Slashdot Mirror
Mapping The CIA Nonclassified Network
jeffy124 writes "A security firm Matta Security in London has mapped the CIA non-classified network. Using only legal and open sources, the company mapped topology of machines and even found networks otherwise closed to the public. The company never port scanned or probed the network directly. Among items they found were emails and phone numbers of sys admins and other employees. Amazingly, they did all this in two days."
Always nice to know if the spooks are checking up on me. (Not that I would give them any reason to)
Reality has a liberal bias
It don't claim to have found any private or restricted information. Everything they found was specifically put on the web to be found.
Simply knowing the names and e-mail addresses that Matta turned up would be enough for some social engineers to get the rest of the information necessary to mount an attack
Sorry, I don't buy that. "Hi, this is chuck, the webmaster. Can I have the names of our russian agents please?"
Post the article again when someone breaks in or actually finds classified info.
nslookup -q=mx www.cia.gov
- m4tt4 s3cur1ty 1337 h4x0r
Question is if you ping them and they show up, do they respond with "pong?"
"The once beautiful rose blackens slowly..."
what's the worse that could happen?
% ping hidden.airforce.mil
PING hidden.airforce.mil from 192.168.1.4 : 56(84) bytes of data.
64 bytes from hidden.airforce.mil: icmp_seq=0 ttl=57 time=20.871 msec fbi_agents_in=10
64 bytes from hidden.airforce.mil: icmp_seq=1 ttl=57 time=19.560 msec fbi_agents_in=9
64 bytes from hidden.airforce.mil: icmp_seq=2 ttl=57 time=20.497 msec fbi_agents_in=8
64 bytes from hidden.airforce.mil: icmp_seq=3 ttl=57 time=20.820 msec fbi_agents_in=7
64 bytes from hidden.airforce.mil: icmp_seq=4 ttl=57 time=19.732 msec fbi_agents_in=6
64 bytes from hidden.airforce.mil: icmp_seq=5 ttl=57 time=20.805 msec fbi_agents_in=5
64 bytes from hidden.airforce.mil: icmp_seq=6 ttl=57 time=19.830 msec fbi_agents_in=4
64 bytes from hidden.airforce.mil: icmp_seq=7 ttl=57 time=20.770 msec fbi_agents_in=3
64 bytes from hidden.airforce.mil: icmp_seq=8 ttl=57 time=19.781 msec fbi_agents_in=2
64 bytes from hidden.airforce.mil: icmp_seq=9 ttl=57 time=20.790 msec fbi_agents_in=1
--- hidden.airforce.mil ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss, 100% user loss
round-trip min/avg/max/mdev = 19.560/20.345/20.871/0.541 ms
"Sorry, I don't buy that. "Hi, this is chuck, the webmaster. Can I have the names of our russian agents please?""
I always find it amusing when people try to make the CIA/FBI/NSA out to be bumbling idiots. They're not perfect, but they are really f'ing good.
In fact, if someone brought that weak 'social engineering' their way, it wouldn't surprise me if they were logged, traced, then given a visit by a couple really solemn-looking men in bad suits and dark sunglasses that smelled like pistachios.
I dare even one of the cynical know-it-all people that read this board to try it. Be sure to post your results so we can laugh at your cornholing.
Knunov
Why do users with IDs under 100,000 or over 700,000 usually have the most worthwhile comments?
Pentagon (AP)
A massive, national mobilization of FBI agents was reported today by sources speaking on condition of anonymity. While officially the situation is classified, the source said there was a massive DOS attack of every major government site.
"We don't believe this to be the work of ametures." said the source, "The attack was highly organized - thousands of users, from all over the globe, using a special form of denial of service attack called the 'Slashdot Effect'."
The government has been keeping an eye on the hacker portal "Slashdot", at http://slashdot.org/, for quite some time, stating that it is always the best place to find out what the next big illegal thing is, whether it be irritating the MPAA, RIAA, or disrupting critical government networks.
President Bush is quoted as saying something inconsequental, ignorant, and stupid, as usual.
64 bytes from hidden.airforce.mil: icmp_seq=5 ttl=57 time=20.805 msec fbi_agents_in=5
:p~
I think you have the wrong domain name. (Well i know www is not hidden., but ill look into it for you!!
PING www.af.mil (131.84.1.31) from 192.168.83.206 : 56(84) bytes of data.
From h1-0.dtic.bbnplanet.net (4.1.1.254): Packet filtered
From h1-0.dtic.bbnplanet.net (4.1.1.254): Packet filtered
From h1-0.dtic.bbnplanet.net (4.1.1.254): Packet filtered
From h1-0.dtic.bbnplanet.net (4.1.1.254): Packet filtered
Yes actuall results. I wonder when i will get the email. (Yes i am an Admin on the domain, yes i am bored), or failing that visits from people in really bad suits. (Im lonely too, it will be nice to have someone to talk to!!) --- www.af.mil ping statistics --- 27 packets transmitted, 0 packets received, +4 errors, 100% packet loss
Do the following really mean anything? SCSA MCP CCSA CCNA
--I'm not actually after an answer!