, and test the high-bandwidth network video application for 300 workstations. They couldn't bother to read the instruction sheet, plugged the Ethernet cable into the token ring card, which supported both 10BASE2 and twisted pair cables, and didn't test the video application to catch their mistake. I made an extra four hours in OT pay and left the job at 3:30AM in the morning.
Life-long lesson learned: You make more money being the guy who cleans up other people's mistakes.
OTOH - Floppies are safe! (Score:2)
After all, hardly any computers comes with floppy drives anymore ... so unauthorized access is almost completely prevented, better than any software encryption ... :)
Re: (Score:2)
After all, hardly any computers comes with floppy drives anymore ... so unauthorized access is almost completely prevented, better than any software encryption ... :)
I consider myself fairly computer competent but the new mother boards have no floppy access, and the one I have a floppy connection on I can't get a floppy to work, not sure if it's me or the floppy drives being treated so badly in the past they just quit working.
I have lots of 3.5 Amiga floppies (thousands of em) but they take a special floppy as the format is an odd one: 790K not the normal 1.4Meg.
So safe they are.
Re: (Score:3)
Just booted up my Otrona Attache (circa 1982) with 64K of RAM, CPM 2.2 and a pair of DSDD floppy drives.
Still loads up WordStar....
PIP B: = A:*.*
Looks like it's time to mow the lawn.
Re: (Score:2)
Security through obscurity? I doubt there are many motivated espionage groups who can't get hold of a Kryoflux [wikipedia.org] controller.
Hmmmm (Score:2)
Floppy Security Concern (Score:2)
Re: (Score:2)
No (Score:2)
What is the goal of getting off floppies? (Score:4, Interesting)
US Department of Information Technology (Score:2)
Or maybe just an agency under the supervision of a department....but both would require an act of congress. It is the only way to get authority under a CIO position that can affect the entire government through policy...Frankly it should be done from a security aspect alone.
CTO? (Score:4, Funny)
Isn't "CTO" a corporate term? Since when does our republic have corporate leadership?
Screw the floppies, I'm more concerned about the basically open announcement that our government is now fascist, in the most literal sense of the word.
What's Wrong with Government IT (Score:2)
Lack of trusts and/or connections between networks
duplication of services between agencies
Re:Seriously? (Score:5, Funny)
Re: (Score:3, Insightful)
Re: (Score:3)
Re:Seriously? (Score:5, Interesting)
I can see how govt would hate using thumb drives (a rogue thumb drive could mimic any USB device),
The government is large. A demand that any driver be signed by the maker (with the proper key loaded into the government PKI) would eliminate 99% of such attacks. All USB storage must have a key.txt in the root with a valid key.
Problems getting manufacturers going along with it? You are the US government. "Do what I ask, or we'll eliminate your stuff from procurement for someone that does. And if you complain publicly, we'll refuse to buy from anyone who uses your stuff."
Security doesn't happen until someone demands it (and pays for it). The government should be leading the charge, not NSA-style trying to hold everyone back. Double DES is good enough for anyone.
Re: (Score:3)
That's why they need brilliant people in the government.
I can see how govt would hate using thumb drives (a rogue thumb drive could mimic any USB device),
The government is large. A demand that any driver be signed by the maker (with the proper key loaded into the government PKI) would eliminate 99% of such attacks. All USB storage must have a key.txt in the root with a valid key.
USB keys don't contain drivers. The attack is that when you aren't looking your thumb drive presents itself as a Logitech USB keyboard and then proceeds to type in a rootkit or whatever. Since the government probably does buy Logitech USB keyboards the computer already has the signed logitech driver installed. Sure, the drive can only do things that you could do with a keyboard, but you'd be amazed just what you can do with only a keyboard.
Re: (Score:3)
USB keys don't contain drivers. The attack is that when you aren't looking your thumb drive presents itself as a Logitech USB keyboard and then proceeds to type in a rootkit or whatever.
