Printable View
I found this article very interesting. Looks like they would have learned from the Deceptive Duo. Guess not. Has anyone heard anything else about this hacking team? I'de like to know if they ever find them. Well. . . enjoy this article.
http://www.atnewyork.com/news/article.php/1377081
Two words. Hell No! I think the deceptive duo made that perfectly clear, and that was just two people! Imagine a whole oranized group going at it.
WAKE UP GOVERNMENT! YOU NEED TO GET YOUR SECURITY UP TO DATE! Call me, i'll help you guys out as best I can.
x
Thats what im afraid of. Just think. . . . if the next Terrorist Attack came via computers. It would bring our great nation to a standstill. Hundreds of plains would crash due to the lack of Tower Control, Systems running Nuclear Weapons could possibly be controled, etc. . . . we would be turned upside down. I dont want to see this happen. Our Government needs to wake up and face the facts. . . OUR SECURITY SUCKS! ! ! They need to be focusing more on beefing up our security then going around arresting illegal aliens that are in the country trying to make a living. Dont get me wrong. . . they should be delt with. . . but we need to get our priorities in order! NO?
Yeah we do. But I don't think they are being pressured enough. The general public has absolutly no idea how insecure the government servers are. I think that if it were exposed there would be more action taken.
US Security does suck, but im not worried about minuteman missiles (our main nukes) being controlled by computer, because they can't be remotely fired. A human spends 12 hours actually strapped into a chair bolted to the floor in front of the controls, and only he/she has the ability to launch. On the other hand, nuclear warheads yet to be attached to missiles have been stolen from us facilities in the past. Hopefully the people in charge in DC will see these posts from an Echelon intercept and get their asses moving on making the necessary changes.
Well, the Deceptive Duo did all they could to expose it. But still, nothing was done to correct it. We are hopeless. Its just a matter of time untill our country is "unplugged". Thoughts of what happens after that scare me to death!
Well to me this looks like the BSA effort to sell dot gov it's latest wares seeing how there is a down turn in the tech sector in general. As in 2/3 of M$ biggest buyers are not going for their new license agreement. Knowing people in dot go in IT and me in the private IT sector none I talk to report anything unsual. I sorry but when a for profit business group sends the gov a waring it is to sell more of their wares that as we all knowin most cases cost $$$ (remember the year 2000 thing) what was it a non event and we all payed big bucks for the BSA oh dire prediction. Sure there will be major attacks in the next 12 months all of them agains M$ products and on-line credit card stuff.
As a start, the government might give the DeceptiveDuo amnesty for all prior "bad acts" and attempt to hire one or both of them to run security checks on critical sites. :deal:
And this would just be a beginning.
Stupidity would be doing nothing.
:fpissed:
I'm sorry but I do not think the Deceptive Duo proved anything other then defacing Web sites. In dot gov usually the web server is considered the box that will get broken, unsually the oldest in the system what is had off those servers may or may not be up to date. And go figure it was dot edu dot gov that designed the system and when they were getting on the servers was for a ligit purpose. Sorry but I simply know to many IT people in dot gov and dot edu systems to really even oose sleep over it. Deceptive Duo will get what they deserve and they did not prove anything cause what they did was already a known fact.
[pong]Syini666[/pong]Quote:
[gloworange]US Security does suck[/gloworange]
United States security does not suck! Good thread RogueSpy. ;) :D ;)
Thanks.
LOL lets see the US invented all this out here and as a gift gave it to the entire world, yes other countries were involved also like the UK but the ones that got the ball rolling were the USA! Now lets say you deface a few hundred or thousands of dot gov web sites. What a wated effort because anything you find exposed is public fluff. Ten again thats what us Americans are all about easy going relaxed hard to anger but if provoked stand in the open and fight for our rights and those of others. Seems I do not recall the US ever hiding behind a god to launch a war, see lots of Americans pissed and angy but don'r send our children to a bus stop loaded with explosives, do not take random lives but in rare exceptions of twisted one person acts. We suck then we may just unplug you from the web or leave the remains for you to battle over while our next generation on networks has been built and is growing every day. We are very secure in the fact we can and have always kicked ass, we have never been defeated we simply width drew from lost causes. Then turn around and assist those same people that say defeated us. Humm we will do what we must
Palemoon? Where are you from? And how old are you? I keep thinking you are using a translator to post here. It sounds like it. :::shrugs::: Just wondering. Good posts. . . but hard to read.
