Slashdot Mirror


Sprint Routers Stolen; NYC Internet Outage Ensues

cbnet2004 writes "This story on eWEEK reports that late Sunday night a number of Sprint's DS-3 network cards were stolen from a Verizon colocation center at 38th St in Manhattan. Some customers apparently have service back but a number remain down -- it could be a while. The latest rumor on this situation is that some fiber optic cables were cut as well; this could put the affected customers out for days more."

407 comments

  1. Was it easy? Why was it not major? by erick99 · · Score: 4, Interesting
    I wish the article had indicated how secure the area was where the cards were stolen. Was it a matter of walking into a room and pulling the cards or did the vandals have to go to a great deal of trouble? I hope it wasn't easy...I'd hate to think that this could be done on a widespread basis with relative ease.

    This quote sort of caught me off-guard as I imagine some customers might disagree:

    Fleckenstein said that the outage was "not major," and not large enough to require a report to the Federal Communications Commission.

    The beginning of the article states:

    A handful of corporate customers were left without e-mail and Internet access Monday after the theft of networking equipment from a New York City office late Sunday.

    So, I would guess that the "handful" of corporate customers who lost service probably felt it was major to them. I understand the notion that it was not major in the sense of being more widespread, I just think his comment could have been worded better.

    Happy Trails!

    Erick

    --
    http://www.busyweather.com/
  2. Potential Suspects by The_Rippa · · Score: 5, Funny

    Be on the lookout for crackheads with amazingly fast internet connections!

    1. Re:Potential Suspects by tsvk · · Score: 5, Funny
      Be on the lookout for crackheads with amazingly fast internet connections!

      I think we found them already....

    2. Re:Potential Suspects by Xenographic · · Score: 1, Funny

      I thought he said crackheads? ;]

      (Besides, this is as good an excuse as any to Googlebomb SCO further ...)

    3. Re:Potential Suspects by jelevy01 · · Score: 0, Redundant

      How long before they show up on ebay?

    4. Re:Potential Suspects by Cyno01 · · Score: 1

      They're not crackheads, they're Litigious Bastards. :p

      --
      "Sic Semper Tyrannosaurus Rex."
    5. Re:Potential Suspects by Anonymous Coward · · Score: 0

      (Quimby voice)
      It can be two things!
      (/Quimby)

    6. Re:Potential Suspects by Anonymous Coward · · Score: 0

      It's NetBSD, not LSD! And besides, I don't think LSD is crack!

    7. Re:Potential Suspects by Anonymous Coward · · Score: 0

      I found more.

      w00t. I just insulted the whole of slashdot :)

      *flex*

      emote spends to much time on muds.

      emote prepares to be modded into oblivion.

      emote decides to click post anonymously...

  3. I was wondering why... by bennomatic · · Score: 0

    my pr0n was taking so long to download!

    --
    The CB App. What's your 20?
    1. Re:I was wondering why... by seitentaisei · · Score: 2, Funny

      No, no, the slow speed is because the guys who stole the cards are trying to download the entire internet at once. Pr0n prioritized.

  4. That's odd .... by jrl87 · · Score: 5, Funny

    This story's been on for a while and i see very few posts .... not even the usual fp BS .....

    How many people were affected by this?

    1. Re:That's odd .... by goldspider · · Score: 5, Funny
      ".... not even the usual fp BS ..... How many people were affected by this?"

      Good question, but now I guess we have a pretty good idea where all the FP trolls are from.

      --
      "Ask not what your country can do for you." --John F. Kennedy
    2. Re:That's odd .... by jimmyswimmy · · Score: 1

      You haven't seen a lot of posts because all the people who really care about this don't have internet access 'cause someone stole the cards!

      --

      Just my $0.55 (US inflation, 1774-2008, for $0.02)
    3. Re:That's odd .... by jamonterrell · · Score: 1

      Story posted at 7:41, you reply at 7:43. Probably took you about a minute to type that up... so let's see... 1 minute is "been on for a while?" hmm.. okay then. I mean we're geeks, but come on how many posts did you expect in 1-2 minutes? heh.

      --
      I can count to 1023 on my hands. Ask me about #132.
    4. Re:That's odd .... by cTbone · · Score: 1

      Our entire school was brought down because of the network card theft (Fordham University). It was incredibly fustrating, especially with finals next week, because many students were unable to browse the internet or do online research for their various papers / projects. The total length of time for the outage was about 24 hours starting at around 4-5 pm that day.

  5. Haha by stratjakt · · Score: 5, Funny

    What kind of stupid moron would steal something like that. Probably some crackhead shmuck who didn't know what it was and figured it was worth a buck.

    Who'd you sell it to? Dude will be busted. Someone walks up to you in an alley and say "wassup cuz you wanna buy a ds3 innernet?" it raises eyebrows.

    --
    I don't need no instructions to know how to rock!!!!
    1. Re:Haha by gewalker · · Score: 2, Funny

      Well, I just checked, the cards are not on Ebay (yet), but stolengoods.com looks promising :-)

      (In reality, stolengoods.com is just a parked domain, no need to waste your time.)

    2. Re:Haha by Phurd+Phlegm · · Score: 5, Funny
      Who'd you sell it to? Dude will be busted. Someone walks up to you in an alley and say "wassup cuz you wanna buy a ds3 innernet?" it raises eyebrows.

      We are talking NYNY here, right? Here in the Midwest, our impression is that no one would blink if you walked up to them and tried to sell them an oil drilling rig or an Aegis cruiser.

    3. Re:Haha by identity0 · · Score: 4, Funny

      If these cards are like regular network cards, maybe they needed something to cut lines of coke with?

      Imagine some druggie snorting coke off of a WinXP CD with the ds3 card, "Dude this is way better than a mirror and razorblade..."

    4. Re:Haha by crashnbur · · Score: 1

      If whoever's behind it is intelligent on even the lowest significant level, then the plan was to steal and destroy the items. Though... for what purpose?

    5. Re:Haha by Anonymous Coward · · Score: 5, Funny

      Any true cokehead geek knows SODIMMS work best. They're just the right size, and even have a single notch for making neat little lines after you've chopped it all up.

    6. Re:Haha by Bartgroks · · Score: 3, Interesting

      I dont know about the no market comment. This type of thing happens in the CATV industry all the time. One rural town had a cable system built entirely with stolen equipment and the system was awarded to the victim of the theft. My chief suspect would be a contractor who needed the cards to finish a job elsewhere.

    7. Re:Haha by ThisIsFred · · Score: 1

      Who'd you sell it to? Dude will be busted. Someone walks up to you in an alley and say "wassup cuz you wanna buy a ds3 innernet?" it raises eyebrows.

      Are you kidding me? That DS3 card is probably worth more than its weight in cocaine. I would buy it in a heartbeat. Think of the new crime underworld that will be created when these guys figure it out. Think of how tiny and valuable these electronic items are. I could probably pay the bills for a year off a sandwich bag of Opterons.

      I say: Be on the lookout for pawn shops with really fast Internet connections.

      --
      Fred

      "A fool and his freedom are soon parted"
      -RMS
    8. Re:Haha by Anonymous Coward · · Score: 0

      I doubt that. DS3/TS3 cards are commodity components. They will most likely be used by the thieves on their own network, or sold on eBay. There are many, many DS3/TS3 cards on eBay at any given time. Here are is a nice one:

      http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ca te gory=67288&item=3094164581&rd=1

    9. Re:Haha by Anonymous Coward · · Score: 0

      How could you tell? There are lots and lots of T3/DS3 cards on eBay at any given time. Here is a nice one from a reputable seller:

      http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ca te gory=67288&item=3094164581&rd=1

    10. Re:Haha by kaptkudzoo · · Score: 2, Funny

      speaking of crackheads going to great lengths --

      one dude's response to a determined addict

    11. Re:Haha by the+pickle · · Score: 3, Funny

      ...or a local bridge.

      Wanna buy?

      p

    12. Re:Haha by chiph · · Score: 1

      I knew an IBM SE in Nashville, who had a doper come up to him and try & sell him a very nice Tek oscilloscope for $50:

      "Yeah, man, it gets all the cable channels, and this here's for your satellite TV!"

      Chip H.

    13. Re:Haha by TheLink · · Score: 1

      Uh, they're already stealing CPUs etc. Go look -there are a number of articles on this.

      Hijacking is pretty common. Plus the risk is lower with stealing CPUs than trafficking drugs. Whilst just possession of cocaine gets you in trouble in most places, possession of a few hundred P4s is not illegal, and even less suspicious if you set up a legit facade/front around it - forged docs, companies etc.

      Given P4s may or may not be legit depending on context, chip sniffing dogs are unlikely to be as useful compared to drug sniffing dogs.

      --
  6. Hmm by Luigi30 · · Score: 4, Funny

    If it's so easy to steal these things, I hope nobody steal's my ISP'#353708534 ### NO CARRIER ###

    --
    503 Sig Unavailable

    The Signature could not be accessed. Please try again later or contact the administrator
    1. Re:Hmm by Anonymous Coward · · Score: 0

      To whoever modded this redundant: 'You are the wind beneath my wings'. Make the fuckers who keep posting this joke pay!

  7. Story from the mysterious future... by nuclear305 · · Score: 5, Funny

    Next week on Slashdot:

    NIC thieves busted! Traced by MAC Address when the stolen components were plugged in.

    1. Re:Story from the mysterious future... by Anonymous Coward · · Score: 5, Funny

      Don't be nieve. If they have the brains to pull off this skilled robbery, surely they know to file off the MAC address.

    2. Re:Story from the mysterious future... by Anonymous Coward · · Score: 0

      you know, i swear slashdot ran a story about this two or three months ago, yet i can't pull up the story out of either slashdot search or google. was this pulled because the story contained all the guy's MAC id's and such? or, am i just looney?

    3. Re:Story from the mysterious future... by Anonymous Coward · · Score: 0

      if only it were that easy with a DS3 card. only MAC address would likely be the management port, if it exists, and probably wouldn't be routed to the internet.

    4. Re:Story from the mysterious future... by GooberToo · · Score: 1

      You actually made me laugh out loud!

      That's funny!

      Thank you!

    5. Re:Story from the mysterious future... by morcheeba · · Score: 4, Funny

      Nah, this kind of high-end stuff is usually sent to a chop-shop, where they'll part each one out into 28 T1 lines.

    6. Re:Story from the mysterious future... by Anonymous Coward · · Score: 0

      Naïve.

    7. Re:Story from the mysterious future... by ctxspy · · Score: 1

      Nigh Eve

    8. Re:Story from the mysterious future... by Panaflex · · Score: 3, Funny

      Evian

      --
      I said no... but I missed and it came out yes.
  8. Disgruntled? by bravehamster · · Score: 4, Funny

    Sounds like a disgruntled Verizon customer decided to take out his frustrations...in which case I can hardly blame him. It's unfortunate that others had to suffer, but a man can only get passed from call center to call center so many times before he snaps like a dried twig.

    I'm surprised it didn't happen sooner.

    --
    ---- El diablo esta en mis pantalones! Mire, mire!
    1. Re:Disgruntled? by Anonymous Coward · · Score: 0

      I don't think it was a call centre employee. Most of them are in Canada. I got friends that work there.


      I might have been the janitor. He probably thought it went with the old computers they were throwing out.

    2. Re:Disgruntled? by mausmalone · · Score: 4, Insightful

      I'm reminded of an old saying. "If you pay peanuts, you get monkeys." It used to apply to low paying jobs, but it seems to be spreading to any job where you're treated worse than the equipment (i.e. any non-management job). It's more like "you treat people like monkeys, they act like animals."

