Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
The first fallout from Cybergate
Mark Rasch, 2004-02-09

Did Republican staffers commit a crime by clicking on the "My Network Places" icon to access Democratic memos?

Comments Mode:
The first fallout from Cybergate 2004-02-10
Roger (1 replies)
The first fallout from Cybergate 2004-02-11
Anonymous (2 replies)
The first fallout from Cybergate 2004-02-10
Elc0chin0 (1 replies)
The first fallout from Cybergate 2004-02-11
The Sureal EXperience
The first fallout from Cybergate 2004-02-12
El C0chin0 <mr.nasty@ix.netcom.com> (1 replies)
The first fallout from Cybergate 2004-02-13
Chris Anonymous
Not the first Cybergate in the USA 2004-02-13
J.D. Abolins
Reading the Cybergate item brought back memories of an incident in New Jersey back in the late 1980s. See the second news item at

My recollections...
In the NJ State Legislature, a Republican staffer accessed the supposedly separate file area used by the Democrats and got access to various documents. Eventually, it was discovered and became a messy fray. The Democrats wanted to throw the book for unauthorized access. The Republicans countered by showing info obtained by the "hack" that showed illegal use of state employee time for campaigning. The who matter fizzled out.

Last I heard of the matter, an author of a 2600 article used a samurai analogy for the staffer. A bit overdone but unintentionally funny.

From the little bits and pieces I have gleaned about the incident, it appears that poor configuration of a file server was a big part of the problem. It may well been that the only security was the level of "gentlemen's rules" between the two political parties that nobody would ever navigate over their side of the directory tree and over into the other side. Not a good bet. (This is just a speculation for now.)

J.D. Abolins

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/219/24968#24968
Illegal Access vs. Pubic Disclosure 2004-02-13
Anonymous (1 replies)







 

Privacy Statement
Copyright 2009, SecurityFocus