Is Google Compromising National Security?

Ok, so I'm over at ICANN's website ( http://www.icann.org/committees/dns-...-statement.htm ) trying to get some information on Root DNS Servers.

One of the links I see is "Army Research Laboratory - Aberdeen, MD USA http://www.arl.mil "
<<~~ Clicking on a the link brings you to a page that says:

Forbidden
You were denied access because:
Access denied by access control list.

Now I'm even more curious about what's on this site. At this point most of us would just say oh well, off to the next site, but there's actually a place to turn to. The Big G

I query Google to see the site's contents,( http://www.google.com/search?num=100...il&btnG=Search ) and sure enough, a ton of data? But is this classified information that's being served up on our popular search engines? On the second page of results I see pages with the words "missile simulation." so I'm sure the content really can't be too good.

Using this access control list makes clear that this Army Research Laboratory website doesn't want visitors from networks it doesn't trust. So who's handling our National Security here if webspiders easily index the content and make it public? I think that's pretty sad.

What do you think about the people who are handling our government's websites?


--PuRe

Um I realy cant understand this i mean the goverment says it has all this security and still i can use google to find out what they dont want me to.

Like what Riot? I'm sure whatever is on the internet is there for a purpose and is observed very closely if it is dangerous in anyway.

Ex, did you actually try to open some of the links that popped up on Google? I tried a few of the .mil ones and got a bunch of nothing - 'not found' errors in abundance, zero classified info.

Quote:

---

Originally posted here by |3lack|ce
Ex, did you actually try to open some of the links that popped up on Google? I tried a few of the .mil ones and got a bunch of nothing - 'not found' errors in abundance, zero classified info.

---

Sorry you got a bunch of nothing, I actually got results. When I searched, I was able to download what appears to be some type of C programming code.
http://ftp.arl.mil/ftp/pub/dbcp.c <<~~Taken from the Google search result above. Does that return something for you?


--PuRe

Not that i am stupid but um can any one fill me in if the know what the program is. Wounder if we cold get in any trouble for messing with this .mil site cuz i only use 1 proxy.

That particular program is not the point Riot. What extasy is trying to get at is that blocked websites are able to be accesses through other means of merely doing specific searches on google.

I think that clasified information is stored in offline/internal networks, instead of servers with access to the outside.

Riot, you would not get into trouble for viewing .mil websites. After all, thats what they're there for. You could get into trouble if you're nosy and try to access restricted information.

I'm not a programmer but looks like some form of text processor e-mail service ???

Quote:

---

Wounder if we cold get in any trouble for messing with this .mil site cuz i only use 1 proxy.

---

If it was somethign extremely secret it wouldn't be so unsecured, i wouldn't worry about it !

I know that but i was just worndering if any one knew what it was it says for the V7 and i know a bunch of guys in the marines so i will ask them if they ever heard of the V7

Quote:

---

Originally posted here by PuReExcTacy
Sorry you got a bunch of nothing, I actually got results. When I searched, I was able to download what appears to be some type of C programming code.
http://ftp.arl.mil/ftp/pub/dbcp.c &lt;&lt;~~Taken from the Google search result above. Does that return something for you?


--PuRe

---

Hahaha... attack code, ehh?

Quote:

---

Originally posted here by ;TT
Hahaha... attack code, ehh?

---

C programming code. I don't know it's function.


--PuRe

Quote:

---

http://ftp.arl.mil/ftp/pub/dbcp.c

---

i would think that means PUBLIC :)

http://www.twin-turbo.info/scareynothin.c

A program in C.... BOOO!!!!

Threat to world security right there.

And it did say attack code before you edited it.

Quote:

---

Originally posted here by ©opy®ight
i would think that means PUBLIC :)

---

Yea i guess it would their are some progs that you can downloade from ths site i dont think they want you to cuz goodle has no catch and you cant view the html also the file format is unknown i dont think thay would actualy do any thing but you cond get them and try to figure out what it should do cuz in win you cant run it as lest on my machine.

I ran a few from the programs, they seem to be boot programs, partition resizers, BSD ISO's, some BS-OS in it's beta version, wouldnt install untill i ran fdisk (yeah right) ....forget that site !

For get this post sorry for taking up tour space.