      --
      -=-=-=-=-=
      I'd rather be flamed than ignored.
    3. Re:Disgruntled? by johnpaul191 · · Score: 1

      good point... i have heard of that happening. one example was during a Verizon strike some wires were pulled out or cut and people lost DSL service till the thing was resolved with the striking workers.

  9. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    working at an atlanta colo center i can tell you: far too easily

  10. That's the same combination on my luggage! by TheWanderingHermit · · Score: 5, Funny

    Kind of like setting the password for your atmospheric shield to 1-2-3-4-5, then later finding out it's the same combination President Skroob uses for his luggage.

    1. Re:That's the same combination on my luggage! by Anonymous Coward · · Score: 0

      Silly rabbit, he's talking about the movie "Space Balls", a wonderful Mel Brooks film. Here ya go, take a look: http://www.ladyofthecake.com/mel/space/sballs.htm

    2. Re:That's the same combination on my luggage! by SilentOne · · Score: 1

      http://imdb.com/title/tt0094012/

      Spaceballs my good man

    3. Re:That's the same combination on my luggage! by BrookHarty · · Score: 1

      Everyone uses 1-2-3-4-5, I use 5-4-3-2-1.

      0-0-0-0-0 also works.

    4. Re:That's the same combination on my luggage! by Anonymous Coward · · Score: 0

      * wonders if anyone else noticed that 1111-00000-1111 is a working CS key *

      Spaceballs is like the best movie of all time, next to the Blue Collar Comedy Tour and Little Nicky.

  11. Nice security... by sH4RD · · Score: 1

    Kinda sad how something worth so much (both physically and in the revenue it generates) could be stolen so easily...sounds like my $15 a month virtual hosting is probably in a more secure data center... And by the way guys...I have access to a DS3...they really ARE fast...

    --
    WASTE - The Secure P2P
  12. Poor security or inside job? by Maul · · Score: 4, Interesting

    Much of the time, thefts at locales like this are often done by people with at least some inside knowledge of the site's security.

    It'll be interesting to see where this investigation goes.

    --

    "You spoony bard!" -Tellah

    1. Re:Poor security or inside job? by Neil+Blender · · Score: 5, Insightful

      thefts at locales like this are often done by people with at least some inside knowledge of the site's security.

      I have shopped around for a data center more than once. The people who take you on the tours are so eager for your business (at least nowdays) that they show you just about everything. One company even took me into a place where pretty much all the connectivity in Seattle passes through (a level 3 node or something, I can't recall the name.) This place was secured by two locked doors with no guards and street level access. I have seen plenty more 'security' that would be pretty easy to bypass. If you were a terrorist, it would be pretty damn easy to destroy many of these places.

    2. Re:Poor security or inside job? by Anonymous Coward · · Score: 2, Funny

      One company even took me into a place where pretty much all the connectivity in Seattle passes through (a level 3 node or something, I can't recall the name.) This place was secured by two locked doors with no guards and street level access. I have seen plenty more 'security' that would be pretty easy to bypass. If you were a terrorist, it would be pretty damn easy to destroy many of these places.

      My Comcast Internet is flaky enough as it is, you don't need to give terrorist ideas.

    3. Re:Poor security or inside job? by Anonymous Coward · · Score: 2, Funny
      If you were a terrorist, it would be pretty damn easy to destroy many of these places.

      GOOD. Then these places deserve to be blown up. If destroying a single site can knock out connectivity to millions of people then you really need to re-evaluate your risk assessment. The Internet was designed to withstand a nuclear war so that men locked away in bunkers would be able to masturbate to pornography after all the women were killed.

    4. Re:Poor security or inside job? by trawg · · Score: 2, Insightful

      Uh oh - I think after saying that publicly, you now ARE a terrorist.

    5. Re:Poor security or inside job? by Anonymous Coward · · Score: 0

      You have it backwards. It's so women locked away in bunkers can have endless lesbian cybersex long after all the men are killed.

    6. Re:Poor security or inside job? by Anonymous Coward · · Score: 0
      I have shopped around for a data center more than once. The people who take you on the tours are so eager for your business (at least nowdays) that they show you just about everything.

      Fuckin' sales guys will do anything, no matter how stupid, to chalk up the sale.

      I don't know if this saying is common in sales, but where I worked, the sales guys promised outlandish shit. When the guys who had to close a contract for this foolishness complained, the sales guys just said, "We hook 'em; you book 'em".

    7. Re:Poor security or inside job? by Anonymous Coward · · Score: 1

      Terrorists do things that cause mass terror. How many people (/.ers aside) would be stricken with terror at the news a data center was compromised.

      I think you mean anarchists. They are the ones who fuck your life over in stupid ways just because.

    8. Re:Poor security or inside job? by Feanturi · · Score: 1

      The people who take you on the tours are so eager for your business (at least nowdays) that they show you just about everything.

      Or even to familiarize a new employee with parts of the place they have no need to know about. When I started my job at the cable ISP I work at, I was shown pretty much everything. But I work in the field, on the customer's side of the cable modem.. I had no real reason to be in the big room with racks and racks of servers and billions of bits of traffic flowing all around. I mean, it was real cool and I was excited to be in there, but it had no actual bearing on my job. I could have been anybody with foul intentions, it was fairly easy to get the job..

    9. Re:Poor security or inside job? by Anonymous Coward · · Score: 0

      I can't recall the name.

      If you cant recall, theres no problem then. On the end, your ISP was cleaver enough to not provide you all the info.

    10. Re:Poor security or inside job? by TheLink · · Score: 1

      Well maybe someone screwed up big time, and stories had to be made up.

      --
  13. Be on the lookout for... by dark-br · · Score: 4, Funny

    ...dumb crackheads with amazingly cheap DS-3 cards for selling on eBay.

    1. Re: Be on the lookout for... by AlaskanUnderachiever · · Score: 4, Funny
      --
      Find out about my new childrens book: SS Death Camp Criminal Batallion Go To Monte Carlo For The Massacre
    2. Re: Be on the lookout for... by fatman1683 · · Score: 2, Insightful

      Not our cards. That's an ATM DS-3 card, and Verizon uses only frame relay on the east coast.

      --
      Look, defenseless babies!
    3. Re: Be on the lookout for... by cmburns69 · · Score: 1
      From the listing:
      "Rest assured that this will be a satisfactory transaction."


      Phew! I thought I was in for a bad time..
      --
      Online Starcraft RPG? At
      Dietary fiber is like asynchronous IO-- Non-blocking!
  14. The more by Anonymous Coward · · Score: 3, Interesting

    I guess you could say the bigger the internet gets, the greater the chance it becomes for real life to come slapping it down. Somebody steals expansion cards from a CO = loss of service for 10's of 1000's of people. It's pretty interesting, almost reminds me of that Real Life DDoS schtuff.

    1. Re:The more by BlackSabbath · · Score: 1

      "... reminds me of that Real Life DDoS schtuff ..."

      It's called "war".

    2. Re:The more by Mad+Marlin · · Score: 1

      Actually, wouldn't it be an embargo?

    3. Re:The more by Kent+Recal · · Score: 1

      More like a siege.

  15. Reading the Article and by colk99 · · Score: 3, Funny

    in addition, no notice of the outage was posted to Sprint's Scheduled Maintenance and Outage page. Under FCC rules, phone carriers must report outages affecting more than 50,000 subscribers within two hours WHAT you are supposed to schedule your DS-3 cards being stolen 2 hours in advance

    1. Re:Reading the Article and by Anonymous Coward · · Score: 0

      it's not scheduled maintenance and scheduled outage .. it's 'scheduled maintenance' and 'outage'

    2. Re:Reading the Article and by MBCook · · Score: 4, Funny
      Well they tried to report it... but for some reason their internet connection was down.

      :)

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.
  16. vulnerability by bersl2 · · Score: 1, Redundant

    Everybody is so concerned with security online. It means nothing if somebody can just walk into your building and take your stuff.

    1. Re:vulnerability by idiot900 · · Score: 2, Insightful

      Everybody is so concerned with security online. It means nothing if somebody can just walk into your building and take your stuff.

      Sure it does. Suppose your data is encrypted using your public key, and you keep your private key with you. If your data is worth more than the media it's stored on, you've just averted a catastrophe by keeping it from falling into the wrong hands.

    2. Re:vulnerability by Qbans · · Score: 5, Interesting

      That's the truth. I've worked in places where the management is more concerned with the security of the accounting department (which is paperless btw) than the security of the computer room down the hall. The accounting department had key card access, restricted hours, etc. while the computer room just had a regular old lock and the keys were kept in an office managers drawer.

    3. Re:vulnerability by 0racle · · Score: 1

      Actually by disconnecting these people, their online security just went through the roof. They are now some of the most secure people on the net.

      --
      "I use a Mac because I'm just better than you are."
    4. Re:vulnerability by Anonymous Coward · · Score: 1, Interesting

      That's the truth. I've worked in places where the management is more concerned with the security of the accounting department (which is paperless btw) than the security of the computer room down the hall. The accounting department had key card access, restricted hours, etc. while the computer room just had a regular old lock and the keys were kept in an office managers drawer.

      That harkens back to the days when payroll was paid by cash. Also, there's usually a small amount of petty cash in the accounting department.

      The principal risk, however, is physical access to the pre-signed company checks. (Or even the regular unsigned company checks.)

      Stealing a $20k server is extremely noticable... a financial thief can rob you blind for weeks/months before getting caught.

  17. Did anyone check ebay? by Neil+Blender · · Score: 3, Funny

    You might be able to get one cheap.

  18. stolen for money? by dj42 · · Score: 2, Interesting

    You have to assume they are going to sell them, but even so, it seems like if they show up on Ebay... If you're the kind of person that can pay for a DS3 connection to begin with, it's doubtful you need to be stealing that kind of hardware.

    --
    We are one consciousness experiencing itself subjectively. Back to you with the weather, Bob!
    1. Re:stolen for money? by seitentaisei · · Score: 0

      But if you think about it, you don't want this sort of thing hanging around your house. You would put them up for relatively cheap and pray for a non-FBI bite.

  19. hmmm by ambienceman · · Score: 0

    I wonder what they will get on the street for those parts. Or more importantly who would buy them/hire them to steal those. Or maybe they have their own plot for speeeeeeedy interent domination. Maybe they wanna mod their honda civic like the guys in the AOL Topspeed commercial. Hints?

  20. man.... by rune2 · · Score: 3, Funny

    Talking about stealing cable....

  21. To paraphrase Chris Rock by Anonymous Coward · · Score: 0

    "The positive side of crack is, if you're up at the right hour, you can get a DS-3 for $1.50."

  22. Re:Was it easy? Why was it not major? by linzeal · · Score: 5, Insightful

    I used to work in datacenters throughout Silicon Valley and let me tell you that unless they have hired some kick ass security guards than shit gets stolen all the time. Usually small stuff like PDAs, or the like. Once I heard of an entire rack being stolen when it was left outside, thank god they were empty. Security for these places should be like fortx knox, and the second the card was removed there should be of been a notification to the current on-site physical security detail. These systems will not work unless interopabrable measures are taken to make sure everyones eyes are wide open.

  23. so. by dj245 · · Score: 3, Interesting
    There are a few explanations.

    1. An employee stole the stuff and cut the wires to make it look like a vandal.
    2. A vandal actually did it and will soon sell the goods on ebay
    3. Spring is making the whole thing up to cover up their incompetence
    4. The entire world is on crack.

    Personally, I would vote choice 1.

    --
    Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
    1. Re:so. by PetWolverine · · Score: 1

      I'd go for choice 4. At worst, at least it's compatible with the others.

