Author Topic: DoD networks getting pwn3d  (Read 1640 times)

0 Members and 1 Guest are viewing this topic.

Offline Kosh

  • A year behind what's funny
  • 210
DoD networks getting pwn3d
http://politics.slashdot.org/politics/07/02/17/1936236.shtml


Anyone remember a couple of years ago about that British guy who hacked it looking for UFO's? I remember listening to his interview on the BBC and according to him the security setup was amatuerish. They used un0updated versions Windows on their servers, and on top of that they couldn't even be bothered to put passwords in the built in Administrator accounts. He said he was able to hack it easily with a couple of applications that were freely available on the internet.

He also said there were many other people poking around in there from many countries including Pakistan, China, Turkey, and a few others. These guys seriously need to get their acts together when it comes to network security.....
"The reason for this is that the original Fortran got so convoluted and extensive (10's of millions of lines of code) that no-one can actually figure out how it works, there's a massive project going on to decode the original Fortran and write a more modern system, but until then, the UK communication network is actually relying heavily on 35 year old Fortran that nobody understands." - Flipside

Brain I/O error
Replace and press any key

 

Offline Flipside

  • əp!sd!l£
  • 212
Re: DoD networks getting pwn3d
Please don't tell me they keep deployment details on a Microsoft Access DB or something....

 

Offline jr2

  • The Mail Man
  • 212
  • It's prounounced jayartoo 0x6A7232
    • Steam
Re: DoD networks getting pwn3d
... What about that guy from Russia in the late '90s IIRC that was hacking into the Treasury with a 386?  That one true?

 

Offline NGTM-1R

  • I reject your reality and substitute my own
  • 213
  • Syndral Active. 0410.
Re: DoD networks getting pwn3d
These guys seriously need to get their acts together when it comes to network security.....

You underestimate them. They understand that the only true security is having no outside connections. Anything else isn't worth bothering with. That's why MILNET exists.
"Load sabot. Target Zaku, direct front!"

A Feddie Story

 

Offline Unknown Target

  • Get off my lawn!
  • 212
  • Push.Pull?
Re: DoD networks getting pwn3d
ngtm1r's right. All the super-sensitive stuff probably isn't even connected to each other. I wouldn't be surprised if some of it was so isolated that each machine would only be connected to one other machine, and that's it.
Although it is disconcerting that they let so much stuff hang out in the open.

 

Offline Herra Tohtori

  • The Academic
  • 211
  • Bad command or file name
Re: DoD networks getting pwn3d
"No networked computers aboard this ship." :nod:

Works for sure... and keeps productivity better. ;7
There are three things that last forever: Abort, Retry, Fail - and the greatest of these is Fail.

 

Offline Mars

  • I have no originality
  • 211
  • Attempting unreasonable levels of reasonable
Re: DoD networks getting pwn3d
Although it is disconcerting that they let so much stuff hang out in the open.

My thinking is that it might even be a ploy

 

Offline jr2

  • The Mail Man
  • 212
  • It's prounounced jayartoo 0x6A7232
    • Steam
Re: DoD networks getting pwn3d
Although it is disconcerting that they let so much stuff hang out in the open.

My thinking is that it might even be a ploy
I was wondering the same thing.  Prolly looking to catch some really good hackers, then they'll blackmail them into service... ;)

 

Offline Herra Tohtori

  • The Academic
  • 211
  • Bad command or file name
Re: DoD networks getting pwn3d
Heh, in any case it can't be considered reliable by the hacky cracky people. Must be frustrating. It could be the real deal, but then again it could just as easily not be. So back to square one.

AS we all know, things are best hidden in public, broad daylight.


...in any case, having un-updated windows systems in use is ridiculous unless they use them as decoy. But then again, it could just be that the DoD of US just is that inane. Or they want us to think that they are inane, and they use it as a decoy. Or, it isn't a decoy but they want us to think it's a decoy, or...:snipe:
 :lol:
There are three things that last forever: Abort, Retry, Fail - and the greatest of these is Fail.

 

Offline Kosh

  • A year behind what's funny
  • 210
Re: DoD networks getting pwn3d
The DoD does seem to use windows for at least some things:

http://seclists.org/politech/2000/Aug/0027.html
"The reason for this is that the original Fortran got so convoluted and extensive (10's of millions of lines of code) that no-one can actually figure out how it works, there's a massive project going on to decode the original Fortran and write a more modern system, but until then, the UK communication network is actually relying heavily on 35 year old Fortran that nobody understands." - Flipside

Brain I/O error
Replace and press any key

  

Offline aldo_14

  • Gunnery Control
  • 213
Re: DoD networks getting pwn3d
The network might be designed by the smartestest engineers on the planet, but it doesn't stop the users being ****wits....