https://arstechnica.com/security/2017/02/secure-trump-website-defaced-by-hac... Meanwhile, Trump's multiple security faux-pas triggers call for House investigation Representative Ted Lieu, a congressman from Los Angeles County, California, led fourteen other House Democrats on Friday in urging the House Government Oversight Committee to investigate "troubling reports" of President Donald Trump's apparently poor security practices and the potential danger to national security posed by them—including his continued use of an unsecured Android device to post to Twitter, discussion of sensitive information (including nuclear strategy) in the restaurant at his Mar-A-Lago resort, and leaving classified material unlocked while visitors were in the Oval Office. In a letter to Oversight Committee chairman Jason Chaffetz and ranking Democratic member Elijah Cummings, the fifteen representatives wrote:
Referring to the complex problem of cybersecurity, President Trump recently said in an interview, "I’m not sure you have the kind of security that you need." We fully agree—which is why we are writing to request that the House Oversight and Government Reform Committee hold a hearing into troubling reports that the President is jeopardizing national security by egregiously failing to implement commonsense security measures across the board, from using an insecure, consumer-grade Android smartphone to discussing nuclear strategy openly in a dining room at his Mar-a-Lago Club in Florida. Cybersecurity experts universally agree that an ordinary Android smartphone, which the President is reportedly using despite repeated warnings from the Secret Service, can be easily hacked.
Lieu and the other signatories of the letter expressed concern that Trump's Android device, "most likely the Samsung Galaxy S3," is particularly vulnerable to attack, and that someone could alter the information the President viewed on it—which could "have a huge impact on his beliefs and actions." They also feared that someone could gain control of his Twitter account, "causing disastrous consequences for global stability," or use it as a listening device to pick up sensitive conversations. Also cited by the letter were photos from a recent White House visit by Intel CEO Brian Krzanich that showed a key still in the lock of a bag for classified material on Trump's desk. The photo was called out by Senator Martin Heinrich of New Mexico in this Twitter post: Additionally, Lieu and the other representatives expressed concern over the continued use of outside e-mail accounts hosted by the Republican National Committee, and compliance with federal records law. "Reports indicate that a political e-mail system used by senior White House staff was hacked in December by a Russian intelligence agency, yet again raising the prospect of the White House being monitored or influenced by unfriendly powers," Lieu and the others wrote. Federal law requires that all e-mails for official business on an outside e-mail system be forwarded or copied into a government e-mail system within 20 days. The letter calls for the Oversight Committee to look into whether the President is using an unsecured device, whether Trump and the White House staff have been properly briefed and trained on both information security and operational security, and if "the President and the Office of the President [can] ensure that there are no missing e-mails, communications, and technological exchanges—in other words, can they confirm they are not actively being monitored?" With links: https://arstechnica.com/tech-policy/2017/02/trumps-apparent-string-of-securi...