      But really, why do people say "they're on crack" when they hear about somebody doing something bizarre? Crack and cocaine are just stimulants; all they really do is give you more energy. If somebody's acting totally bizarre, I'd say psilocybin, mescaline and d-lysergic acid are better bets. If they're acting really dumb, they're probably just on alcohol or tetrahydrocannabinol (and other cannabinoids).

      Now, if they're talking quickly and jittering, I'd be more inclined to suspect coke, crack, amphetamine/methamphetamine, ritalin, caffeine, or similar drugs. Stealing network cards from a datacenter, though--I'd say somebody came up with that idea under the influence of good ol' cannabis.

      So I'd go for choice 4, but I'd modify it to "the whole world is stoned".

      --
      I found the meaning of life the other day, but I had write-only access.
    2. Re:so. by Woody77 · · Score: 1

      Put someone on enough caffiene and they get a bit... unstable. I think an OD of any stimulant (that doesn't kill you) could inspire some interesting behavior.

    3. Re:so. by Anonymous Coward · · Score: 0

      Ever experienced the logic of a manic person?

      It goes: I have urge x -> I will quickly fulfill it with the first thing that comes to mind -> Proceed with the next urge.

    4. Re:so. by HD+Webdev · · Score: 1

      Crack and cocaine are just stimulants; all they really do is give you more energy.

      You're on crack!

      (Someone had to say it)

      --
      This is not a dream, not a dream...we are transmitting from the year 1-9-9-9.
    5. Re:so. by dj245 · · Score: 1
      Put someone on enough caffiene and they get a bit... unstable.

      I have overdosed on caffeine several times and have not reached any unstableness. The worst I've gotten was a complete numbing of the face (which is considered normal for caffeine overdosers) and shakieness in the hands (also fairly expected). There is a point where cognitive functions are no longer 'cleared' but sped up to the point of incoherency. So there is a point where more caffeine will not in fact help you study for finals/ace a final better. For me this point is around 400mg of caffeine. (4 cups coffee equivalent). I have gone up to 600mg, but no additional studying potential was evident, and the added caffeine effect was distracting, and not helpful. Lethal dose, by the way, is generally considered to be 10 grams for 50% of the population.

      --
      Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
    6. Re:so. by nlindstrom · · Score: 1
      There are a few explanations.
      You forgot:

      5. CowboyNeal stole them.

  24. Sprint called... by Pranjal · · Score: 1

    ...they want their routers back!!

  25. How can they not figure out who did it? by NotQuiteReal · · Score: 4, Informative
    At least when I been into colocation facilities they had fairly rigorous check-in procedures.

    Sure, I could have brought in a stick and poked at lots of other customer's gear, thru the chainlink cubicles, but I mean, I was signed in and on camera.

    Check the log - when did the affected net go down and who was there at the time?

    It has got to be a short list of visitors and guards or somebody is really stoopid.

    --
    This issue is a bit more complicated than you think.
    1. Re:How can they not figure out who did it? by Anonymous Coward · · Score: 0

      The latter.

    2. Re:How can they not figure out who did it? by harlows_monkeys · · Score: 4, Informative
      At least when I been into colocation facilities they had fairly rigorous check-in procedures

      The phrase collocation facilities could cover a wide range of facility types. It could cover a datacenter like you are thinking of, manned 24/7, or it could be a small switching center where Sprint has leased a rack from Verizon that is normally unmanned unless someone from Sprint or Verizon actually is working on the equipment.

      There is one of the later near my apartment. Basically, a building smaller than a small house, with equipment from the ILEC and maybe one or two CLECs. I assume they have an alarm or security cameras, but someone could break the door, and be in and out, long before any police could arrive.

    3. Re:How can they not figure out who did it? by kfg · · Score: 1

      . . .somebody is really stoopid.

      In meatspace people don't like to make bets with me anymore. I have an aversion to gambling, thus I only take sucker bets. People learn.

      I'm inclined to think I'd put money on that hypothesis.

      KFG

    4. Re:How can they not figure out who did it? by tbase · · Score: 2, Interesting

      They could also keep an eye on this link.

      --

      666-607: 6th floor apartment of the beast
    5. Re:How can they not figure out who did it? by npsimons · · Score: 1

      At least when I been into colocation facilities they had fairly rigorous check-in procedures.

      Could have been social engineering. People get sloppy. Might also help to mention that where I used to colocate, they didn't have any kind of security like this. Sure, that was because it was a small hometown ISP, where everyone knew your face and name, but when I went to pick up my server, it was in the same room as an ex-employer's server. I could have easily pulled a couple of cables and walked off with it . . .


      Fortunately, I have no ill will towards my previous employer (I am still nominally friends with my old boss), and even if I did, I wouldn't be so petty, or stupid. I mean, if I walked out of there with two servers (or even one that wasn't mine), the friendly secretary probably would have asked me to stop, and if I hadn't, I'm fairly sure she would have called the police.

    6. Re:How can they not figure out who did it? by garwain · · Score: 1

      The datacenter that my server is in requires you to sign-in when you enter the building, swipe through to open the door, the have a key to unlock your cage. Not to mention that all the good stuff would require a LOT of work with wirecutters to get at. Also, you can't look around without seeing at least 2 CCTV cameras...

  26. OMGOMGOMG! by SCSi · · Score: 4, Funny

    Some dude just sold me some DS3 cardz for like $30 bucks a piece! But they wont fit in my computer PCI slot! Plus I cant find where my phone jack plugs into it!!@!!!!!@# Someone help me! Man, im gonna be able to download so much more stuff than my dialup connection!
    Thanks!~~~

    1. Re:OMGOMGOMG! by torgosan · · Score: 1

      Ebay, dude, Ebay.

      --
      "If you put the federal government in charge of the Sahara Desert, in 5 years there'd be a shortage of sand". -Milton F.
    2. Re:OMGOMGOMG! by crashnbur · · Score: 2, Funny

      Moderators, quick! Mod this up to put it on the FBI's radar. ;-)

  27. CASE SOLVED by jgaynor · · Score: 5, Funny

    How hard is this one to figure out?

    "late Sunday night a number of Sprint's DS-3 network cards were stolen from a Verizon colocation center at 38th St in Manhattan"

    This can also be read:

    "late Sunday night a number of MAJOR TELCO's DS-3 network cards were stolen from a RIVAL MAJOR TELCO colocation center at 38th St in Manhattan"

    The reward money can be sent to my spam-obfuscated email addy.

    1. Re:CASE SOLVED by jdawg · · Score: 5, Interesting

      You're not kidding. My employer's voice provider [a CLEC, not Sprint] blamed Verizon techs for "stealing some boards from the CO" when I called to ask about our phone outage today.

      VZ, especially in NYC, has a bad reputation for these antics.

    2. Re:CASE SOLVED by Anonymous Coward · · Score: 0

      yea, no kidding.

      I once saw a bunch of verizon employees actually get into a brawl with some cisco engineers over responsibility of a screwup...

    3. Re:CASE SOLVED by achinshoulder · · Score: 1

      I see the parent is rated funny. I rate it insightful. The lesson here is that if you want security in a VZ colo, you use VZ services and you lease VZ equipment.

      I see a lot of posts suggesting we monitor ebay or tracing the MAC address of the devices when they come online. Fughedaboutit. Those cards sleep with the fishes, somewhere off Sandy Hook.

    4. Re:CASE SOLVED by jrockway · · Score: 3, Funny

      You called to ask about the phone outage? Umm, how did you go about that :)

      --
      My other car is first.
    5. Re:CASE SOLVED by Anonymous Coward · · Score: 0

      On the other hand (or two) there are a few options:
      1) the Verizon folks were updating cards in their racks, and the tech realized they were in the wrong place after pulling the cards on the Sprint racks... maybe they didn't want to tell Sprint that they had done so, and then it took Sprint a long time to get Verizon to let them in to check things out.
      2) the conspiracy theorist in me wants to suggest that Verizon and Sprint are working on some ISDN or other backup connection promotions. :)

    6. Re:CASE SOLVED by raygundan · · Score: 3, Funny

      Perhaps he has one of those newfangled portable cellular phones in his automobile. I have heard that they can be as small as a briefcase.

  28. Sweet validation. by Shoten · · Score: 2, Funny

    Okay, to the person who posted this in response to my personal description of some of VeriSign's security...THIS is why!

    --

    For your security, this post has been encrypted with ROT-13, twice.
    1. Re:Sweet validation. by Dun+Malg · · Score: 1
      Okay, to the person who posted this in response to my personal description of some of VeriSign's security...THIS is why!

      Dude, Verizon is not VeriSign.
      Cripes, why is it any time one company comes up, someone thinks we're talking about the other? Read, people, READ!

      --
      If a job's not worth doing, it's not worth doing right.
    2. Re:Sweet validation. by Anonymous Coward · · Score: 0

      Is it an important part of the internet as it pertains to a significant chunk of the population?

      YES.

      Does it really matter who the fuck owns it if it can be waltzed into by any fucktard off the street and taken down so easily?

      NO.

      STFU, whiner.

    3. Re:Sweet validation. by Dun+Malg · · Score: 1
      Is it an important part of the internet as it pertains to a significant chunk of the population? YES. Does it really matter who the fuck owns it if it can be waltzed into by any fucktard off the street and taken down so easily? NO. STFU, whiner.

      Earth to jackass: when someone proudly points to this article about Verizon's colo as verification of VeriSign's lack of security, it's not WHINING to point out that they're being an IDIOT.

      --
      If a job's not worth doing, it's not worth doing right.
    4. Re:Sweet validation. by Anonymous Coward · · Score: 0

      Dude, are you mental? The original comment was regarding physical security of *datacentres in general*, not just VeriSign's datacentres.

    5. Re:Sweet validation. by nosphalot · · Score: 1
      I think the original poster was making a point about the need for physical security in data centers, and the that post just happened to deal with VeriSign.

      Cripes, why is it that everyone is so literal. Think, people, THINK!

    6. Re:Sweet validation. by Dun+Malg · · Score: 1
      I think the original poster was making a point about the need for physical security in data centers, and the that post just happened to deal with VeriSign. Cripes, why is it that everyone is so literal. Think, people, THINK!

      Yeah, you're right. I'm so used to seeing the verizon/verisign interchange that I totally misparsed this one. Didn't help that it's a "see I told U so!" post with a link to a post somewhere else. My bad.

      --
      If a job's not worth doing, it's not worth doing right.
    7. Re:Sweet validation. by Anonymous Coward · · Score: 0

      And now all of you can put your head between your legs and kiss your own asses.

      This thread ends at the underscored line.

      __________________

    8. Re:Sweet validation. by Shoten · · Score: 1

      Dude, read yourself...the post was about physical security in a technical environment. And trust me, someone who works at VeriSign doesn't confuse it with Verizon. :)

      --

      For your security, this post has been encrypted with ROT-13, twice.
  29. Physical Security by Qbans · · Score: 5, Insightful

    It all comes down to physical security in the end. You can have the most secure network, but usually anyone with physical access to the equipment can attack it in several ways. They can obviously steal it, or steal parts of it. Hot swap hard drives are great except when someone can run up to a server in an unsecured server closet and in a few seconds have all of a company's data in their hands. Obviously most hardware vendors also put password "backdoors" (think default Cisco configs) that allow you to override any passwords, or recover passwords from a serial port.

    Most people spend way too much time on thinking of attacks from the Internet or employees, but usually don't look at someone who wants to sabotage the equipment. Computer rooms usually contain all of the proprietary data in a company, and most companies don't put that much effort into patrolling computer rooms for people who shouldn't be there. Executives should make sure that physical security is part of the I.T. plan from the beginning and not an afterthought.