Quote:

---

Originally posted here by ;TT
http://www.twin-turbo.info/scareynothin.c

A program in C.... BOOO!!!!

Threat to world security right there.

And it did say attack code before you edited it.

---

Obviously your one of those hard headed types that doesn't want to get the jist of my post. Please refer to post: http://www.antionline.com/showthread...r=1#post809780


--PuRe

Ever heard of robots.txt? Look it up, it'll stop search engines and the scenario you laid out. Sure there's ways to get secret information... but if you do, I doubt it'll be because a search engine coughed them up for you.

Quote:

---

Originally posted here by ;TT
Ever heard of robots.txt? Look it up, it'll stop search engines and the scenario you laid out. Sure there's ways to get secret information... but if you do, I doubt it'll be because a search engine coughed them up for you.

---

What are you talking about, it's already happening ~~&gt; http://msnbc.msn.com/id/4217665/


--PuRe

Quote:

---

That particular program is not the point Riot. What extasy is trying to get at is that blocked websites are able to be accesses through other means of merely doing specific searches on google.

I think that clasified information is stored in offline/internal networks, instead of servers with access to the outside.

Riot, you would not get into trouble for viewing .mil websites. After all, thats what they're there for. You could get into trouble if you're nosy and try to access restricted information.

---

I was just thinking about that I disagree with you I think it would be on a network accessible by the internet because the internet was invented by the government to link all the bases and building together so now that it is popular why would they stop using it when it could be one of their greatest information moving media also it could be stored on internet2 which is what they are stating to use with IPv6 with the military for testing porpoises.

Could it be the the pages Google is indexing, arn't saposed to be "top secret"? I'm pretty sure the US Army would know how to secure their web servers more than that. Maybe they don't want you to get on the arl.mill site, but the others are public? Who knows... as for the program... I hardly think it's big deal. It came from the public portion of their FTP server, and doesn't do anyt hing important, apperently.

microburn

Riot, thats why I said Internal Networks.....

I do not need to be connected to the internet to move information between computers in my home network...catch my drift?

Quote:

---

The most basic way to keep Google from reaching information in a Web server, security experts said, is to set up a digital gatekeeper in the form of an instruction sheet for the search-engine's crawler. That file, which is called robots.txt, defines what is open to the crawler and what is not. But if the robots.txt file is not properly configured , or is left off inadvertently, a hole is opened where Google gets in. And because Google's crawlers are legal, no alarms will go off.

---

I'm sure anything that is a threat to world security is tightly covered by the military. The leak of personal information - as scarey and threatening it may be to you - is nothing new... looking through a dumpster will spawn just as much information.

Yea like if you didn’t want a search engin to index something you would put it in a file and they would not index it from your site I forget what the file name is called at this moment.

Quote:

---

Riot, thats why I said Internal Networks.....

I do not need to be connected to the internet to move information between computers in my home network...catch my drift?

---

But what i am seaying is that their are us military bases all over the world that need information from each other maby its just me but that would be some long cable to run.

Sending data over clients or through e-mail doesn't get caught by Google or other web crawlers. Encryption, SSL conections, and other various secure transfer methods will get data from base X to base Y without having it posted online.

FYI-

robots.txt shouldn't be considered a layer of security. A custy spider can easily ignore it.

And sensitive info shouldn't be put on / connected to the internet. If .mil messed up and there are sensitive doc's on the net, they probably would have been exploited by now.

Quote:

---

Yea like if you didn’t want a search engin to index something you would put it in a file and they would not index it from your site I forget what the file name is called at this moment.

---

robots.txt has been mentioned a few times already.

Quote:

---

But what i am seaying is that their are us military bases all over the world that need information from each other maby its just me but that would be some long cable to run.

---

Hmm...
You do not need the internet to network computers. And yes, sometimes really long cable is used.

Quote:

---

Originally posted here by Cybr1d
That particular program is not the point Riot. What extasy is trying to get at is that blocked websites are able to be accesses through other means of merely doing specific searches on google.

I think that clasified information is stored in offline/internal networks, instead of servers with access to the outside.

Riot, you would not get into trouble for viewing .mil websites. After all, thats what they're there for. You could get into trouble if you're nosy and try to access restricted information.

---

I'm thinking you are right on when you say classified is stored in offline/internal networks. The government has it's own fiber network setup linking all the major mil installations, any classified info would be on these networks.

