Windows Vista Forums
Vista Forums Home Join Vista Forums Tech Publications Windows 7 Forum Vista Tutorials Webcasts Tags

Welcome to Vista Forums we are your forum for Windows Vista help and discussion. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista General

MSFT Security and UAC: Huge Client US State Dept Hacked

Update your Vista Drivers
Reply
 
Thread Tools Display Modes
Old 08-01-2006   #1 (permalink)
Chad Harris
Guest


 

MSFT Security and UAC: Huge Client US State Dept Hacked

What you won't find at MFST Press Pass or in a Wagner Edstrom Press Release
for MSFT:

*(The New York Times is a Small Newspaper from a Small Rural Town Outside
Seattle called New York City)*

How UAC and MSFT Security Works on the Ground:
http://www.nytimes.com/2006/07/12/wa...gewanted=print

From the Company who brought you 30 Security Blogs on MSDN and Technet and
who brings you UAC.

UAC Team Blog--Read posts from the archives--they are screenshot in detail;
Scroll Down; Click on the Archives and previous recent dates.
http://blogs.msdn.com/uac/

I have seen no blogging on MSFT's huge client the US Government's State
Department being hacked on any of many security blogs I ck out on MSDN and
Technet's sites.



July 12, 2006
Computer Hackers Attack State Dept.
By THE ASSOCIATED PRESS
WASHINGTON, July 11 — The State Department is recovering from large-scale
computer break-ins worldwide over the past several weeks that appeared to be
directed at its headquarters and at offices dealing with Asia.

Investigators believe hackers stole sensitive information and passwords, and
implanted “back doors” in unclassified computers to allow them to return,
said officials familiar with the hacking. They spoke on condition of
anonymity because of the delicacy of the intrusions and the resulting
investigation.

The break-ins and the department’s response severely limited Internet access
at many locations, including some headquarters offices in Washington, the
officials said. Nearly all Internet connections have been restored since the
break-ins were recognized in mid-June.

Asked what information was stolen, a department spokesman, Kurtis Cooper,
said, “Because the investigation is continuing, I don’t think we even know.”

Employees said the hackers appeared to hit computers especially hard at the
Bureau of East Asian and Pacific Affairs.





My System SpecsSystem Spec
Old 08-01-2006   #2 (permalink)
Intel Inside
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

That security infringement is so serious they should upgrade to Linux.


Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
> Release for MSFT:
>
> *(The New York Times is a Small Newspaper from a Small Rural Town Outside
> Seattle called New York City)*
>
> How UAC and MSFT Security Works on the Ground:
> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>
> From the Company who brought you 30 Security Blogs on MSDN and Technet and
> who brings you UAC.
>
> UAC Team Blog--Read posts from the archives--they are screenshot in
> detail;
> Scroll Down; Click on the Archives and previous recent dates.
> http://blogs.msdn.com/uac/
>
> I have seen no blogging on MSFT's huge client the US Government's State
> Department being hacked on any of many security blogs I ck out on MSDN and
> Technet's sites.
>
>
>
> July 12, 2006
> Computer Hackers Attack State Dept.
> By THE ASSOCIATED PRESS
> WASHINGTON, July 11 - The State Department is recovering from large-scale
> computer break-ins worldwide over the past several weeks that appeared to
> be directed at its headquarters and at offices dealing with Asia.
>
> Investigators believe hackers stole sensitive information and passwords,
> and implanted "back doors" in unclassified computers to allow them to
> return, said officials familiar with the hacking. They spoke on condition
> of anonymity because of the delicacy of the intrusions and the resulting
> investigation.
>
> The break-ins and the department's response severely limited Internet
> access at many locations, including some headquarters offices in
> Washington, the officials said. Nearly all Internet connections have been
> restored since the break-ins were recognized in mid-June.
>
> Asked what information was stolen, a department spokesman, Kurtis Cooper,
> said, "Because the investigation is continuing, I don't think we even
> know."
>
> Employees said the hackers appeared to hit computers especially hard at
> the Bureau of East Asian and Pacific Affairs.
>
>
>
>



My System SpecsSystem Spec
Old 08-01-2006   #3 (permalink)
Kerry Brown
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

It's interesting but hardly on topic for a Vista newsgroup. It is more
suited to microsoft.public.security.