Oh me am American, the post may be a bit disjointed due to a head injury a few years back or the fact I'm from a multi cultural family, or cause I am left handed LOL. Age ah will old as dirt do? Really though am older and had to re-learn much about 10 years ago including much network stuff but I do OK like to see all the smart younger people some a bit off center but hey I am. So 3 languages and several cultures later I end up expressing myself as a total sum of all parts. Nothing is exclusive for me language culture and well English and spelling often my damaged head switches to what is easer. See I did it again damn!
Hmmm. Ok. ;)
Thanks Rogue, guess it comes down to this I read lots of white papers about such matters and even know a top person at a dot edu I work for. I rely upon dot edu's cause the best are at them not cause they make a huge buck but cause they want to make a difference. Try a google on Dave Dietrich one of the for most top web security experts out here, me I listen to him not the .com sell you this people.
I wonder if the US gov/mil have zombies (that they put in) spread accross their networks to be able to retaliate if it ever came to that? (Or would they just order backbones shutdown?)
There's one thing that anoyes me in the article though, they say that fears of y2k proved unwarranted: I disagree: it's because of the fears that people took action and that thus nothing happened, not because the treath wasn't real. The same logic applies to cyberthreats, there's this fear spreading now, which will prompt action so that we don't fall to an attack.
If you think preparing well was worthless because nothing happened, you miss the point. Better be safe than sorry...
Ammo
Good question. Lets ask them. heh
I think the US has a long way to go in security, its not just the gov job its the peoples job as well! sure terrorist could use computer to break into secure site and such but thats not how they operate, using low tech techniques are the best way to hurt the people... lets say the attackers on 9/11 instead of spending $1000s of dollars in flight school used those resources to break into the FAA network an turn off the radars or poisoned the data sent and recieved to the pilots. they want the biggest bang for the buck!!!! i'm not saying terrorist can't or won't use those means, but they tend to use low tech means to hurt and scare the masses.
america wake up alot of areas around airports across the country are insecure( empty lots and such) a shoulder launched missile in the trunk of a car attacking a plane landing or departing and we could be in big trouble again! keep your eyes and ear open security is everyones job!!!
Not sure if that's so much the case, anymore. And I believe that a computer controls the notification to the silos to actually perform the launch. So, in effect, it's the same.Quote:
Originally posted here by Syini666
US Security does suck, but im not worried about minuteman missiles (our main nukes) being controlled by computer, because they can't be remotely fired. A human spends 12 hours actually strapped into a chair bolted to the floor in front of the controls, and only he/she has the ability to launch.
But, to their credit, most of those networks are physically isolated such that "getting in" to the network that controls it is, well... a physical issue, to begin.
Well if one is involved in their community real life then anything unsual is usually noticed. Point being one person can make a difference look what 8 people did 9/11 yep not good change things they did but not in ways they intended.
draziw > yeah, physically getting into a minuteman silo would be 99.9% impossible seeing as they are often designed to take a nuclear blast and maintain integrity! Even the old Nike missile silos had doors that would be very hard to breach w/o serious machinery
Blast from the Past. ;) Enjoy.
ps: thought I would bring this back since its seeming more likely every day.
To the only one who cares about my post:
[shadow]F*** OFF! ! ! ![/shadow]
You know who you are. And so do I. hahaha!
There's a big difference in defacing a website and retreaving "secret resources" (secret in a democracy sounds a bit weird to me, but that's not the point). The people who manage those .gov .mil etc. websites aren't all morons. Many scriptkiddies can deface websites by just watching bugtraq or some other exploit report site. Once they found a 0-day exploit for apache (for example, I don't have any idea what webservers run .gov pages), they can basicly deface a website, put their name somewere, upload an index file with higher priorities. Sometimes you can't just rewrite the current index file, because apache and the firewall isn't the only defence an unix or windows server has, so when you can change webpages, doesn't mean you can get root or even read any other files on the server... erm... So what I ment actually :s: If a brand new exploit is released (with proof of concept etc.) a scriptkiddie needs less time to use it on a .gov website then admin needs to find a patch or even make one him/herself. That way you can never have a 100% secure server and that's why the servering and other crap (I heard missiles somewere) shouldn't be one on system. I don't believe people would be that stupid... right ?