FinanceTechNews.com » Lessons from TSA’s redaction debacle

Lessons from TSA’s redaction debacle

December 22, 2009 by Valerie Helmbreck
Posted in: In this week's e-newsletter, Information security, Latest News & Views

When Transportation Security Administration officials recently posted a manual online, they thought they’d hidden secrets about airport security well. Turns out whoever did the posting could use a lesson in redaction.

The document was posted to a public site as part of a contract bidding process. Info about passenger screening, checking for weapons and other confidential security-related items were supposed to be removed. But rather than actually remove the text, TSA just covered it with black boxes.

Computer savvy folks were able to read the manual and its security process details, Computerworld reports.

The TSA’s mistakes offer up a grim reminder to anyone who isn’t well versed in the complexities of electronic document redaction, the art – and science – of blacking out information that should not be seen.

A big problem with redaction: Few folks understand how it works.

If you’re redacting hard copy, you can take a permanent, black magic marker and cover the data or text with bold strokes. Not on digital text.

The text may not be viewable, but it can be indexed, which makes it searchable and simple to retrieve by copying and pasting blacked-out portions to another document.

Also, the metadata that’s embedded in documents isn’t disturbed by blacking out text. It’s still in the document and can be retrieved.

The key to redacting information so that it can’t be unearthed? Remember these rules:

  1. Never use word processing for redaction. Even Adobe’s Professional Edition might not be safe. Keep document creation and redaction separate, and
  2. Use strong, automated redaction tools that not only search and eradicate text but also its metadata.
  • Share/Bookmark

FinanceTechNews.com delivers the latest Finance news once a week to the inboxes of over 150,000 Finance professionals.

Click here to sign up and start your FREE subscription to FinanceTechNews!


Tags: ,


2 Responses to “Lessons from TSA’s redaction debacle”

  1. KP Says:

    “If you’re redacting hard copy, you can take a permanent, black magic marker and cover the data or text with bold strokes.”

    That’s not sufficient for anything highly confidential, either: you’d have to then photocopy the blacked out pages and release the photocopies; it’s the only way to ensure that NONE of the text could be read through the marker–especially by sensitive optical scanners.

    I would think that lesson would have taught anyone used to redacting hard-copies that you have to be extra-careful and they would have applied that knowledge to redacting soft-copies and research it.

  2. Anthony Says:

    Organizations seeking fast, reliable and proven redaction software to securely remove sensitive information should visit http://www.rapidredact.com

    RapidRedact is a redaction tool which offers the power and flexibility that organizations need to ensure that redaction projects are finished on time and with complete confidence that redacted information is permanently removed.

Leave a Reply


advertisement

More from this week's e-newsletter



Whitepapers



advertisement