--
Kerry
MS-MVP Windows - Shell/User
www.VistaHelp.ca


Chad Harris wrote:
> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
> Release for MSFT:
>
> *(The New York Times is a Small Newspaper from a Small Rural Town
> Outside Seattle called New York City)*
>
> How UAC and MSFT Security Works on the Ground:
> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>
> From the Company who brought you 30 Security Blogs on MSDN and
> Technet and who brings you UAC.
>
> UAC Team Blog--Read posts from the archives--they are screenshot in
> detail; Scroll Down; Click on the Archives and previous recent dates.
> http://blogs.msdn.com/uac/
>
> I have seen no blogging on MSFT's huge client the US Government's
> State Department being hacked on any of many security blogs I ck out
> on MSDN and Technet's sites.
>
>
>
> July 12, 2006
> Computer Hackers Attack State Dept.
> By THE ASSOCIATED PRESS
> WASHINGTON, July 11 — The State Department is recovering from
> large-scale computer break-ins worldwide over the past several weeks
> that appeared to be directed at its headquarters and at offices
> dealing with Asia.
> Investigators believe hackers stole sensitive information and
> passwords, and implanted “back doors” in unclassified computers to
> allow them to return, said officials familiar with the hacking. They
> spoke on condition of anonymity because of the delicacy of the
> intrusions and the resulting investigation.
>
> The break-ins and the department’s response severely limited Internet
> access at many locations, including some headquarters offices in
> Washington, the officials said. Nearly all Internet connections have
> been restored since the break-ins were recognized in mid-June.
>
> Asked what information was stolen, a department spokesman, Kurtis
> Cooper, said, “Because the investigation is continuing, I don’t think
> we even know.”
> Employees said the hackers appeared to hit computers especially hard
> at the Bureau of East Asian and Pacific Affairs.



My System SpecsSystem Spec
Old 08-01-2006   #4 (permalink)
Dongle
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

What's the connection between that article and UAC in Windows Vista Home
Edition? Surely the State Department isn't built around computers using
Windows Vista Home Edition. In fact, the article doesn't mention any
platform.




"Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
> Release for MSFT:
>
> *(The New York Times is a Small Newspaper from a Small Rural Town Outside
> Seattle called New York City)*
>
> How UAC and MSFT Security Works on the Ground:
> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>
> From the Company who brought you 30 Security Blogs on MSDN and Technet and
> who brings you UAC.
>
> UAC Team Blog--Read posts from the archives--they are screenshot in
> detail;
> Scroll Down; Click on the Archives and previous recent dates.
> http://blogs.msdn.com/uac/
>
> I have seen no blogging on MSFT's huge client the US Government's State
> Department being hacked on any of many security blogs I ck out on MSDN and
> Technet's sites.
>
>
>
> July 12, 2006
> Computer Hackers Attack State Dept.
> By THE ASSOCIATED PRESS
> WASHINGTON, July 11 - The State Department is recovering from large-scale
> computer break-ins worldwide over the past several weeks that appeared to
> be directed at its headquarters and at offices dealing with Asia.
>
> Investigators believe hackers stole sensitive information and passwords,
> and implanted "back doors" in unclassified computers to allow them to
> return, said officials familiar with the hacking. They spoke on condition
> of anonymity because of the delicacy of the intrusions and the resulting
> investigation.
>
> The break-ins and the department's response severely limited Internet
> access at many locations, including some headquarters offices in
> Washington, the officials said. Nearly all Internet connections have been
> restored since the break-ins were recognized in mid-June.
>
> Asked what information was stolen, a department spokesman, Kurtis Cooper,
> said, "Because the investigation is continuing, I don't think we even
> know."
>
> Employees said the hackers appeared to hit computers especially hard at
> the Bureau of East Asian and Pacific Affairs.
>
>
>
>



My System SpecsSystem Spec
Old 08-01-2006   #5 (permalink)
Chad Harris
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Ordinarily I'd agree but I also have been reading about 20 MSFT Security
blogs per week on MSDN and Technet blog sites Kerry and they are nearly
totally focused on security in VaVaVista from Vistasoft and they are
blogging on you guess it, UAC.