    I'm assuming in this case it was in a Verizon C.O. which are usually somewhat secure, but something like this could happen anywhere, computer sabotage I think will become more and more common in the future as businesses rely more and more on them.

    1. Re:Physical Security by Anonymous Coward · · Score: 0

      Hot swap hard drives are great except when someone can run up to a server in an unsecured server closet and in a few seconds have all of a company's data in their hands.

      Data? Who cares about data? They have all the expensive, fast, big hot-swap drives!

    2. Re:Physical Security by 3l1za · · Score: 1

      It doesn't "all come down" to physical security at the end.

      Sure you gotta have physical security but that doesn't obviate the need for other kinds of security; you gotta have it all!

      And there is a fair measure of physical security at most POPs I've been to; different providers have their racks in different cages (which are locked); access requires that you be affiliated with someone who's got their equipment there... and who has arranged for you to be there and gain access to their cage and their cage only.

      Inside jobs are the real risk, here, not outside jobs. Because inside jobs not only imply physical access but more importantly imply knowledge of the provider's network... and hence it's concentration points.

      "Most people spend way too much time..."

      The time "most people" spend focusing on attacks from the outside reflects the fact that... drumroll please... that's where most attacks come from!

      Rent-a-guards on every box from here to eternity wouldn't buy you that much.

    3. Re:Physical Security by Anonymous Coward · · Score: 0

      This is infact a Verizon C.O.

      They have had some issues before by the way - specifically with fires caused by over-heated powerlines last summer.

    4. Re:Physical Security by zerocool^ · · Score: 3, Informative

      Two cardinal rules of computer security:

      1.) If it's plugged into the internet, it can be hacked.
      2.) If they get to your hardware, you're fucked.

      I'm still voting that it's an inside job.

      ~Will

      --
      sig?
    5. Re:Physical Security by Qbans · · Score: 1

      That's the absolute truth and you are correct, I have seen my fair share of locked cages and properly secured rooms (with rent-a-cops of course). I've also seen the other side of the spectrum where it's pretty much a free for all once you're in the data center, specifically one in NYC that had no personnel on site, you get a key card from building security and no locked cabinets in the data center (they lost the keys to all of the cabinets). Of course I've also seen a lot of unsecured networks, without having to step foot even in the facility.

      Verizon C.O.s don't have much security once you get inside (at least from the ones that I have seen, there may be exceptions), usually the CLEC's equipment co-lo is not too far away from the Verizion equipment and that goes the other way around. Any employee in the C.O working for Verizon, or one of the CLECs could have stolen the DS-3 cards.

    6. Re:Physical Security by Qbans · · Score: 1

      I heard rumors that there is still a lot of the rubber covered power cable in old (AT&T | Bell | NYNEX | Verizon) C.O.s. Supposedly the covering falls off after you move it around a bit (usually during cable mining operations) and I'm sure it must put on quite a show (500 mcm cable & metal cable tray & low impedance battery string in the basement.) I remember hearing that the guys on the power systems being excited when they first came out with plastic watches since they wouldn't short out any of the exposed buss bars.

    7. Re:Physical Security by Anonymous Coward · · Score: 1, Funny

      Reminds me of a saying I picked up some time ago, "If you can boot it, you can root it"

    8. Re:Physical Security by qtothemax · · Score: 1

      It is VERY easy to cut a fiber line... I work at an ISP and we have to badger the telcos to fix it every time there is a fiber cut. The cuts are usually the result of a careless backhoe operator, and once it was determined the cable was actually cut by a lawnmower. Most are accidents, but it wouldent be hard to intentionally dig up some cable and cut it.

    9. Re:Physical Security by NuclearDog · · Score: 1

      Well, where my dad used to work, a datacenter, security was tight.

      To get in the front door, you needed a swipe card. There were two armed security guards right inside and a few elevators to upper floors, like a lobby. To get into the hallways that led to the datacenter, you had to swipe your card again (only employees needed in the dc had access, security guards didn't). Once you swiped your card, you had to open the door with your bare hand. If you attempted to cover your hand with a cloth or something, it would not open. Once inside, you had to walk past a security booth. There was a small (about 3' (about 9/10ths of a meter) sq) bit of bulletproof glass. The only other openings were a couple of small holes, just big enough for the guards to fit their shotguns through. After you had arrived here, swiped your card (and the guards verified that you are actually who is on the card, and are supposed to be there at that time), they would let you in. Once inside the dc, IIRC, the walls were 4' (about 1.2 meters) thick reinforced concrete. There were security cameras EVERYWHERE, and pressure sensors in the floor, so it could be tracked how many people were in there, and where you were. Once inside, the dc could be locked down by swiping your card, and entering a code. During a lockdown, it was only openable from the inside, the guards outside could not unlock it.

      I have to tell you, it was DAMN cool. If I had to pick a place to be during an invasion by another country, that would be it. I wish I could have seen it, but obviously with that tight of security, there was no way I was let in. Everything I know was heard from some of the employees.

      As for the physical security of my computers? A flatblade screwdriver and 2 minutes could get you to them (if your not afraid of a couple of small dogs). Pry the window open, pop the screen out, crawl in, and down the flight of stairs into the basement. I've broken in this way before when I had forgotten my keys.

      Anyways, I'm done now.

      --
      This statement is forty-five characters long.
  30. Joint terrorism task force??? by pdcryan · · Score: 5, Insightful

    being investigated by New York City Police and members of the joint terrorism task force

    That's just great. Not that I don't hope they find the crooks to walked off with this stuff - but once the word "terrorism" pops up, all of the sudden I'm thinking Patriot Act.

    These thieves might have gotten themselves some kick butt network hardware - but I bet they won't get themselves due process

    --
    Ryan Kennedy opposes comm
    1. Re:Joint terrorism task force??? by crashnbur · · Score: 1

      Messing with the internet crosses the line from intra- to interstate commerce. Now they're messing with Texas!

      But seriously, as much as the internet is becoming the the globe's central nervous system, I don't see much problem with a limited suspension of due process rights with a theft of this scale, even if it still just boils down to theft.

      The world is becoming increasingly dependent upon internet technology, and if we're going to set ourselves up to take a huge fall if any of it goes wrong, then we need to set up equally huge disincentives (obstacles and punishments) to protect us from the fall.

    2. Re:Joint terrorism task force??? by seanmcelroy · · Score: 1

      Well those people making a living off those terrorism grants have to have something to show for it to keep the money flowing (and their jobs going).

      Horray for big government

      --
      Be very, very careful what you put into that head, because you will never, ever get it out. -Thomas Cardinal Wolsey
    3. Re:Joint terrorism task force??? by Anonymous Coward · · Score: 0

      Well, yeah...
      The monument of victims of Stalinism in my town, a big bronze statue of a woman releasing an eagle. Somebody tried to saw the eagle's wings off. No, it wasn't political. It was about selling it as junk for booze.

    4. Re:Joint terrorism task force??? by Cid+Highwind · · Score: 5, Insightful

      But seriously, as much as the internet is becoming the the globe's central nervous system, I don't see much problem with a limited suspension of due process rights with a theft of this scale, even if it still just boils down to theft.

      I see a problem. Last year the Patriot act was only for infringing the constitutional rights of terrorists. Last week, it was only for terrorists and drug smugglers. Today it's terrorists, drug smugglers, and network card theives. Who's up next for loss of due process? People accused of robbery? Fraud? Speeding? Keeping overdue library books?

      If you start denying due process to anyone it erodes the rights of everyone. Now we're seeing that slippery slope in action.

      --
      0 1 - just my two bits
    5. Re:Joint terrorism task force??? by Malor · · Score: 5, Insightful
      So you only get due process if you're suspected of a LITTLE crime? Once you add a few zeroes after the dollar sign, the rules change?

      If we take away rights from whoever is unpopular with the government today, then we don't have rights, period. The whole IDEA of rights are to protect you from the government and other citizens. The worst scumbags in the world have rights. In fact, it's probably the scumbags who most SHOULD have them, because they NEED them the most.

      The measure of your rights is what you retain when your your government hates you and wants you dead. Rights that you have only when popular aren't rights, but privileges, which are revocable.

      Any group of people that values life over freedom is easy to enslave.

    6. Re:Joint terrorism task force??? by wibs · · Score: 3, Insightful

      So you only get due process if you're suspected of a LITTLE crime? Once you add a few zeroes after the dollar sign, the rules change?

      That's funny, after watching the way white collar criminals were dealt with (enron, etc), I was under the impression you were only given due process if you had a few extra zeroes after the dollar sign.
      And by due process I of course mean a red carpet...

      --
      If you get nervous, just remember that there are a few billion other people who don't really give a damn.
    7. Re:Joint terrorism task force??? by Weaselmancer · · Score: 1

      Nothing to add, you pretty much said it all. Very well said.

      Weaselmancer

      --
      Weaselmancer
      rediculous.
    8. Re:Joint terrorism task force??? by Anonymous Coward · · Score: 0
      Keeping overdue library books?

      Oh shit -- I am so fucked -- I think I'm gonna die.

    9. Re:Joint terrorism task force??? by Anonymous Coward · · Score: 0

      You're one giant bag of moron, aren't you? What do you gain by suspending due process? And what makes you so sure that the suspects are the actual criminals that you're so hell-bent on them, especially when you have due process suspended.

      We may not cry that hard when they suspect you of an act of terrorism and throw out due process. And don't give me that "I'm a law-abiding citizen" shit, the way you act it wouldn't be surprising if someone faked a few emails making you look like a supporter of terrorism.

      What will you do when Texas messes with you jackass? hmm?

    10. Re:Joint terrorism task force??? by Anonymous Coward · · Score: 4, Informative

      04/29/04 Washington Post

      Patriot Act Suppresses News Of Challenge to Patriot Act

      By Dan Eggen
      Washington Post Staff Writer

      The American Civil Liberties Union disclosed yesterday that it filed a lawsuit three weeks ago challenging the FBI's methods of obtaining many business records, but the group was barred from revealing even the existence of the case until now. The lawsuit was filed April 6 in U.S. District Court in Manhattan, but the case was kept under seal to avoid violating secrecy rules contained in the USA Patriot Act, the ACLU said. The group was allowed to release a redacted version of the lawsuit after weeks of negotiations with the government.

      "It is remarkable that a gag provision in the Patriot Act kept the public in the dark about the mere fact that a constitutional challenge had been filed in court," Ann Beeson, the ACLU's associate legal director, said in a statement. "President Bush can talk about extending the life of the Patriot Act, but the ACLU is still gagged from discussing details of our challenge to it."

      A Justice Department spokesman declined to comment on the case.

      The ACLU alleges that a section of the act is unconstitutional because it allows the FBI to request financial records and other documents from businesses without a warrant or judicial approval. The group also says such requests, known as "national security letters," are being used much more broadly than they were before the Patriot Act. The bureau has issued scores of the letters since late 2001 that require businesses to turn over electronic records about finances, telephone calls, e-mail and other personal information, according to previously released documents. The letters, a type of administrative subpoena, may be issued independently by FBI field offices and are not subject to judicial review unless a case comes to court.

      The ACLU's complaint focuses on the use of national security letters to obtain information held by "electronic communication service providers." The group says the letters could force Internet providers to turn over names, screen names, e-mail addresses and other customer information without proper notice to the people involved. The lawsuit names as defendants Attorney General John D. Ashcroft, FBI Director Robert S. Mueller III and FBI Senior Counsel Marion E. "Spike" Bowman. A second plaintiff has joined the ACLU in filing the lawsuit, but that plaintiff's identity has been redacted from the public copy of the complaint.