To be an HID, it must announce itself as one (called "driver" even when it just announces itself and requests the default OS driver). To do so, it must authenticate with the host OS. If not, the HID functionality will be disabled.
Sure, the drive can only do things that you could do with a keyboard, but you'd be amazed just what you can do with only a keyboard.
I've been told the problem is when the USB drive is actually a storage device, but leaches power (but no connectivity to the host computer) to broadcast the contents of the device on WiFi to a listening attack machine outside (but in WiFi range). That would be theoretically unde
Re: (Score:3)
I was using boot floppies until about 2006. Currently CDs and USB thumb drives. I can see how govt would hate using thumb drives (a rogue thumb drive could mimic any USB device), but all the optical drives should be fine. Securely erasing them is impossible, so shred & melt...
The reason the government hates thumb drives is because they are very small, and can store LOTS of data. Even in unclassified areas, the government tends not to want them around anything even the slightest bit sensitive. I would be surprised if they're permitted anywhere near the white house, and wouldn't be surprised if most of the computers in the white house are configured to disallow them. A floppy is harder to smuggle, and carries less per disk. Enough floppies to store a gigabyte of data is nearly
Re: Seriously? (Score:3)
Thumb drives have been banned on Air Force networks - even Nipernet - for 4 or 5 years.
Re: (Score:3)
This gets trotted out, but it isn't the reason. Small and stores lots of data is GOOD.
Here's the problems with thumb drives. This is why they can't be trusted:
1)- NO READ-ONLY MODE
Unlike CDs, which are read only without giant hoops to jump through, there's no write-protect switch for thumb drives, or ability to trivially make them read-only.
2)- USB drive, or viral keyboard?
Nothing inside a USB drive can make sure it's actually a damned USB drive. An infected CD won't run without autorun, but an infecte
Re: (Score:2)
And I should clarify that by "infected" I don't mean just software, like a boot sector virus. I don't think a commercially purchased USB stick can act like a keyboard via viral infection (though the fact that this is even theoretically considerable is a flaw too), but a custom hardware piece can absolutely do this.
Re: (Score:2)
1)- NO READ-ONLY MODE Unlike CDs, which are read only without giant hoops to jump through, there's no write-protect switch for thumb drives, or ability to trivially make them read-only.
That's a very good point. Floppy disks had write protect tabs, and the 3.5" ones had a little write protect slider switch. I don't know why thumb drive manufacturers don't include a similar feature on their drives. I think there'd be a real market for such a thing.
Re: (Score:3)
The following fundamental security features are missing:
IDE/SATA/SAS/USB: Write protection, physical.
IDE/SATA/SAS/USB: Write light (NOT read/write light, access light, or "I have power" light) with minimum duration of half a second per write
USB: Physical switch to force mode (media only, keyboard/mouse only, etc. on a given physical USB switch)
Re: (Score:2)
I'm still using boot floppies, but they're virtual and mounted via an HP ILO... Not touched an actual floppy since, no, I can't remember when. They were great until you got pocket fluff/grit behind the gate and transferred it unto the drive. SD cards are a suitable replacement, though easily lost and are perhaps on par bad block wise.
One thing we should commend though, well done on keeping your files small enough to fit on floppies. That's pretty much impossible after a few revisions of a Word document afte
Re: (Score:3)
I went back to school to learn computer programming on a part-time basis from 2002 to 2007. Assignments were turned in on floppies for the first few years. Emailing assignments and online classes became common towards the end. I turned in my final project -- creating an XML parser from scratch in Java without using any existing XML APIs -- on a CD because the source code, executable and documentation file were too big to email as a zip file. After five years of attending classes while working full-time, the
Re: Seriously? (Score:2)
Re: (Score:2)
Re: (Score:2)
I went to San Jose State University for a year before I got kicked out and stuck with a $2,500 student loan for ten years. I spent my scholarship money on setting up a Wildcat! BBS to be the beginning of my online media empire. And then something called the Internet became really big in 1995. I was a dot com bust before the dot coms existed.
