Get the latest tech news
A Fork in the Road: Is Federal Employee Privacy Compromised?
In this interview, I speak to a systems security specialist who found privacy problems surrounding the HR@opm.gov email servers
Late last night, I entered into a discussion with Kel McClanahan - the lawyer currently suing the Office of Personnel Management on behalf of two employees who believe their privacy was breached. Additionally, the security certificates associated with the original on-premises mail servers no longer functioned when the data was transferred to the cloud, which could explain the reason that early tests of the HR@opm.gov email bounced back when replied to. So while there is evidence that the entire operation surrounding HR@opm.gov was rushed, sloppy, and likely engineered by a small team of three or four people outside the agency, the much bigger problem is that while those subdomains were public, OPM email servers were compromised.
Or read this on r/technology