Remember, the government has recently removed lots of documents online that were once considered public knowledge, that they felt would help terrorists. So, data and it's classification changes on a day to day basis. Today's classified documents might have actually been onlilne some time ago.


--PuRe

I suggest reading 3rr0r tutotiral : Google as a Hacking Tool

http://www.antionline.com/showthread...hreadid=257512

Quote:

---

Originally posted here by ;TT
Ever heard of robots.txt? Look it up, it'll stop search engines and the scenario you laid out. Sure there's ways to get secret information... but if you do, I doubt it'll be because a search engine coughed them up for you.

---

Robots.txt will stop Google, but that's because Google honours it. Not all search engines do. And if anybody links to a page behind the robots.txt file, it still does no good.

The robots.txt file is kind of like leaving the door to your house wide open, but posting a sign saying "please don't come in here". Not very effective against the more shady types.

To really stop search engine spiders you need links designed to 'trap' them in a slew of endlessly looping links. I'm not a web developer, and don't know exactly how to di it, but I do know that more affirmative action than that file needs to be taken against some web spiders.

Ok, finally comes the lecture on Information Security, as taught to me personally by my beloved Uncle Sam. Now, things might've changed since I got out 12 years ago, but I seriously doubt it.

Regarding all things classified and electronic devices.

Classified information stored on electronic devices are to be isolated from any network. Classified material will not be transferred electronically across a network at any time for any reason. If it needs to be transferred, a secondary storage device (read floppy disk or tape) shall be used, and it will follow normal chain of custody rules. Upon delivery of the classifed information to the new electronic device, the storage device shall be destroyed by erase/rewrite/encrypt procedures (this is done repeatedly), then followed by shredding.

Now given today's age of high speed networking, I'm sure (read as absolutely positive) there's a net that the military/government uses which is completely isolated from public access. Yes, they own their own satellites, phone lines, etc for this purpose. To get into this net you would either have to get onto a military base and hack into their systems, or find a cable and cut into it, or hack the satellite, and the encryption. I promise their skills are better than yours, and I wish you luck in your attempt should you ever decide to do so, but I fully expect you'll be caught and made to disappear should you come even remotely close to succeeding. If some little l337 scriptkiddie comes out and says to you 'hey, I hacked the pentagon,' they're full of it.

I very seriously doubt you accessed anything of any real secrecy or importance to your government on an ftp/pub directory, or on any .mil site, most especially off google. As for the links page you posted, quite frankly I tried 2 links - got zero results, and laughed about it. I got the c-code you posted on the mil/pub site though, and agree that it's something that is probably quite common out here in the public sector, and is unclassified.

Now understand that I was in during the days that the distance a 16" gun could shoot was classified. To this day it still is, and there are no longer any 16" guns in the Navy (the last Iowa class battleship was decommissioned and stricken from the US Navy ship's registry back in the mid 1990's). I can tell you the shell weighed around 2600 lbs... I can tell you it was as long as I was tall... I can tell you it made a crater around 6'deep by 25' around on a dummy shell... and that it went around 35 miles. But the *exact* weight, height, damage, and distance are still locked up in a nice safe classifed documents vault somewhere, or locked into the heads of those who needed to know the information and somehow got it stuck in there.

Nice lecture and all, but the truth has been all branches of military keep sensitive data accessible via public networks, regardless of what you say. Proof (and this is just one of many examples): Read about the Deceptive Duo ( http://www.google.com/search?sourcei...=Deceptive+Duo ), they successfully accessed several .gov and .mil sites, and accessed information that's supposed to be classified.

I don't understand why it's so hard for people to understand that .gov and .mil sites have slipped up and put information that shouldn't be accessible online, available, even if it were just to an internet connected network.


--PuRe

Quote:

---

Originally posted here by PuReExcTacy
C programming code. I don't know it's function.


--PuRe

---

http://ftp.arl.mil/ftp/pub/dbcp.1

Quote:

---

dbcp
is a program for copying data rapidly between devices.
While the primary application is to move data between raw devices such as
tape and disk, it can also be used with pipes.
No special support is required from the operating system;
.I dbcp

---

Read on for more info. Look at the root dir. That is quite old... almost 10 years old...