    11. Re:Joint terrorism task force??? by Quattro+Vezina · · Score: 1

      I don't see much problem with a limited suspension of due process rights with a theft of this scale, even if it still just boils down to theft.

      But what if the guys they catch turn out to not be the real thieves? What happens to the innocent people who'll get screwed over because they're denied due process?

      --
      I support the Center for Consumer Freedom
    12. Re:Joint terrorism task force??? by 2.246.1010.78 · · Score: 1

      Great posting, I wish I could mod you up further.

    13. Re:Joint terrorism task force??? by frankie · · Score: 1
      only given due process if you had a few extra zeroes after the dollar sign

      No contradiction. The guys (I'll go out on a limb and predict they're male) who stole these network cards are probably not millionaires, therefore they don't merit any special treatment.

      Unless it turns out this was intentional sabotage by Verizon. But then it leaves the criminal realm and turns into a giant vs giant civil lawsuit.
    14. Re:Joint terrorism task force??? by khallow · · Score: 1
      The world is becoming increasingly dependent upon internet technology, and if we're going to set ourselves up to take a huge fall if any of it goes wrong, then we need to set up equally huge disincentives (obstacles and punishments) to protect us from the fall.

      Better idea. Let's not set ourselves up for a huge fall in the first place. Ie, design the infrastructure intelligently. Then we don't have to suspend due process or engage in other stupid behavior.

    15. Re:Joint terrorism task force??? by TheWizardOfCheese · · Score: 1

      [...] I don't see much problem with a limited suspension of due process rights with a theft of this scale [...]

      A basic principle of justice in our society is that due process becomes more important for more serious crimes. That is because the consequences of mistaken judicial process are more serious in these cases. A cop can give you a speeding ticket while you are in your living room watching TV, and there's not much you can do about it. But if you're accused of murder, we're supposed to acquit you if there is a reasonable possibility that you're innocent - even if we think the odds are you're guilty.

      --

      "The good reader is a rarer swan than the good writer."
    16. Re:Joint terrorism task force??? by mangastudent · · Score: 1
      being investigated by New York City Police and members of the joint terrorism task force

      That's just great. Not that I don't hope they find the crooks to walked off with this stuff - but once the word "terrorism" pops up, all of the sudden I'm thinking Patriot Act.

      You're right to be concerned, but look at it this way: if you do accept the existence of terrorism (on Manhattan Island no less), then you need to accept the fact that units, especially "joint"ed ones need to practice. I suspect they're probably pretty sure this is not terrorism, but it gives them a great opportunity to do something real that's still not as pressured as an attack.

      And there's lots of kinks to work out, as a rule. "What's foobar's phone number?" "How come this radio system isn't talking to this one." Etc.

      Perhaps a "trust but verify" posture towards this is best....

    17. Re:Joint terrorism task force??? by crashnbur · · Score: 1

      [...] if you're accused of murder, we're supposed to acquit you if there is a reasonable possibility that you're innocent - even if we think the odds are you're guilty.

      Somewhere in that statement lies one of the many problems of our justice system. I can't pinpoint it, and it doesn't seem like anyone else can either, but imagine being the one witness to a violent murder -- you testify, you feel certain that the "suspect" will be found guilty and serve a life sentence in prison, and then because the jury thinks there is some reasonable possibility that he was innocent, he walks. Suddenly, there is a murderer on the loose, and you just testified on the public record that he is a murderer.

    18. Re:Joint terrorism task force??? by crashnbur · · Score: 1

      Limited suspension, I said. A slippery slope develops, naturally, but I never said people should be locked away and the key thrown away over it. Take prisoners, get to the bottom of it, move on.

      A significant problem with our legal system, and every other formal system in this country, is the amount of bureaucracy each task must go through. Simplify the process, design it more intelligently, run everything more efficiently, and a limited denial of some rights we used to hold dear will be an acceptable price to pay for actually getting it right.

    19. Re:Joint terrorism task force??? by crashnbur · · Score: 1

      What will you do when Texas messes with you jackass? hmm?

      I'll have my hit squad come after your sorry ass, just to make me feel better. Then I'll mess with Texas.

  31. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    White polo, khakis, and a Notepad.

    I've visited many many server rooms.

  32. Well, that explains that... by LostCluster · · Score: 4, Funny

    The outage affected area customers of Sprint Corp., including Ziff Davis Media Inc., the publisher of eWEEK.com.

    No wonder eWeek was the first on the story, even though it took them a while to publish it.

  33. Fiber Optics Cable Dynamics by thedogcow · · Score: 3, Interesting

    The article mentioned that the fiber optics cables were cut, which is a great business opportunity for people who "join" those cables together.

    100K or so a year for fixing fiber optic cables... I'm definently in the wrong field. Of course, those technicians have to be very precise or else you get refraction in the wire.

    --
    Yes! I listen to NYC Speedcore and do math at 3AM. I suggest you try it too.
    1. Re:Fiber Optics Cable Dynamics by glitch! · · Score: 5, Interesting

      100K or so a year for fixing fiber optic cables... I'm definently in the wrong field. Of course, those technicians have to be very precise or else you get refraction in the wire.

      I imagine fiber repair guys earn their pay, especially when it's out in some muddy hole and they have a couple hundred strands to fuse together while everyone is breathing down their necks.

      Just wondering out loud... It would be really cute if some of the fiber repair guys worked for the NSA. "Of course there's a blip in the TDR, that's where we repaired it." "Okay, nevermind."

      --
      A dingo ate my sig...
    2. Re:Fiber Optics Cable Dynamics by libra-dragon · · Score: 1
      100K or so a year for fixing fiber optic cables... I'm definently in the wrong field. Of course, those technicians have to be very precise or else you get refraction in the wire.

      They deserve more if they can keep refractions out of a "wire". Most other techs can only do this with fiber.

      BTW, the article doesn't mention anyone cutting the fiber optics cables. I doubt they did since DS3s are coax.

    3. Re:Fiber Optics Cable Dynamics by Grail · · Score: 1

      No threat to information security is as dangerous as underpaid trustees.

  34. Re:I hope we can catch those responsible by Demogorgo · · Score: 0

    the revalusion wont be televised lolllll

  35. the "fromt the" dept line blows goats by SuperBanana · · Score: 1, Funny
    from the it's-not-what-kind-of-bike-it's-the-kind-of-lock dept

    That's the best you could come up with? Yeesh. I've read it 4 times and I still don't get it.

    How about "from the quick-put-the-dilithium-crystals-back-in-klingons- approaching dept" or "quick-find-the-hamster-the-lights-are-going-dim dept"?

    Please feel free to reply with better department lines. Or an explanation about what the hell this whole bike/bike lock thing is about...

    1. Re:the "fromt the" dept line blows goats by zeno_2 · · Score: 1

      My guess is the issue is not that just a couple network cards got stolen, but they got stolen from a major colo. You shouldn't be able to steal stuff from a place like that.

    2. Re:the "fromt the" dept line blows goats by Anonymous Coward · · Score: 1, Informative

      It's an old adage in towns like Boston and New York, where bike theft is extremely prevalent:

      "What does a bike thief care about most? It's not the kind of bike-- it's the kind of lock on it."

      A really cheap bicycle lock can be broken very easily, sometimes with cheap wire-cutters or picked with a hairpin. As the above statement implies, even a near-worthless bike will be stolen if left unprotected (I've seen it happen) or with a substandard lock (I've had it happen to me).

      Conversely, a bike worth forty times as much as an old junker ($800 vs. $20) can be reliably protected by a lock that only costs twice as much as the cheapo version. (The $40 lock I have now vs. the $20 one I owned previously.)

      Applied to the datacenter which had three DS-3s stolen: they clearly didn't purchase a strong enough lock, considering how much their bike was worth :) (Once you factor in the cost of the equipment, the lost productivity and the bad PR, that's a pretty awful thing to have happen to your datacenter.)

    3. Re:the "fromt the" dept line blows goats by Anonymous Coward · · Score: 0

      Hysterical.

      The best illustration of what they're trying to say with that -- yes, long -- subject line was something I heard from a Cato Institute talk about encryption...

      Picture two homeless guys that live in carboard boxes... and data b/n them is transferred with an armored truck. Then you have how most users' systems are configured. Their home PCs are wide open yet they use MACing/encryption over SSL tunnels for certain message passing...

    4. Re:the "fromt the" dept line blows goats by fishbowl · · Score: 2, Interesting


      "A really cheap bicycle lock can be broken very easily, sometimes with cheap wire-cutters or picked with a hairpin."

      Yes indeed.

      I had a shop jack that was bicycle locked to an anchored steel pole. I didn't have the combination to the lock, so when I set out to liberate my jack, I prepared for the worst. I was ready to use the torch, a cutoff wheel from my bench grinder, heat/hammer/chisel. As it turned out, all I had to do was smack the chain with my hammer, using the jack base as an anvil. This was not a particularly cheap bicycle chain. But it was still a piece of crap. I don't think a motivated thief with a sawzall or a cutting disc will have much trouble with a U-lock. What's the Rockwell hardness of a Kryptonite lock?

      --
      -fb Everything not expressly forbidden is now mandatory.
    5. Re:the "fromt the" dept line blows goats by AO · · Score: 1

      How about it won't matter what type of bike you HAD, if you were using a cheap lock on your bike.

      Now for this article, it doesn't matter what was the name brand of the cards they HAD, because the cheap-ass lock/security was by passed.

      I would point out the spelling error in the subject line, but Im knot spill checqing mi pos ethere

    6. Re:the "fromt the" dept line blows goats by Anonymous Coward · · Score: 0

      I don't think a motivated thief with a sawzall or a cutting disc will have much trouble with a U-lock. What's the Rockwell hardness of a Kryptonite lock?

      Same AC as earlier here. I have no idea what the Rockwell hardness of a Kryptonite is, but the most disturbing thing I ever saw on my old Krypto U-lock was this: after one week of particularly cold winter weather (-5 deg.F) in good ol' Boston, I came out to find that my lock actually had a large crack on the edge, near the middle of the U-bend.

      The crack only went a part of the way through, so my lock was still useable, but it made me wonder why theives carry those giant lock shears or blades that make a lot of noise when they could just freeze the lock with a can of liquid nitrogen and shatter it with a ball-peen hammer. It would be smaller and easier to carry than shears and quieter than any sort of saw. I think the real weakness of Kryptonite locks may not be their hardness level, but their freezing point :)

    7. Re:the "fromt the" dept line blows goats by Everlasting+God · · Score: 1

      More importantly, will anybody care what a motivated thief does? When my roomate enlisted my help to free his bike after he lost the key to his U lock, we simply took the jack from his truck and busted the lock off the sign post. In broad daylight, on a street less than a mile from police headquarters, in front of a bar. Maybe one person even noticed us, and certainly nobody said anything like 'What are you doing?' of 'Is that your bike?' People just don't give a damn, and don't want to get involved.

  36. MOD UP! by papasui · · Score: 2, Funny

    Funniest damn thing I've read since Sasser.

  37. Re:Was it easy? Why was it not major? by Zocalo · · Score: 4, Funny
    A handful of WICs? Is that *all*? Lightweights! Real data center thieves take an entire mainframe, and *then* go back for a spare!

    Then again, I suppose it does take some network connectivity to build a Beowulf cluster...

    --
    UNIX? They're not even circumcised! Savages!
  38. I think I was affected! by jdawg · · Score: 1

    My employer gets our voice service from a CLEC [not Sprint] over a PRI. Phoe service went out at some point overnight and was out until 12:30ish today.

    When I called our CLEC to report the outage, they said that some cards were missing from the CO and that they had to replace and program them.

