Members of the White House’s National Security Council have been found to use personal Gmail accounts for conducting government business, as reported by The Washington Post. National security advisor Michael Waltz and a senior aide were identified as individuals who used their personal accounts to discuss sensitive information with colleagues, according to the Post’s investigation and interviews with government officials who chose to remain anonymous.
Email is not the most secure method for sharing private information, especially when it involves sensitive data like social security numbers, passwords, or classified government documents. The risk of unauthorized access is high, with multiple potential points of interception for malicious actors. Government agencies typically utilize business-grade email services and have internal communication systems with enhanced security measures. It is concerning that current officials are not taking these precautions while handling important information.
Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation, emphasized the lack of end-to-end encryption in regular email communications, making them susceptible to interception at various stages, including on Google’s email servers.
Moreover, there are regulations mandating the preservation and archiving of certain official government communications. The use of personal accounts for such communication could lead to messages being overlooked or intentionally omitted from official records.
This recent revelation adds to a series of questionable software practices within the executive branch. Previously, high-ranking national security leaders were found to have used the Signal messaging app to discuss military actions in Yemen, even including a journalist from The Atlantic in the conversation. While Signal offers better security compared to public email clients, it is not immune to exploitation, as evidenced by a recent incident involving the app’s own team.
Despite these concerning actions, there have been no consequences for federal employees engaging in risky data privacy practices. NSC spokesman Brian Hughes denied any evidence of Waltz using a personal account for official government correspondence.
The original article can be found on Engadget.
FUENTE