And given that MSFT opened a 58 million dollar facility right after 911 in
the D.C. area to take advantage of the post 911 so-called need for security
(yet 5 years later there is no significant congressional oversight for
security, border control, or substantive measures that would make the US a
bit more secure and clients like the top agencies in the government have
MSFT personnel there nearly all the literal time, I hold MSFT in part
responsible for any huge security breach.

I see enough security presentations at TS2, MSDN, and Technet to know that
it's being showcased by the Softies.

Combined with the reality of major government agencies that are huge if not
the largest MSFT clients being hacked continually, and MSFT's blogging out
of one month that they are going to be totally transparent with you and
meeting secretly behind closed doors with the U.S. DOJ about turning over
customer information and searches after witholding that they turned over
partial info for 9 months last year, I thought it was relevant but no one is
forced to read a newsgroup. Most of my friends or even well dressed
successful appearing people on the street have no idea what I'm talking
about when I say "newsgroup", "registry", "UAC", RC1, volume shadow service,
and on and on.

I have also read the literature in the mailings MSFT makes to governments
and the claims for enhanced security. Not enhanced enough.

CH

"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:%237CORLXtGHA.2260@TK2MSFTNGP03.phx.gbl...
> It's interesting but hardly on topic for a Vista newsgroup. It is more
> suited to microsoft.public.security.
>
> --
> Kerry
> MS-MVP Windows - Shell/User
> www.VistaHelp.ca
>
>
> Chad Harris wrote:
>> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
>> Release for MSFT:
>>
>> *(The New York Times is a Small Newspaper from a Small Rural Town
>> Outside Seattle called New York City)*
>>
>> How UAC and MSFT Security Works on the Ground:
>> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>>
>> From the Company who brought you 30 Security Blogs on MSDN and
>> Technet and who brings you UAC.
>>
>> UAC Team Blog--Read posts from the archives--they are screenshot in
>> detail; Scroll Down; Click on the Archives and previous recent dates.
>> http://blogs.msdn.com/uac/
>>
>> I have seen no blogging on MSFT's huge client the US Government's
>> State Department being hacked on any of many security blogs I ck out
>> on MSDN and Technet's sites.
>>
>>
>>
>> July 12, 2006
>> Computer Hackers Attack State Dept.
>> By THE ASSOCIATED PRESS
>> WASHINGTON, July 11 — The State Department is recovering from
>> large-scale computer break-ins worldwide over the past several weeks
>> that appeared to be directed at its headquarters and at offices
>> dealing with Asia.
>> Investigators believe hackers stole sensitive information and
>> passwords, and implanted “back doors” in unclassified computers to
>> allow them to return, said officials familiar with the hacking. They
>> spoke on condition of anonymity because of the delicacy of the
>> intrusions and the resulting investigation.
>>
>> The break-ins and the department’s response severely limited Internet
>> access at many locations, including some headquarters offices in
>> Washington, the officials said. Nearly all Internet connections have
>> been restored since the break-ins were recognized in mid-June.
>>
>> Asked what information was stolen, a department spokesman, Kurtis
>> Cooper, said, “Because the investigation is continuing, I don’t think
>> we even know.”
>> Employees said the hackers appeared to hit computers especially hard
>> at the Bureau of East Asian and Pacific Affairs.

>
>



My System SpecsSystem Spec
Old 08-01-2006   #6 (permalink)
Kerry Brown
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Again, I agree it's interesting stuff but it would be more appropriate in a
newsgroup about security. There are some good discussions about this this
kind of stuff in microsoft.public.security.