    Whew....this is a great link to send to everyone at work. They always think I'm so full of shit when I blame everyone but myself.

  39. Good riddance! by AtariAmarok · · Score: 0, Troll

    At least for just a little while, "on line" will mean on the internet only, and not "in line".

    --
    Don't blame Durga. I voted for Centauri.
  40. I was going to read the whole thing... by linuxpyro · · Score: 0, Offtopic

    I just couldn't stand those damn Microsoft ads comparing Windows and Linux...

    --
    Saying "I'll probably get modded down for this" in a post is the best way to get it modded up.
    1. Re:I was going to read the whole thing... by Anonymous Coward · · Score: 0

      you need to learn to use ip filters....

    2. Re:I was going to read the whole thing... by NuclearDog · · Score: 0, Offtopic

      What, the ones on eWeek, or the ones on Slashdot?

      I think Microsoft advertising how Windows is better than Linux\Unix on Slashdot is dumb.

      To a *nix\BSD zealot (which there are many of on Slashdot), that's like standing there eating a fine danish chocolate, given out free, along with a free beer, and having someone come up to you and offer you a half of one of those cheap easter egg chocolates for $49.99, telling you it is better because they say so.

      (I am neither a *nix\BSD or Windows zealot, this was not meant to claim that one OS is better than the other. Please don't start a flamewar.)

      --
      This statement is forty-five characters long.
  41. Re:This is really bad. by System.out.println() · · Score: 4, Funny

    What if a terrorist had got in there and blew up all our data.

    Then, if your hosting company isn't full of morons, you will restore it from the multiple backups.

  42. Re:This is really bad. by Anonymous Coward · · Score: 0

    every post that mentions "post 9/11 era" should be modded -1 JonKatz

  43. Re:This is really bad. by Mdalek · · Score: 1


    What if a terrorist had got in there and blew up all our data.

    I think he/she would rather be blowing people up tbh.....

  44. And I bet... by Anonymous Coward · · Score: 0

    the customers who lost service won't be credited for the time they couldn't use.

    Too bad, so sad, pay up $ucker!

  45. You forgot.... by System.out.println() · · Score: 2, Funny

    5. ?????
    6. PROFIT!!!!

    1. Re:You forgot.... by Anonymous Coward · · Score: 0

      Aw fuck forgot to post anonymously.

      Ah well, I got karma to burn.

  46. how can it? by Anonymous Coward · · Score: 0

    where i work, we have a pretty tight lockdown on the 500 desktops, servers and other devices on our network.

    what kind of asshat can just walk in and steal something like this?

    would it not be noticed right away?

  47. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    How's Level 3 working out for you?

  48. Working in the NOC by Anonymous Coward · · Score: 5, Interesting

    Imagine my surprise to see this up on slashdot. Last night around 10 PM mountain I saw a couple circuits go down in NYC. So being the enterprising person I am, I immediately decided that it must be a higher level service problem with our Provider. I call them up, tell them what's going on, and they (Qwest) complete my suspicions and confirm they are having a higher level outage problem. About 4 AM Mtn I called Qwest for an update. They informed me that they were still waiting access as the site was currently cordoned off as a police crime scene and they were still awaiting access. Wow... Cool... never heard that one before during the night shift.

    1. Re:Working in the NOC by FFFish · · Score: 1

      Dude, if you're up at 4AM wondering about circuits half the country away, you're in need of a new hobby!

      --

      --
      Don't like it? Respond with words, not karma.
  49. Big Deal. by spankfish · · Score: 0

    A handful of customers down? Who the hell cares! This isn't even remotely newsworthy.

    --

    NO TOUCH MONKEY!
  50. the verizon dude now sez by zenrandom · · Score: 4, Funny

    Can you ping me now? no?!!! oh shit!!!

  51. Damn those terrorists by Anonymous Coward · · Score: 0

    Bastards, finally trying to hit us where it hurts!

  52. What ads? by Anonymous Coward · · Score: 0

    I see just one black box, and one cream-white, where the ads should be.
    You mean you don't use Mozilla?

  53. Osama World OnLine! by GaryOlson · · Score: 3, Funny
    Osama Bin Laden is proud to announce our new Osama World -- over 120Mbs throughput for even the most demanding user! Building schematics, engineering specifications, maps, satellite photos, passport templates, and more INSTANTLY available to expedite your next business trip or publicity event.

    Large chat rooms available for to discuss with the experts on a variety of subjects: cultural assimilation, border crossings, language skills, practical chemistry, and MORE.

    GIRLS, GIRLS, GIRLS!!!!!

    Find the young Islamic girl of your dreams -- hajib optional. All credit cards accepted.

    Visit Osama World OnLine NOW!!!

    --
    Every mans' island needs an ocean; choose your ocean carefully.
    1. Re:Osama World OnLine! by 1000baseFX · · Score: 0

      This is funny!

  54. Re:I hope we can catch those responsible by Anonymous Coward · · Score: 0

    fucking disgusting

    may you go down in fucking infamy

    goddamn innocuous URLs

  55. Just one number? by Darth+McBride · · Score: 1

    Some customers apparently have service back but a number remain down -- it could be a while.

    I feel sorry for that guy!

  56. Re:Al Queda? by 3l1za · · Score: 2, Interesting

    I don't think this is off-topic at all.

    If the parent was trying to elliptically reference physical security at collo sites and what damage could be wrought at the hand of insider terrorists by knocking out a few BFRs, it's very much ON topic.

  57. Routers Missing - Happens a lot. by z_gringo · · Score: 5, Interesting

    I had two routers go missing from a transport room, which should have less people in and out. My name and phone number was all over the cabinet and the routers.

    To be fair, I hadn't connected them yet, so they were just in the cabinet not powered up, and I was going to bring them up the next time I returned to that location, which was going to be in about 3 months. All to often, in a production environment, when there is an emergency, anything not powered up is often considered fair game. I'm sure that the routers are still in use at the company, I just can't find them.

    Most colo space in our company is pretty secure. You'd have a pretty tough time getting in if you weren't supposed to be there. Even if you did get in to the colo space, most customers keep the stuff that they manage themselves in locked cages, inside the already secured colo space. Perhaps it was Verizon employees just trying to screw over Sprint. Or perhaps Sprint didn't secure their stuff properly.

    ------Can you hear me now?.

    --
    -- -- Warning. Do not stare directly at the sun.
    1. Re:Routers Missing - Happens a lot. by Anonymous Coward · · Score: 0

      well.... there are a lot of colo staff which will
      helpfully bypass all the security if you ask the right way, implying that you just forgot your badge, and the boss is on your ass to get this fixed now.

      they often will open the doors, and unlock the cabinets -- even though, of course, they shouldn't

  58. I am so NOT surprised. by pyite · · Score: 5, Funny

    Even though this is a Verizon location, the fact that it's Sprint equipment just makes it BEAUTIFUL in my eyes. Last time we had a problem with our Sprint OC-3, I called up the emergency number and got a voice prompt run around. Mind you, the POS interface was down/down with no sign of why it happened. Finally I got a "tech" who said the line was working normally. Then he said that he actually didn't know if it was up or down. At that point, I flipped out and told him to put a real tech on the line who could help me. Of course, that never happened, he instead forwarded it to their Layer 1/2 group. That whole experience left me with a horrible taste in my mouth. At a previous job, I had a mere T1 to Genuity. One time my boss needed a crossover cable and he took the one between the router and the firewall (can't make this crap up). Within mere minutes, Genuity called (this was the weekend mind you) and said "Ethernet0 is showing down, any idea why?" Let's see, Genuity is proactive with a T1, yet Sprint couldn't give a damn about an OC-3 POS line.

    --

    "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    1. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      Is that Piece Of Shit... or Packet Over SONET...

    2. Re:I am so NOT surprised. by retro128 · · Score: 1

      My company was with Genuity, too, and it was a mere 384k fractional. One day I had to shut down all of our equipment to put in our brand spanking new 4-post rack and not 10 minutes went by when a guy from the NOC called us and asked if we were having problems. Truly excellent service.

      We ended up moving up to a T1 but we got a better deal with Qwest. They are pretty proactive, also, and we have had no outages whatsoever on their side.

      --
      -R
    3. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      Unfortunately after Verizon dumped their stake in Genuity, Level3 bought them and sold off the hosting business to CSC. Not the same company by a long shot.

    4. Re:I am so NOT surprised. by pyite · · Score: 1

      Is that Piece Of Shit... or Packet Over SONET...

      LOL. Well, if it were anyone other than Sprint, it'd be Packet Over SONET. Since it's Sprint, I guess POS has a two-fold meaning.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    5. Re:I am so NOT surprised. by Monkeyman334 · · Score: 1

      One time we had a 6.8 magnitude earthquake and our server racks when flying, taking out the cables to our T1's (for dialup service). First, the provider calls out of chicago or something and asks why our T1's might be down. I said "Uhh ... well we just had an earthquake." At first he was kinda quiet like ... "is he kidding?" Combined with "boy do I look stupid." And then he finally said "Oh ... well that's probably it." Yeah, no shit.

    6. Re:I am so NOT surprised. by Scuff · · Score: 1

      It really is a shame the way that they went downhill, when after all this time people are still talking about how good the service was. The story in the parent post sounds rather familiar, I heard many similar stories while I was working for Genuity. And you're right, the Level3/CSC remnants of the company are nothing like what it used to be.

    7. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      Unless it's Genuity's end. When it's actually their problem they beat around the bush as well for a simple T1.

    8. Re:I am so NOT surprised. by tsm_sf · · Score: 2, Funny

      You need to bolt those puppies down, man. Those holes are there for a reason.

      --
      Literalism isn't a form of humor, it's you being irritating.
    9. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      Well yeah. We were on the bay on piers, so the building moved a whollleee lot. We had a regular office building on the 2nd floor. So drilling into the carpet didn't seem like a good idea. Although my boss made up for this with earthquake insurance. I think the racks are not attached to the walls.

    10. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      rr Genuity. Have had the same experience with global crossing.

    11. Re:I am so NOT surprised. by Anonymous Coward · · Score: 0

      No kidding, we had Sprint switch our OC-3 circuit over to the protect pair once cause they were seeing issues on the primary pair. The problem with this you ask? They never provisioned the protect pair, we went down. *sigh* Thank got for the other OC-3 through MCI.

      Anyone think it's ironic that Genuity emails you notices that your circuit is down?

    12. Re:I am so NOT surprised. by tsm_sf · · Score: 1

      Hi Dan. Now I know what you're doing instead of bolting down racks =p

      --
      Literalism isn't a form of humor, it's you being irritating.
  59. speaking of really bad... by Anonymous Coward · · Score: 0

    Forget their hosting company, look at their actual company...

    - it's a question that ends with a period
    - "had got in there"
    - "blew up"

  60. Re:Was it easy? Why was it not major? by jsse · · Score: 5, Interesting

    Security for these places should be like fortx knox, and the second the card was removed there should be of been a notification to the current on-site physical security detail.

    Ar....that remind me of my days in a research lab.

    Security guards downstair would be 'notified' whenever someone is attempting to reboot those SGI workstations at night. The problem was that SGI hanged up quite often. When this happen, we should either move to another workstation, wait til tomorrow morning. Sometime we had no choice but to trouble those security guards when we ran out of unhanged SGI. :)

    Initially those security guards were nice to us as we didn't do reboot very often - until someone decided to replace all those SGI workstations with NT Alpha. You imagine how irritating to have been called 2-4 times every night.

    Soon after the SGI were replaced by NT Alpha, those reboot-alarms were removed for obvious reason.

