Lawmakers seek to stop reposting of TSA security document
House Homeland Security Committee members want DHS head to examine legal options
Computerworld - Several lawmakers are asking Department of Homeland Security (DHS) Secretary Janet Napolitano to examine if any legal remedies are available to stop Web sites from reposting a recently leaked Transportation Security Administration (TSA) security manual.
In a letter addressed to Secretary Napolitano on Wednesday, members from the House Committee on Homeland Security expressed concerns over the "repeated reposting" of the security manual on multiple Web sites and asked her to clarify if the sites could be compelled to take it down.
The lawmakers also demanded to know if the DHS was considering new rules to prohibit such posting in future and if criminal penalties are "necessary or desirable to ensure such information is not reposted in the future."
The letter seeks a response from Napolitano's office by Dec. 22 and is signed by Reps. Peter T. King (R-New York), Charles Dent (R-Pennsylvania) and Gus Bilirakis (R-Florida). A copy of the letter was originally posted on the Secrecy News Web site.
The letter is the latest indication of the growing concerns stemming from the inadvertent exposure recently of an improperly redacted document containing highly detailed information on the passenger screening procedures used by TSA officials at U.S. airports.
The Standard Operations Procedures manual was posted as part of a TSA contract solicitation process on the Federal Business Opportunities Web by a contract employee.
The manual provided detailed information on a range of TSA screening procedures at over 450 airports and included data on calibrating magnetometers, explosives trace detection and identifying law enforcement credentials.
It was discovered last Sunday by a blogger who posted links to it on his Web site and sent a copy of it to anti-secrecy site Cryptome.org.
The original document has since been removed by the TSA. But numerous copies of it have become available on the Web, including on whistleblower site Wikileaks.org, and news media sites such asABC News.
Even if such sites could somehow be compelled to take the documents down it is unlikely to make any difference or stop the document from being disseminated anyway. Wikileaks alone for instance, has already made the document available from various mirror sites located in Sweden, Finland, Tonga and elsewhere. Cryptome.org meanwhile has been offering a direct download of the 1.8MB document since Dec. 8.
The DHS has launched an investigation into the breach as has the TSA. Several employees have been placed on administrative leave for their role in the incident and it is very likely that more heads will roll as the investigation unfolds.
Read more about Privacy in Computerworld's Privacy Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Privacy White Papers
- A Road Map for Best Practice Social Media Acceptable Use Policy
- Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
- Data Protection and Disaster Recovery with iSCSI and VMware
- Get this on demand webcast now
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Privacy Webcasts