--
Kerry
MS-MVP Windows - Shell/User
www.VistaHelp.ca


Chad Harris wrote:
> Ordinarily I'd agree but I also have been reading about 20 MSFT
> Security blogs per week on MSDN and Technet blog sites Kerry and they
> are nearly totally focused on security in VaVaVista from Vistasoft
> and they are blogging on you guess it, UAC.
>
> And given that MSFT opened a 58 million dollar facility right after
> 911 in the D.C. area to take advantage of the post 911 so-called need
> for security (yet 5 years later there is no significant congressional
> oversight for security, border control, or substantive measures that
> would make the US a bit more secure and clients like the top agencies
> in the government have MSFT personnel there nearly all the literal
> time, I hold MSFT in part responsible for any huge security breach.
>
> I see enough security presentations at TS2, MSDN, and Technet to know
> that it's being showcased by the Softies.
>
> Combined with the reality of major government agencies that are huge
> if not the largest MSFT clients being hacked continually, and MSFT's
> blogging out of one month that they are going to be totally
> transparent with you and meeting secretly behind closed doors with
> the U.S. DOJ about turning over customer information and searches
> after witholding that they turned over partial info for 9 months last
> year, I thought it was relevant but no one is forced to read a
> newsgroup. Most of my friends or even well dressed successful
> appearing people on the street have no idea what I'm talking about
> when I say "newsgroup", "registry", "UAC", RC1, volume shadow
> service, and on and on.
> I have also read the literature in the mailings MSFT makes to
> governments and the claims for enhanced security. Not enhanced enough.
>
> CH
>
> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
> news:%237CORLXtGHA.2260@TK2MSFTNGP03.phx.gbl...
>> It's interesting but hardly on topic for a Vista newsgroup. It is
>> more suited to microsoft.public.security.
>>
>> --
>> Kerry
>> MS-MVP Windows - Shell/User
>> www.VistaHelp.ca
>>
>>
>> Chad Harris wrote:
>>> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
>>> Release for MSFT:
>>>
>>> *(The New York Times is a Small Newspaper from a Small Rural Town
>>> Outside Seattle called New York City)*
>>>
>>> How UAC and MSFT Security Works on the Ground:
>>> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>>>
>>> From the Company who brought you 30 Security Blogs on MSDN and
>>> Technet and who brings you UAC.
>>>
>>> UAC Team Blog--Read posts from the archives--they are screenshot in
>>> detail; Scroll Down; Click on the Archives and previous recent
>>> dates. http://blogs.msdn.com/uac/
>>>
>>> I have seen no blogging on MSFT's huge client the US Government's
>>> State Department being hacked on any of many security blogs I ck out
>>> on MSDN and Technet's sites.
>>>
>>>
>>>
>>> July 12, 2006
>>> Computer Hackers Attack State Dept.
>>> By THE ASSOCIATED PRESS
>>> WASHINGTON, July 11 — The State Department is recovering from
>>> large-scale computer break-ins worldwide over the past several weeks
>>> that appeared to be directed at its headquarters and at offices
>>> dealing with Asia.
>>> Investigators believe hackers stole sensitive information and
>>> passwords, and implanted “back doors” in unclassified computers to
>>> allow them to return, said officials familiar with the hacking. They
>>> spoke on condition of anonymity because of the delicacy of the
>>> intrusions and the resulting investigation.
>>>
>>> The break-ins and the department’s response severely limited
>>> Internet access at many locations, including some headquarters
>>> offices in Washington, the officials said. Nearly all Internet
>>> connections have been restored since the break-ins were recognized
>>> in mid-June. Asked what information was stolen, a department spokesman,
>>> Kurtis
>>> Cooper, said, “Because the investigation is continuing, I don’t
>>> think we even know.”
>>> Employees said the hackers appeared to hit computers especially hard
>>> at the Bureau of East Asian and Pacific Affairs.



My System SpecsSystem Spec
Old 08-01-2006   #7 (permalink)
Chad Harris
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Actually, whatever any government agency uses is built around much of what
is in Vista in a home. And from what I'm seeing this year, a lot of homes I
know do a better job of security than a panoply of agencies that have been
ridiculously breached by bozo head moves on the part of their personnel and
policies not stgringently in place from their big vendor MSFT.

I don't know that Vista Home Basic or Premium edition will be the edition
of choice in homes any more than most people in homes use Windows XP Home,
particularly since many companies I know who do extensive business with MSFT
and advise in deploying MSFT have full time telecomuting, Accenture being
one.

I also think it's relevant to be concerned about the contrast between MSFT's
marketing and blogging promotion of bit locker and enhanced security in UAC
and their cooperation with the government in turning over your personal
information and searches. I think it's relevant to be concerned about WGA
which is quintissential spyware, from a company who is showcasing and
marketing an app called Windows Defender which ships in Vista, and is also
necessary to make the cutsey little Win One Care Live icon "green" should
you use that software--and I strongly recommend WOC.

I think you will see advertising that stresses features in any Vista that
are the same in any agency or business. I would suspect that government
agencies have many many types of servers with substantial "security."

