Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Sensitive U.S. military files accessible on the Net
Robert Lemos, 2007-07-12
Comments Mode:
Sensitive U.S. military files accessible on the Net 2007-07-12
GunMD
They said WHAT?

"At least one subcontractor told the Associated Press that the files were secure because they were on servers not indexed by search engines."

What a load of crap. My house is secure because my house number isn't in the phone book. That spokesperson should be fired. ...

[ more ]  [ reply ]
Sensitive U.S. military files accessible on the Net 2007-07-13
Anonymous (2 replies)
oh yea, if it wasnt a reporter that downloaded those files the person would be in jail, and another statistic on the DOJ's budget. Hey heres an idea, instead of putting the intelligent fucks in jail, how bout learning how to protect your systems, take some of your blame your putting on these kids, a...

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-13
Arko Dhar
well said ! someone has to take the blame and it cant never be the govt. Its because of the prolonged ignorance and biased views towards security that has led them to this shit hole since the time of apes....

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-19
Anonymous
Hacking wasn't involved in this case, so you can get off your soapbox about hackers.

If you read the whole AP article, you'd find that the problem was that these sites were putting FOUO information on anonymous FTP sites. No password (or hacking) required.

The statement from the contractor ab...

[ more ]  [ reply ]
Sensitive U.S. military files accessible on the Net 2007-07-13
Anonymous
I would have to strongly agree with both comments. The US Government's networks are insecure and vulnerable because of the people whom they put in the position of safeguarding the networks. The machines are not vulnerable it's the stupid Systems Administrators and oh I love this one the... and let m...

[ more ]  [ reply ]
Sensitive U.S. military files accessible on the Net 2007-07-13
Anonymous (1 replies)
I work as a sys admin for the government. The problem is many fold, but the #1 issue with security is "politics". The general wants, the captain wants, it's inconvenient, I can't do my job... what is some E5 to do...what he is told by the above, then when there is a problem, it's the E5 who gets pun...

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-15
Anonymous
Diplomacy & Politics = Security Nightmare. If the captain can't figure out how to work around the security measures you put in place then he needs to retire and finish the rest of his days at home reading emails.

There is no Diplomacy in Security.

The comment above yours is also mine don't t...

[ more ]  [ reply ]
Government and Govie contractors slack? Shocking! 2007-07-14
Anonymous
Wait, so you are telling me that govies or govie contractors can't secure their network? Why that's crazy talk. Billing for 8 hours and working 4, why there's just no time in the day to secure anything....

[ more ]  [ reply ]
Sensitive U.S. military files accessible on the Net 2007-07-16
Anonymous (3 replies)
The contracting firm that said "the files were secure because they were on servers not indexed by search engines" should be the one punished and fired.

The bigger question that needs to be addressed from this this incident is whether the government provided the contractor with details on how in...

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-16
Anonymous
yeah that i can believe... they don't security seriously. ...

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-16
CF
I'm the one that brought the subject to the AP's attention. I was passed through 16 federal agencies and more than a dozen contractors. It was only when one contractor posted their FTP log and it revealed downloads from "suspect origins" that I decided to go public.

I am disappointed that the arti...

[ more ]  [ reply ]
Re: Sensitive U.S. military files accessible on the Net 2007-07-19
Anonymous (1 replies)
You said:

"The contracting firm that said "the files were secure because they were on servers not indexed by search engines" should be the one punished and fired."

Unfortunately, that guy was also probably their most technically knowledgeable person. Why else would he be the one evaluating the ...

[ more ]  [ reply ]
Re: Re: Sensitive U.S. military files accessible on the Net 2007-07-20
Harry Potter
No! May be that guy was the most popular guy in the team. In such crappy teams, usually an asshole becomes popular and the person with real brains is treated as an outcast. This is a problem that is very common in large organizations...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus