You can’t stop your staff from leaking your dirty laundry to the press

Graham Cluley

Sean spicer thumb

You can't stop your staff from leaking your dirty laundry to the press

Politico reports that White House Press Secretary Sean Spicer is trying to silence leaks coming out of the West Wing:

Upon entering Spicer’s office for what one person briefed on the gathering described as “an emergency meeting,” staffers were told to dump their phones on a table for a “phone check,” to prove they had nothing to hide.

Spicer, who consulted with White House counsel Don McGahn before calling the meeting, was accompanied by White House lawyers in the room, according to multiple sources.

There, he explicitly warned staffers that using texting apps like Confide — an encrypted and screenshot-protected messaging app that automatically deletes texts after they are sent — and Signal, another encrypted messaging system, was a violation of the Presidential Records Act, according to multiple sources in the room.

The phone checks included whatever electronics staffers were carrying when they were summoned to the unexpected follow-up meeting, including government-issued and personal cellphones.

The article continues:

Spicer also warned the group of more problems if news of the phone checks and the meeting about leaks was leaked to the media.

So Spicer tried to crack down on leaks by holding a meeting about leaks warning people not to leak about the meeting about the leaks and then his warning about the leaks was leaked to the media.

So, that didn’t work too well, did it?

You can put all the measures and surveillance you want on to your staff to try to prevent them from sharing your organisation’s dirty laundry, gossip and tittle-tattle to the media… but you can’t wipe their memories. There’s nothing to stop them waiting until they get home, out of your organisation’s reach, and passing on the news then.

My hunch is that although a crackdown on the use of unapproved apps and snooping on staff’s smartphones could unearth where your potential leak might be, it could also breed more resentment amongst others in your workforce which might turn them against you.

I’ve said it before, I’ll say it again. Humans are the biggest asset to your workplace, but they’re also your biggest problem.

Graham Cluley Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes media appearances and is an international public speaker on the topic of computer security, hackers, and online privacy. Follow him on Twitter at @gcluley, or drop him an email.

One Reply to “You can’t stop your staff from leaking your dirty laundry to the press”

  1. The President is going to find it very difficult to control leaks until he commands the respect of his subordinates.

    Regarding 'secure' apps. Neither Confide or Signal is impenetrable because of the inherent vulnerability of the mobile platform, however, if you've got a choice use Signal as it has been independently reviewed.

    Also,

    "You're Donald Trump's sysadmin. You've got data leaks coming out the ass. What to do':"

    https://www.theregister.co.uk/2017/02/27/securing_against_sensitive_data_loss/

    And,

    "Confide: A Quick Look"

    https://www.zdziarski.com/blog/?p=6945

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.