I also remember the Mark Minasi talk on how one day one of the highest
officials at an Ohio Nuclear facility took his laptop home one weekend to
play games with his grandson, and took it out of a security perimeter with
no protection--and was hacked promptly within a half hour after he breached
security. Fortunately, the nuclear reactors were off line while this was
discovered and corrected.

I also can count more breaches of massive data including the most important
items of personal ID by numerous US agencies with regards to the Armed
Forces in the last 6 months than I have fingers on two hands.

I could easily list them but some of them involve over a million individuals
with raw data placed on media--CDs or DVDs since I don't see the government
as an early adopter of more advanced media (holograms, perpendicular
technology, ect.)

The article doesn't mention any platform because the newspaper has been
threatened daily by the US Government who is outraged it reports their
illegal wiretapping behavior that outrages many of us. Most articles in
this vein are ridiculously vague.

I can show you documents from MSFT though, that boast clients that are among
the largest US government agencies as well as enterprises that are
intimately involved in government security.

Psst--almost all of them are using predominantly Windows boxes and servers,
although Linux may be soon making inroads.

I'm willing to bet ole CALEA is implemented on Windoz boxes and soon by
Vista boxes. The softies have a slide that says 400 million Windoz (OEM
preinstalled) boxes in 24 months. The "Vista opportunity."

http://www.calea.org/

http://www.askcalea.net/

CALEA is the friendly agency that wants to tap your phone and your computer.
And they want MSFT and other companies to help them.

http://www.nytimes.com/2006/06/10/te...rssnyt&emc=rss

June 10, 2006
Ruling Backs Internet-Phone Wiretapping
By BLOOMBERG NEWS
WASHINGTON, June 9 (Bloomberg News) — Comcast, Vonage and other companies
that provide telecommunications services over the Internet must allow
wiretapping of phone calls by law enforcement officials, a federal appeals
court ruled Friday.

In a 2-to-1 decision, the Court of Appeals for the District of Columbia
Circuit upheld a Federal Communications Commission directive treating such
companies the same as conventional phone companies for law enforcement
purposes. Comcast and other cable companies offer Internet service over
their networks, and Vonage is the biggest provider of Web-based phone
service.

Under the Communications Assistance for Law Enforcement Act, known as Calea,
phone companies must ensure that their networks are accessible to
authorities for wiretapping.

The American Council on Education, an association of 1,800 universities and
degree-granting institutions, challenged the commission's decision,
contending that providers of Web information services should be excluded
from the act. But the court ruled that the F.C.C. was correct in extending
the act to the Internet.

CH


"Dongle" <spareme@nospoof.com> wrote in message
news:OHZ6OfXtGHA.4080@TK2MSFTNGP03.phx.gbl...
> What's the connection between that article and UAC in Windows Vista Home
> Edition? Surely the State Department isn't built around computers using
> Windows Vista Home Edition. In fact, the article doesn't mention any
> platform.
>
>
>
>
> "Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
> news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
>> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
>> Release for MSFT:
>>
>> *(The New York Times is a Small Newspaper from a Small Rural Town Outside
>> Seattle called New York City)*
>>
>> How UAC and MSFT Security Works on the Ground:
>> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>>
>> From the Company who brought you 30 Security Blogs on MSDN and Technet
>> and who brings you UAC.
>>
>> UAC Team Blog--Read posts from the archives--they are screenshot in
>> detail;
>> Scroll Down; Click on the Archives and previous recent dates.
>> http://blogs.msdn.com/uac/
>>
>> I have seen no blogging on MSFT's huge client the US Government's State
>> Department being hacked on any of many security blogs I ck out on MSDN
>> and Technet's sites.
>>
>>
>>
>> July 12, 2006
>> Computer Hackers Attack State Dept.
>> By THE ASSOCIATED PRESS
>> WASHINGTON, July 11 - The State Department is recovering from large-scale
>> computer break-ins worldwide over the past several weeks that appeared to
>> be directed at its headquarters and at offices dealing with Asia.
>>
>> Investigators believe hackers stole sensitive information and passwords,
>> and implanted "back doors" in unclassified computers to allow them to
>> return, said officials familiar with the hacking. They spoke on condition
>> of anonymity because of the delicacy of the intrusions and the resulting
>> investigation.
>>
>> The break-ins and the department's response severely limited Internet
>> access at many locations, including some headquarters offices in
>> Washington, the officials said. Nearly all Internet connections have been
>> restored since the break-ins were recognized in mid-June.
>>
>> Asked what information was stolen, a department spokesman, Kurtis Cooper,
>> said, "Because the investigation is continuing, I don't think we even
>> know."
>>
>> Employees said the hackers appeared to hit computers especially hard at
>> the Bureau of East Asian and Pacific Affairs.
>>
>>
>>
>>

>
>



My System SpecsSystem Spec
Old 08-01-2006   #8 (permalink)
Dongle
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Interesting. So why doesn't Microsoft just follow Open Source's lead and do
security like Linux does? Do you think it's because MS they can't find any
competent people for that sort of thing?



"Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
news:e%23BdYIYtGHA.1216@TK2MSFTNGP03.phx.gbl...
> Actually, whatever any government agency uses is built around much of what
> is in Vista in a home. And from what I'm seeing this year, a lot of homes
> I know do a better job of security than a panoply of agencies that have
> been ridiculously breached by bozo head moves on the part of their
> personnel and policies not stgringently in place from their big vendor
> MSFT.
>
> I don't know that Vista Home Basic or Premium edition will be the edition
> of choice in homes any more than most people in homes use Windows XP Home,
> particularly since many companies I know who do extensive business with
> MSFT and advise in deploying MSFT have full time telecomuting, Accenture
> being one.
>
> I also think it's relevant to be concerned about the contrast between
> MSFT's marketing and blogging promotion of bit locker and enhanced
> security in UAC and their cooperation with the government in turning over
> your personal information and searches. I think it's relevant to be
> concerned about WGA which is quintissential spyware, from a company who is
> showcasing and marketing an app called Windows Defender which ships in
> Vista, and is also necessary to make the cutsey little Win One Care Live
> icon "green" should you use that software--and I strongly recommend WOC.
>
> I think you will see advertising that stresses features in any Vista that
> are the same in any agency or business. I would suspect that government
> agencies have many many types of servers with substantial "security."
>
> I also remember the Mark Minasi talk on how one day one of the highest
> officials at an Ohio Nuclear facility took his laptop home one weekend to
> play games with his grandson, and took it out of a security perimeter with
> no protection--and was hacked promptly within a half hour after he
> breached security. Fortunately, the nuclear reactors were off line while
> this was discovered and corrected.
>
> I also can count more breaches of massive data including the most
> important items of personal ID by numerous US agencies with regards to the
> Armed Forces in the last 6 months than I have fingers on two hands.
>
> I could easily list them but some of them involve over a million
> individuals with raw data placed on media--CDs or DVDs since I don't see
> the government as an early adopter of more advanced media (holograms,
> perpendicular technology, ect.)
>
> The article doesn't mention any platform because the newspaper has been
> threatened daily by the US Government who is outraged it reports their
> illegal wiretapping behavior that outrages many of us. Most articles in
> this vein are ridiculously vague.
>
> I can show you documents from MSFT though, that boast clients that are
> among the largest US government agencies as well as enterprises that are
> intimately involved in government security.
>
> Psst--almost all of them are using predominantly Windows boxes and
> servers, although Linux may be soon making inroads.
>
> I'm willing to bet ole CALEA is implemented on Windoz boxes and soon by
> Vista boxes. The softies have a slide that says 400 million Windoz (OEM
> preinstalled) boxes in 24 months. The "Vista opportunity."
>
> http://www.calea.org/
>
> http://www.askcalea.net/
>
> CALEA is the friendly agency that wants to tap your phone and your
> computer. And they want MSFT and other companies to help them.
>
> http://www.nytimes.com/2006/06/10/te...rssnyt&emc=rss
>
> June 10, 2006
> Ruling Backs Internet-Phone Wiretapping
> By BLOOMBERG NEWS
> WASHINGTON, June 9 (Bloomberg News) - Comcast, Vonage and other companies
> that provide telecommunications services over the Internet must allow
> wiretapping of phone calls by law enforcement officials, a federal appeals
> court ruled Friday.
>
> In a 2-to-1 decision, the Court of Appeals for the District of Columbia
> Circuit upheld a Federal Communications Commission directive treating such
> companies the same as conventional phone companies for law enforcement
> purposes. Comcast and other cable companies offer Internet service over
> their networks, and Vonage is the biggest provider of Web-based phone
> service.
>
> Under the Communications Assistance for Law Enforcement Act, known as
> Calea, phone companies must ensure that their networks are accessible to
> authorities for wiretapping.
>
> The American Council on Education, an association of 1,800 universities
> and degree-granting institutions, challenged the commission's decision,
> contending that providers of Web information services should be excluded
> from the act. But the court ruled that the F.C.C. was correct in extending
> the act to the Internet.
>
> CH
>
>
> "Dongle" <spareme@nospoof.com> wrote in message
> news:OHZ6OfXtGHA.4080@TK2MSFTNGP03.phx.gbl...
>> What's the connection between that article and UAC in Windows Vista Home
>> Edition? Surely the State Department isn't built around computers using
>> Windows Vista Home Edition. In fact, the article doesn't mention any
>> platform.
>>
>>
>>
>>
>> "Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
>> news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
>>> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
>>> Release for MSFT:
>>>
>>> *(The New York Times is a Small Newspaper from a Small Rural Town
>>> Outside Seattle called New York City)*
>>>
>>> How UAC and MSFT Security Works on the Ground:
>>> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>>>
>>> From the Company who brought you 30 Security Blogs on MSDN and Technet
>>> and who brings you UAC.
>>>
>>> UAC Team Blog--Read posts from the archives--they are screenshot in
>>> detail;
>>> Scroll Down; Click on the Archives and previous recent dates.
>>> http://blogs.msdn.com/uac/
>>>
>>> I have seen no blogging on MSFT's huge client the US Government's State
>>> Department being hacked on any of many security blogs I ck out on MSDN
>>> and Technet's sites.
>>>
>>>
>>>
>>> July 12, 2006
>>> Computer Hackers Attack State Dept.
>>> By THE ASSOCIATED PRESS
>>> WASHINGTON, July 11 - The State Department is recovering from
>>> large-scale computer break-ins worldwide over the past several weeks
>>> that appeared to be directed at its headquarters and at offices dealing
>>> with Asia.
>>>
>>> Investigators believe hackers stole sensitive information and passwords,
>>> and implanted "back doors" in unclassified computers to allow them to
>>> return, said officials familiar with the hacking. They spoke on
>>> condition of anonymity because of the delicacy of the intrusions and the
>>> resulting investigation.
>>>
>>> The break-ins and the department's response severely limited Internet
>>> access at many locations, including some headquarters offices in
>>> Washington, the officials said. Nearly all Internet connections have
>>> been restored since the break-ins were recognized in mid-June.
>>>
>>> Asked what information was stolen, a department spokesman, Kurtis
>>> Cooper, said, "Because the investigation is continuing, I don't think we
>>> even know."
>>>
>>> Employees said the hackers appeared to hit computers especially hard at
>>> the Bureau of East Asian and Pacific Affairs.
>>>
>>>
>>>
>>>

