英国超过40个警察部门的高度敏感数据存储在微软Azure云平台上,却面临被美国政府和外国行为体获取的风险。1根据2017年的官方安全评估文件,该平台容易受到"美国政府内部人员"的威胁。1这些数据中包含的部分文件超过"官方"分类标准,可能属于"绝密"或"顶级秘密"等级。1
英国警察声称与微软的合同防止美国当局未经许可访问数据,但专家指出这些保障不足以应对美国《云法案》赋予美国当局的权力——该法允许美国当局访问美国云公司持有的任何数据,无需搜查令。12023年,微软向苏格兰警察部门披露数据"可能离开英国"且"无法保证数据主权"。1微软工程师表示,相关信息"可能被全球数百人查看,其中许多未经审查,许多不是微软直接雇员"。1
英国政府每年在微软软件上的支出至少达19亿英镑,警察部门已将数据全部或部分迁移至微软云平台。1微软方面称从未向美国政府提供英国数据以应对请求。1
Highly sensitive information from more than 40 UK police departments is stored on Microsoft Azure's cloud platform, creating significant security risks, according to a 2017 official security assessment.1 The evaluation identified the platform as vulnerable to threats from US government personnel and foreign actors.1 While UK police forces claim that their contracts with Microsoft prevent unauthorized access by American authorities, experts argue these safeguards are insufficient against the legal powers granted to US officials under legislation such as the Cloud Act, which permits US authorities to access data held by American cloud companies without a warrant.1
Some of the stored files exceed official classification levels.1 UK police departments have migrated all or part of their data to the Microsoft cloud platform.1 In 2023, Microsoft disclosed to Scotland Police that data "could potentially leave the UK" and that "data sovereignty could not be guaranteed."1 A Microsoft engineer acknowledged the scale of potential exposure, stating that stored information "could be viewed by hundreds of people globally, many of whom are unvetted, and many of whom are not direct Microsoft employees."1 The UK government invests at least 1.9 billion pounds annually in Microsoft software.1 Microsoft has stated it has never provided UK police data to the US government in response to requests.1
评论
还没有评论,欢迎留下第一条。