  61. Sprints Sarbanes Oxley Audit by Anonymous Coward · · Score: 1, Funny

    Gap #1 - Physical Security of Critical Equipment

  62. I would have bought it in a second. Cash. by Saeed+al-Sahaf · · Score: 3, Interesting
    Well, neither you nor I may have use for them, but when I worked for Internet Entertainment Group, we had 2 (yes two) OC-3 lines and 6 T-1s RUNNING INTO OUR SERVER ROOM, all ours. Porn, people. Seth would have bought them without even a second thought.

    My point is, Seth was not special, there are many many places to off high end network gear.

    --
    "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    1. Re:I would have bought it in a second. Cash. by Anonymous Coward · · Score: 0
      oooh.

      At last count we had 67 T-1s and 4 10meg cross-connects.

      And we're a tiny blip on the map. Get over yourself.

    2. Re:I would have bought it in a second. Cash. by Anonymous Coward · · Score: 0

      you just have a small penis.

      a tiny blip on the map

    3. Re:I would have bought it in a second. Cash. by Anonymous Coward · · Score: 0

      My home cable modem connection has more downstream bandwidth than my workplace.

      I wish we had an OC-3, our edge router is routinely pegged at 100% for 30 seconds or more at a time due to rat bastard script kiddies with fat pipes trying to get into it. Faster pipe would mean a faster edge router, one capable of dealing with these little &*@(#$&*()@#$

      And remember, just because megalifesuckingcorp has a large internet connections doesn't mean they'll do anything useful with them beyond outsourcing jobs to foreign lands.

    4. Re:I would have bought it in a second. Cash. by Saeed+al-Sahaf · · Score: 1
      At last count we had 67 T-1s and 4 10meg cross-connects.

      Yes, but do you run a porn site? Our conx might be small for Whatever-Multi_Corp, but for PORN it's a lot. Get over yourself.

      --
      "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
  63. I found it - by 4ginandtonics · · Score: 3, Funny

    on ebay

    Well... maybe not found it... but sure found a replacement!

    I wonder if Sprint can afford it.

    Hmm... I wonder if I just put myself, or them, on the FBI watch list...

    1. Re:I found it - by LWolenczak · · Score: 1

      Ewww.. thats ATM... ewwww... I'd hope the theifs would have been smart enough to take Serial DS-3 linecards and not ATM.... eww ATM... ewww.. must go clean self... feel dirty.

  64. The easiest hack by Combas · · Score: 1

    Like usual the easiest way to hack a system, or steal it for that matter is just to walk in and sit down.. or in this case pick it up an walk out.
    Sad how much crime there is now a days.

  65. Terrorists. Has to be. by Anonymous Coward · · Score: 0

    All you liberal beatnik whiners prattling on about "civil liberties" can just stuff it now. If President Bush had been allowed to install tracking chips in everyone's skulls like he'd asked back in 2002, this could never have happened.

  66. Wait... by Anonymous Coward · · Score: 0

    how are they going to get the new Sasser virus?

  67. New York Theives... If it aint locked down by acomj · · Score: 3, Insightful

    In the mid 1990s parked my GTI in the West 12 th with out of state plates. I was staying at a friends young and naive. Only thing I left in the car was the "Matt pack" in the front seat and a small bag of dirty laundry out of site in the hatch. The Mattpack was a 5 pound lead acid battery with some electronics and LEDs on top for charging and current/voltage control.. About the size of a soda can but square and black. The top contained custom electronics job by Matt Kahn electicrical engineer extrodinare.
    Who would want this? Its big its heavy and useless to anyone but me (It powered a flash for my camera.)

    Stolen.

    So were the dirty clothes.

    Basically if your not carefull or tie stuff down in NY it will be stolen. I got over it but I still miss New York

    1. Re:New York Theives... If it aint locked down by nomadic · · Score: 4, Insightful

      See, that's why New Yorkers don't have cars.

    2. Re:New York Theives... If it aint locked down by OneFootIn · · Score: 1

      I live in New York, and I can tell you this -- never ever leave anything visible in your parked vehicle, not even an empty bag. It will be broken into.

      New York, just like I pictured it -- skyscrapers, and everythang...

    3. Re:New York Theives... If it aint locked down by BCW2 · · Score: 1

      Spent 5 months in NYC in 77. Believe me, if it's bolted down and locked, it just takes a bit longer. If they want it they will get it. You can't stop them, even with an armed guard, he will get bribed.

      They may not have invented corruption in NYC, but they have tried to perfect it.

      --
      Professional Politicians are not the solution, they ARE the problem.
    4. Re:New York Theives... If it aint locked down by ebrandsberg · · Score: 1

      I can top this. In Hoboken, I was at a birthday party for one of my co-workers, and I had parked my shitty dodge neon on the street. When I came back, my back window had been busted out, and a black trash bag was stolen. Not my laptop in the other seat, not the netgear switch I hadon the floorboard. Guess what was behind door number three in that black bag? Garbage. In a Garbage bag. Go figure. Somebody had stolen my trash. I was pissed until I realized nothing else was taken (although the window was broken) then I laughed as I thought about some gang member doing some initiation ritual, with other guys watching, breaking my window, grabbing the bag and running. Image his surprise when he opened it. Yea, that cheered me up.

    5. Re:New York Theives... If it aint locked down by conway · · Score: 1
      Friend of ours rode his bike to work. My dad used to drive a car. So the friend asked my dad to put the bike in the car once, since he was afraid it'd be stolen otherwise. Put it in, locked the doors.

      The bike was gone in a few hours. (Car still there thankfully ;) )

      Yep, only in NY!

  68. Re:Was it easy? Why was it not major? by nolife · · Score: 5, Interesting

    One of those companies was our NY office ;)
    We lost our direct extension phone dialing ability to them (could use the full 10 numbers though) and they completely disappeared from our network. They still had regular internet connectivity through a 100mbit cogent line and were able to access other company resources through our other offices Citrix metaframe farms [note 1] with almost full capacity but we still recieved numerous calls at our office as only the road warriors were actually used to using that method for access. We have the licences, horsepower, redundancy, and data sharing ability for this exact reason, well actually in case of another terrorist attack but it works for this too ;)

    [note 1]
    One thing stood out above all of this. About a year ago, a discussion at a network/desktop meeting lead to a disagreement but eventually a gadget VBS workstation AD weenie created a script on the pc's to "automatically" select connections to our fellow offices Citrix servers through the internal network if you were plugged into the internal network. It was to "eliminate" any http or https confusion as you technically did not need https if you were already on the company WAN, I guess the KISS approach was not a challenge. That was all fine and dandy until today when the route was down. They eventually pushed out an undo so you could connect either way but I wanted to call up and laugh and say I told ya so but I decided not too. What comes around goes around.

    --
    Bad boys rape our young girls but Violet gives willingly.
  69. Re:Was it easy? Why was it not major? by SmackCrackandPot · · Score: 2, Funny

    That reminds of a story I once heard. Some thiefs hired a pickup truck and attempted to steal a high-voltage sub-transformer from the side of building. Of course, they had to cut through the copper wiring first. (Un)fortunately, they failed to consider the concept of switching the power off first, and got the shock of their lives.

  70. Does anyone know... by logical1010 · · Score: 2, Funny

    where the BOFH works now?

    --
    There is something wonderful in seeing a wrong-headed majority assailed by truth. ~John Kenneth Galbraith
    1. Re:Does anyone know... by Megane · · Score: 1

      No, but he's probably enjoying his nice new OC-3 pr0n feed right now.

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
  71. Probably being sold on the street by acomj · · Score: 2, Interesting

    Those tables they set up with books music , watches videos. They have all sorts of stuff. When I was there, they were selling movies that weren't out in theaters yet. Shrink wrapped and everything.

    1. Re:Probably being sold on the street by Megane · · Score: 1

      If I understand correctly, the catch phrase for NYC table vendors is "Check it out!"

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
  72. How they did it by Atario · · Score: 0
    1. Click Start -> Shut Down...
    2. Select "Shut down"
    3. Click OK
    4. Wait for machine to power down
    5. Unscrew case
    6. Unscrew card
    7. Pull card out firmly but gently
    8. Put card in large coat pocket
    9. Leave like nothing happened
    Seriously, though, how does someone steal a network card (much less three) so important to the operations of a major colocation center? Wouldn't the cards, oh, I don't know, be in use?? If they weren't in use, they couldn't have been that critical, could they?
    --
    "A great democracy must be progressive or it will soon cease to be a great democracy." --Theodore Roosevelt
    1. Re:How they did it by Osty · · Score: 1

      Seriously, though, how does someone steal a network card (much less three) so important to the operations of a major colocation center? Wouldn't the cards, oh, I don't know, be in use?? If they weren't in use, they couldn't have been that critical, could they?

      You assume the thieves cared about not damaging anything. I'd expect the sequence of actions was closer to:

      1. Unscrew case
      2. Unscrew card
      3. Yank the card out
      4. Put card in large coat pocket
      5. Leave like nothing happened

    2. Re:How they did it by FPCat · · Score: 1

      They would be hot swappable blade type cards. It would take about 2 seconds to pull them out, no screws needed.

      Does anyone know which manufactures equipment it was? The cards should be easy to identify if they turn up. Most major manufactures keep very detailed records of serial numbers.

    3. Re:How they did it by lucifuge31337 · · Score: 4, Insightful

      Dude...we're not talking about "network cards" in a PC. These are DS3 WICs, probably in 7206VXRs or the like. Not only is there no unscrewing of a case (other than the two thumbscrews at either side), but they're fine to yank while powered up.

      What's amazing (and it may not be the case, as we don't know all of the details, I'm sure) is that a simple correlation of the start time of the network down event and the sign-in log and security cameras (if any) hasn't been done to ID who did it. These facilities aren't particularly heavily trafficed by people on Sunday evenings, and they usually aren't all that big.

      --
      Do not fold, spindle or mutilate.
    4. Re:How they did it by cryosis · · Score: 0, Flamebait

      7206VXRs don't take WICs. They take PA-* cards.

    5. Re:How they did it by Anonymous Coward · · Score: 0

      Dumb ASS!!!!!!!!!

      Get a freakin clue!

    6. Re:How they did it by lucifuge31337 · · Score: 1

      As we don't even know WHAT kind of router is was, I'm using WIC in the generic sense, not in the Cisco sense. You know....Wan Interface Card. Not "WIC (c)Cisco".

      But everyone know how smart you are now, so that's good, right?

      --
      Do not fold, spindle or mutilate.
    7. Re:How they did it by cryosis · · Score: 1

      Ummmm, sure. But you brought up the 7206VXRs and WICs. So I'm sure where you could see the possible link between mentioning WICs and Cisco. What with many people with lower end Ciscos having experience with the Cisco WICs.

      But I suppose if you're set on reading my comment as an assault against you, fine.

    8. Re:How they did it by im+a+fucking+coward · · Score: 2, Interesting

      Pop a tile and crawl under the raised flooring. Push up on a tile in the cage of your choice, snag the wics, shove them in an anti-static bag, crawl back to your cage, shove them in your equipment and voila!

      Warning: The power runs under the flooring, so don't try this while wet.

  73. Forget co-lo. Go solo by rjamestaylor · · Score: 3, Insightful

    Or, if you can't afford solo, go managed hosting with a company like Rackspace.

    I do.

    I've been to one of their data centers. I met the former black ops specialist who's responsible for building them up and locking them down. Take a router? Ha. You can't get in door of the datacenter, much less into the datacenter.

    I'll go back to my own equipment when I need my 1000th redundant DB master. Then I think I can afford to build the redundantly powered, redundantly backed up, quadratically backboned, overly secured, continuously manned building that goes around important production servers. Funny how the facility is usually left out of the equation not only of the cost but of the requirements for 24x7 uptime.