>>
>>

>
>



My System SpecsSystem Spec
Old 08-01-2006   #9 (permalink)
Dongle
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Too bad we can't have a betting pool as to the number of days between
product release and the first security breach. You know every blackhat and
script kiddie out there has had this beta since day 1 and is fighting to get
the first zero-day exploit.



"Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
> Release for MSFT:
>
> *(The New York Times is a Small Newspaper from a Small Rural Town Outside
> Seattle called New York City)*
>
> How UAC and MSFT Security Works on the Ground:
> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>
> From the Company who brought you 30 Security Blogs on MSDN and Technet and
> who brings you UAC.
>
> UAC Team Blog--Read posts from the archives--they are screenshot in
> detail;
> Scroll Down; Click on the Archives and previous recent dates.
> http://blogs.msdn.com/uac/
>
> I have seen no blogging on MSFT's huge client the US Government's State
> Department being hacked on any of many security blogs I ck out on MSDN and
> Technet's sites.
>
>
>
> July 12, 2006
> Computer Hackers Attack State Dept.
> By THE ASSOCIATED PRESS
> WASHINGTON, July 11 - The State Department is recovering from large-scale
> computer break-ins worldwide over the past several weeks that appeared to
> be directed at its headquarters and at offices dealing with Asia.
>
> Investigators believe hackers stole sensitive information and passwords,
> and implanted "back doors" in unclassified computers to allow them to
> return, said officials familiar with the hacking. They spoke on condition
> of anonymity because of the delicacy of the intrusions and the resulting
> investigation.
>
> The break-ins and the department's response severely limited Internet
> access at many locations, including some headquarters offices in
> Washington, the officials said. Nearly all Internet connections have been
> restored since the break-ins were recognized in mid-June.
>
> Asked what information was stolen, a department spokesman, Kurtis Cooper,
> said, "Because the investigation is continuing, I don't think we even
> know."
>
> Employees said the hackers appeared to hit computers especially hard at
> the Bureau of East Asian and Pacific Affairs.
>
>
>
>