Uncle Sam picked up the tab to learn computer programming with a $3,000 tax credit after the dot com bust in 2001. I made a successful career transition from being a vid
Re: (Score:2)
USB is less secure (Score:2)
I think sneakernet floppies are a good idea (Score:3, Interesting)
For a security sensitive place, like the US govt, I think lack of networking, and using floppy disks to transfer files is a good thing. It is harder to sneak out large amounts of data undetected. Doesn't the Kremlin use typewriters now?
Comment removed (Score:4, Informative)
Re: (Score:2)
Re: (Score:2)
Unlike printers, every typewriter has its own individual pattern of type so it is possible to link every document to a machine used to type it.
That's a good point.
Re:I think sneakernet floppies are a good idea (Score:4, Interesting)
How Delisle spied [www.cbc.ca]
Information presented at Delisle's bail hearing detailed how Delisle would browse for material on the secure computer at Trinity, save it in the notepad feature, then transfer it to a floppy disk drive. He would take the floppy out of the secure computer, transfer it to an unsecure system and make a USB copy.
Re: (Score:2)
Nonsense. All they need to do is label the floppies accordingly, and all manner of fun could be had.
"We've lost our 'WMDs.'"
"'North Korea' has proven incompatible with current reforms."
The jokes write themselves.
Re: (Score:3)
Re:From the summary (Score:5, Insightful)
Exactly that and the article is full of bullshit. It mentions floppy disks, nowhere it is explained where they are still using them and for what purpose. It may be a marginal usage and for good reasons as well or it may be wide spread and completely idiotic. Nobody can judge from the article, the floppy disk is mentioned in the beginning and the end of the article. For the BlackBerries, there is currently new models and I don't see why they should switch to something else given the security required. Perhaps being a former exec from Google she is a little bit in conflit with the interests of her former employer.
What's the point about a 2013 laptop? I am very sorry, but as a CTO she doesn't need the latest technology for herself to enjoy, left this to the staff that really need it.
Last thing, a CTO with background in mechanical engineering and no real experience in IT, since she was heading a research division at Google, not the IT department. I am not sure this nomination was a good one. There is many other women better qualified for the job out there. With her background, if I was a CIO or CTO of another government division, I am not sure I would embrace everything in her vision.
Re: From the summary (Score:2, Informative)
I worked at the executive office the president and I never saw a floppy used on any of the computers that were connected to any of the networks (unclassified and several classified).
Blackberries are still common, but you had the option of using your personal device with an app that kept the EOP data segregated. The IT folks were testing newer devices to replace the BBs and the switchover is supposed to be soon.
Overall, I did not find the IT outdated. They were not completely cutting edge, but I think if you
Re: (Score:2)
Worked 10 years contracting for a government agency. I don't think I ever saw a floppy disk- not even once.
Re: (Score:2)
Until they put a Write Protect on thumb drives my diagnostics boot from Write Disabled media, either optical or a floppy in a USB drive. Practice safe computing. I have a punch to remove the write tab from floppies.
Re: (Score:2)
Never - but that's completely irrelevant to the actual question at hand: how often did disks in use (either read only for software or read/write for data) fail? Plenty. By about 1985 or so I was already in the habit of working from copies of my 'install' disks and routinely backing up my working (data) disks because of these failures.
Re:Floppy bad reputation undeserved (Score:5, Informative)
Did you know that for $30 you can get a floppy-to-USB device?
It's the size of a floppy drive, installs in a floppy bay, plugs up to the floppy and power connectors, and provides a USB port, a couple of buttons, and a numeric display.
You plug in a USB stick, use the buttons to select which diskette image you want to use, and it presents it to the host machine like a floppy disk.
You often see them advertised for Roland keyboards, but they should work with most floppy applications.
