Wednesday, December 10, 2008

Indian Prime Minister's Office Warns Officials Not to Use Gmail After Chinese Hack

Via ITExaminer.com -

The Prime Minister’s Office (PMO) has instructed its officials not to use Google mail for official communication after Chinese hackers accessed the PMO’s internal networking systems.

The Chinese also hacked the Ministry of External Affairs’ internal communications network, and the National Informatics Centre (NIC) also fell victim to an attack supposedly aimed at the National Security Council.

The Chinese hacked the communication networks of officials and accessed emails used by the officials to communicate policy and decisions to other ministries and sectors of the government. The cyber attacks are believed to have been launched from dial-up internet connections in China. Up to four cyber attacks by Chinese hackers are reported on Indian servers daily.

The NIC traced the IP addresses used for attacking the PMO’s communication networks to China. They found that Google mail or Gmail was the main target of the Chinese hackers. Following this, the PMO has instructed its officers and staff to refrain from using Gmail for official communication.

The incident has raised doubts about the efficiency of the cyber security systems used by the government for communication. Although important communications within the government are encrypted and secure, Chinese hackers are reportedly using programs and designing software capable of decrypting the system and evading the security systems installed.

The National Technical Research Organisation (NTRO) is coordinating with the NIC to encrypt official communication and firewall networks against hackers. However, the agency is unable to hire the best talent in the country due to limited resources. The government is supposedly focusing on eliminating the most hacked mail service instead of focusing on strengthening cyber security.

--------------------------------------

I think this is good advise in general...why people use Gmail for government business is way beyond me.

2 comments:

  1. People use gmail for "official" business for the same reason that people use gmail for "unofficial" business: it is more useful to them than the alternatives.

    If the official/secure option isn't the most compelling option from a features standpoint also, people will avoid it or work around it. You have to sugar coat the medicine. For proof, see Windows Vista.

    -Dino

    ReplyDelete
  2. Very true. But you know as well as I that the secure option is rarely the easy option...security isn't exactly easy or fun to use on a daily basis.

    So, I suspect that the lack of security education is playing a role in this as well.

    But allowing Google to index (and the ability to read) your official government business sounds like a risk that no nation should take...luckily Google doesn't do that...or do they? lol

    ReplyDelete