My System SpecsSystem Spec
Old 08-01-2006   #10 (permalink)
Mark D. VandenBerg
Guest


 

Re: MSFT Security and UAC: Huge Client US State Dept Hacked

Who says we can't?

"Dongle" <spareme@nospoof.com> wrote in message
news:e9hH%23fYtGHA.644@TK2MSFTNGP03.phx.gbl...
> Too bad we can't have a betting pool as to the number of days between
> product release and the first security breach. You know every blackhat and
> script kiddie out there has had this beta since day 1 and is fighting to
> get the first zero-day exploit.
>
>
>
> "Chad Harris" <RemoveHezbullahtotally@clearview.net> wrote in message
> news:%232Nu%23DVtGHA.3240@TK2MSFTNGP03.phx.gbl...
>> What you won't find at MFST Press Pass or in a Wagner Edstrom Press
>> Release for MSFT:
>>
>> *(The New York Times is a Small Newspaper from a Small Rural Town Outside
>> Seattle called New York City)*
>>
>> How UAC and MSFT Security Works on the Ground:
>> http://www.nytimes.com/2006/07/12/wa...gewanted=print
>>
>> From the Company who brought you 30 Security Blogs on MSDN and Technet
>> and who brings you UAC.
>>
>> UAC Team Blog--Read posts from the archives--they are screenshot in
>> detail;
>> Scroll Down; Click on the Archives and previous recent dates.
>> http://blogs.msdn.com/uac/
>>
>> I have seen no blogging on MSFT's huge client the US Government's State
>> Department being hacked on any of many security blogs I ck out on MSDN
>> and Technet's sites.
>>
>>
>>
>> July 12, 2006
>> Computer Hackers Attack State Dept.
>> By THE ASSOCIATED PRESS
>> WASHINGTON, July 11 - The State Department is recovering from large-scale
>> computer break-ins worldwide over the past several weeks that appeared to
>> be directed at its headquarters and at offices dealing with Asia.
>>
>> Investigators believe hackers stole sensitive information and passwords,
>> and implanted "back doors" in unclassified computers to allow them to
>> return, said officials familiar with the hacking. They spoke on condition
>> of anonymity because of the delicacy of the intrusions and the resulting
>> investigation.
>>
>> The break-ins and the department's response severely limited Internet
>> access at many locations, including some headquarters offices in
>> Washington, the officials said. Nearly all Internet connections have been
>> restored since the break-ins were recognized in mid-June.
>>
>> Asked what information was stolen, a department spokesman, Kurtis Cooper,
>> said, "Because the investigation is continuing, I don't think we even
>> know."
>>
>> Employees said the hackers appeared to hit computers especially hard at
>> the Bureau of East Asian and Pacific Affairs.
>>
>>
>>
>>

>
>


My System SpecsSystem Spec
Reply
Update your Vista Drivers

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
Huge Bug in security Filesystem of NTFS ? Max Vista security 4 03-14-2008 02:11 PM
Microsoft Vista gets contacted by computers from Halliburton, US Dept of Defense, and probably Homeland Security. plenty560@yahoo.com Vista General 9 08-13-2007 06:57 PM
Vista Business possible HUGE "Security" problem. You got to read this! Adam Albright Vista installation & setup 9 02-07-2007 10:51 PM
More Weak MSFT Security/Hotmail Hack/Go MSN Live Chad Harris Vista General 2 07-06-2006 04:44 PM


Complimentary Industry Resources

Vista Forums has joined forces with TradePub.com to offer you a new, exciting, and entirely free professional resource. Visit http://vistax64.tradepub.com today to browse our selection of complimentary Industry magazines, white papers, webinars, podcasts, and more across 34 industry sectors. No credit cards, coupons, or promo codes required. Try it today!




Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51