Re: (Score:2)
Remeber, this was the mainstream distribution media for software for ~30 years (how often did you have to return original SW due to a bad floppy?). It only started to go down hill after the push to obsolete the floppy by Apple. By this point, it was just a race to the bottom and a checkmark option offered by the x86 PC manufacturers.
I remember having to send a bunch of floppies with WordPerfect for Dos back to WordPerfect.... But that wasn't due to a bad floppy, well it was, but not due to unreliability... It was due to WordPerfect being shipped from the factory with the Jerusalem-B virus on it.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Reassemble it better than it originally was, and still have parts left over.
In the snow.
Re: (Score:3)
Re: (Score:2)
It the motorcycle racing world, we called that 'adding lightness'.
Re: (Score:3)
Re: (Score:2)
You can still get motherboards with floppy connectors, though you have to shop around a bit.
Usually not 'gamer class' boards, but some workstation and server boards have 'em.
Alternately, you can use an IDE or SCSI floppy drive, though those are getting hard to find too. (And they're all old.)
Re: (Score:3)
My motherboard (a bit over two years old, gamer-targeted) has the option to boot from USB floppy drive, but I don't believe it has actual headers for a floppy interface. I'm not sure it even has IDE, though. It apparently thinks that 12 SATA3 and 6 SATA2 connectors is enough... well, and a bunch of USB ports and headers, including USB3.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
All of the FBI's case files are stored on 8" floppy and used with some type of CP/M workstations connected to a PDP/11.
There was a push a few years back to modernize the FBI's system, but the controactor ran over budget by something like 100+ million dollars, and they eventually scrapped the whole thing. FBI is back to 8" floppies again.
Not a troll, and I don't know if they ever modernized their systems yet. Probably get their 8" floppies from the same place the Air Force command get them (government warehouse filled floor to ceiling with 8" floppies guarded by snipers and attack dogs).
I can see this happening to the FBI, them using 8" floppies to start; having such a stock pile or library of them they continued to use them from whoever still sales them.
To transfer a vast amount of data from 8" floppies that at the most have just over 1 Mbyte storage http://en.wikipedia.org/wiki/L... [wikipedia.org] would be a nightmare come true.
I can see the concerns of USB drives if autoplay isn't disabled, and other safe guards.
The really odd thing is the treasure department was reference for: ToolsTechniquesProcedu
Re: (Score:2, Troll)
Well, I realize this is going way off topic, but previous executive and management experience/training has not been an indicator of being an effective US President (or good one, whatever the definition of that is). Example number one: G W Bush -- Harvard MBA, campaigned to "put a CEO in the White House", governor of Texas for two terms -- none of that seemed to help much when he hit the presidency. I know, bringing up Bush when discussing Obama's failings is a new kind of Godwin's law, but in this case t
Re: (Score:2, Troll)
The guy elected previously tanked a baseball team and multiple oil companies. He was voted for by all the people who didn't vote for Obama.
By your logic (or rather, lack thereof), no one should be "allowed" their right to vote.
Re: (Score:3)
Citations, please.
Re: (Score:2)
http://lmgtfy.com/?q=george+w+... [lmgtfy.com]
Was that so hard?
Re:The most technically-advanced Presidency... (Score:4, Informative)
Traditional Republican style, welfare for the rich. A millionaire made milions more off the taxpayers because he got a "free house" but God forbid we let a poor person stay in a state home for a while to get back on their feet after personal problems.
Re: (Score:2)
Re: (Score:2)
I finally got to the (current, temporary) end of the the comment page on this article, and I find this particular comment somewhat ironic, given that it seems like about 80% of the comments about floppies have been pro-floppy, anti-change-for-change-sake, "maybe there's a very good reason to use floppies in this case."
It may be that most geeks seem to think that tech should be bought every six months, but certainly most Slashdot commenters seem to think otherwise (and, in general, are prone to being luddite