    I've seen one too many people lingering in the XO co-lo facility on Barranca in Irvine, CA (last time I was there, anyway) reading the ID tags and ip addresses of the servers in adjacent cages. No thanks. I think I can begin to keep out Internet intruders, but physical accessors always have an advantage (cloop.o or not).

    --
    -- @rjamestaylor on Ello
    1. Re:Forget co-lo. Go solo by /dev/trash · · Score: 1

      You really don't think it was an inside job?

    2. Re:Forget co-lo. Go solo by DAldredge · · Score: 1

      Rackspace used to give tours of their Data Center(s).

    3. Re:Forget co-lo. Go solo by rjamestaylor · · Score: 1
      You really don't think it was an inside job?

      I was hoping you'd ask that. Yes, you. :) Anyway, that was my first thought: hide behind the plausible deniability. At a managed hosting facility if someone walks out with a server, drive array, whatever, there is one company to blame and one crew to investigate. Co-lo's are well protected when they shouldn't be and wide open when they should be. It's a toss up.

      I don't want people around my servers that I don't have a business relationship with so I can hold them accountable for screwing something up. (See, I did learn something from Darl.)

      I wasn't going to tell this but I will. One day a server at a non-controlled environment (it wasn't a big named place and no I'm not going to name it) went down hard. Call into the service line and the system was back on line in a few minutes -- not bad, I'm thinking -- log in, 'w' and uptime is ... 110 days. Eh? Call into service center to find out what happened -- the tech will have to get back to me. Turns out a large(r) sized customer (Fries with that?) in the adjacent rack had to squeeze in the small space between them and knocked our Cat5 cable out of the switch (which means the cable's snappy-thingy no worky-worky). Wait for it:

      A week later, he came back.
      That, my friends, foe, freaks and fans is when I decided to move to managed hosting with Rackspace.
      --
      -- @rjamestaylor on Ello
  74. I'm sure it's very easy to do by Anonymous Coward · · Score: 0

    Did you know that MAE East, the biggest eastern coast interconnection point between backbones, is in the back of an underground parking garage, behind some wire fance? Have you ever seen pictures of these co-location spots? They don't put network equipment in a high security vault, they put them in the basement, in corners, and basically wherever there's place. If anything, I'm surprised this doesn't happen more often.

  75. HoHoHo by clearscreen · · Score: 1

    I am now in the position to offer really cheap ds3 service in the NY area.......

  76. Possible solution by Pan+T.+Hose · · Score: 2, Interesting

    Could those routers be substituted, at least temporarily, with clusters of cheap PCs running NetBSD? It could be not only cheaper but also faster. The only downside would be the administration and power usage. I think that this is a very interesting idea.

    --
    Sincerely,
    Pan Tarhei Hosé, PhD.
    "Homo sum et cogito ergo odi profanum vulgus et libido."
    1. Re:Possible solution by Anonymous Coward · · Score: 0

      No.

    2. Re:Possible solution by Anonymous Coward · · Score: 0
      That reminds me of a story! Gather round.

      Back in the early 80's our University lost Internet connectivity to our CS building due to a fried router. Those things weren't so easy to obtain as they are today; we were looking an estimated week to ten days for a repair or replacement, at a cost of nearly $15,000 (!).

      A friend and I had an idea, which turned out to be brilliant, and very much like what you suggested. The Commodore 64 had just come out (this was October of 1982). We took a University credit card and picked one up at the local K-Mart for just under $600.

      I sat down at an old 12" black and white TV, and my friend sat down at a soldering workstation with a pile of chips and boards. Four hours later, we had turned that Commodore 64 into a perfectly-functional TCP/IP router. Routing tables weren't nearly as large then as they are today; everything fit nicely into the 64KB of RAM.

      It worked so well, in fact, that it wasn't until 1988 that it was actually replaced by a new piece of hardware--and I still use the C64 as a TCP/IP firewall for my office computer!

    3. Re:Possible solution by Megane · · Score: 1

      and I still use the C64 as a TCP/IP firewall for my office computer! GPL! GPL!

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
  77. But Quietly.. by bigattichouse · · Score: 4, Insightful

    Ahh.. I wonder if they will actually look on the other machines in the data center to make sure the theft wasn't just a cover for loading services/keyloggers/etc on the boxes through the data center... sort of a distraction with the fringe benefit of some sellable hardware.

    --
    meh
  78. Re:Was it easy? Why was it not major? by flewp · · Score: 2, Funny

    White polo, khakis, and a Notepad.

    I know there's a joke about bringing pico, nano, vi, etc getting you farther than notepad in there somewhere....

    --
    WWJD.... for a Klondike bar?
  79. 38th street datacetner by Anonymous Coward · · Score: 3, Interesting

    Ok - this is MY main pop - but im not a Sprint customer.

    I mention this because I have some anecdotal evidence that shows that as secure as the mantrapped and biometrically scanned datacenters are, they really arnt.

    Location: Exodus, New Jersey (its the datacenter that was in the big new building above the first path station in NJ - I just cannot remember the name of the building or the train station!)

    Time: summer 1999

    Issue: company needs to move 16 servers, 2 routers, a firewall, some switces and hubs out of the datacenter.

    Procedure to enter: get signed in via biometric security and massive checkin procedure at front door. To get to the front door, you have to walk by the freight elevator, as well as a little wooden door with a twist lock on it.

    How I got my kit out: I simply "borrowed" a hand cart, and walked out the back door (the little one I passed on the way to the checkin facility) The twist lock was on the inside, so I just un-locked it and walked out without anyone seeing me.

    This made me feel REALLY secure.

    1. Re:38th street datacetner by monsieur+Penguin · · Score: 2, Informative

      Ok - the above was me... As for the 39th Street Verizon CO - GUYS - this is NOT a hosting facility - this is a data CO.

  80. Thank God for Brooklyn! by gessleX · · Score: 1

    Out of the hospital and back at my terminal -- glad to be living in Brooklyn.

    Manhattan, :P

  81. Stolen or damaged? by Anonymous Coward · · Score: 5, Interesting

    Sorry for the AC.

    My business initally heard stolen equipment but we were later told that it was caused by damaged equipment from a "Verizon union employee".

    I was not on the call but that type of information is VERY specific and there is no gray area or room for interpetation there. I assume this is either totally 100% completely false or someone else knows something more.

  82. BOFH excuse #125: by Evil+MarNuke · · Score: 1

    We just switched to Sprint.

    --
    The journey is better then the end.
  83. DataCenter Security by kmahan · · Score: 3, Interesting

    The datacenters I've had gear located in have had great security. IN YOUR CAGE. They were very upfront about "if you leave your stuff laying around or your cage unlocked there's a good chance it'll be liberated."

    Admittedly in these datacenters there were cameras everywhere..

    And of course there are stupid people in these places -- like the folks (not from our company) that were wandering around and wondered "What does this Emergency Shutoff Button on this big power unit do?" Shut off a big portion of the datacenter. The result being certain folks permanently banned and better warnings/protection around the EPO buttons. (admittedly that's a tough one -- 'cause when you need to turn it off you REALLY don't want to waste time..)

    --
    Invalid Checksum. Retrying.
    1. Re:DataCenter Security by xoff00 · · Score: 1

      The datacenters I've had gear located in have had great security. IN YOUR CAGE. They were very upfront about "if you leave your stuff laying around or your cage unlocked there's a good chance it'll be liberated."

      Don't know which CoLo centers you've been frequenting, but almost every one I've been in (dozens, including MAE West and East, and lots of Worldcom/MCI centers) had pitiful security.

      Need *any* tool?
      Ethernet on another network?
      Spare ATM card?

      Just reach into another cage and grab it, or climb over the chain link fence into the next cage.

      On at least 2 occasions I got center personnel to give me access to a COMPETITOR'S cage to "troubleshoot a downed system" (i.e. I needed a tool).

      --
      ...Xoff
      Phineas J. Whoopie, you're the greatest!
  84. Re:This is really bad. by monsieur+Penguin · · Score: 1

    There shouldnt be ANY servers in this location. Infact, if a Terrorist got in there and blew it up, most of the businesses between 28th street and 48th street in manhattan could potentially lose their network connectivity. This is VERY serious.

  85. New Yorkers know.. by Anonymous Coward · · Score: 0

    This was an inside job. Probably Verizon engineers that were pissed off at Sprint for doing something "Non-Union". I remember once we had 4 Verizon PRIs in a building (big one in NY). Verizon was telling us we needed to "BUY" a new riser in the building because there was no capacity. Their price? $60,000.00 My tech guys and I went down to the Verizon closet at 4:30PM on Friday night (because we all know Verizon stops working at 4pm. The PRIs were provisioned alright.. We just flicked a switch on each interface card and Low and Behold! All the PRIs came up! Man.. were they pissed on Monday. The only way this could have happened was IF someone from the CO got pissed at SPRINT. Fucking Unions...

  86. Re:Was it easy? Why was it not major? by pballsim · · Score: 2, Funny

    My favorite one at my school was two people walked into a 'secure lab' - you needed an access card to enter into the room. The door was propped open to let some air in. They walked into the back room, picked up two servers, put it on a cart and left.

    This happened when the lab was completely full in the middle of the day.

  87. Physical security by hpgoh · · Score: 1

    Not just telcos, but government departments too, need to take their physical security more seriously. Anyone recall Australian Customs having some mainframes stolen late last year?
    Article 1
    Article 2
    Article 3

  88. Hmm... by retro128 · · Score: 2, Funny

    My spidey sense tells me that there are four really cheap DS3 cards to be had on eBay. Gotta go!

    --
    -R
    1. Re:Hmm... by Darthmalt · · Score: 1

      So how much do you think I *ahem* they could get on ebay?

  89. Haha by WTFmonkey · · Score: 1

    SODIMMM I can't see 'em!!!!! Ahahhahahaha

  90. Unmanned Vz facilities by Jayfar · · Score: 5, Informative

    Verizon has more unmanned facilities (at least at night) than you can shake a stick at. As a nocster for a regional ISP, I can tell you - when a circuit goes down at night, if the testing and troubleshooting w/ Vz requires access to a CO, fugetaboutit till daytime - you can escalate to hell and back, but ain't nothing happening (for emergencies, their on-call techs typically don't respond to pages). Compounding the problem, most of our other circuit providers have to use Vz for the last mile 'tail' circuit.

    1. Re:Unmanned Vz facilities by Cylix · · Score: 1

      Oh yeah,

      Nearly every facility I have been to has been unmanned. Pretty much a few locks and a good door are all that keeps in a lot of expensive equipment.

      It would be fairly trivial for someone to thieve a great deal of expensive equipment from any of the locations I know about.

      The only problem would be getting support on any of the stolen goods.

      None the less, ISP's of today are looking for ways to cut costs and stolen property is at the right price.

      --
      "You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
    2. Re:Unmanned Vz facilities by MattyCobb · · Score: 1

      after working at bellsouth i can say that applies to them also. but i dont think we ever got anything stolen.

      though I'd imagine stealing a DSLAM would be a bit tougher. ;)

      at any rate i can say that if someone stole equipment that resulted in my internet being down for multiple days... i would spend every minute of every one of those days hunting the bast down!

      --

      Matt
      You have 1 Moderator Point! Use it or lose it! Is that a threat? -vapid
    3. Re:Unmanned Vz facilities by Anonymous Coward · · Score: 0

      Then Verizon needs some new field techs. I know of a certain telecom company coming out of bankruptcy whose field techs call back in 15 minutes, or they (or their manager) will get a call at home. A call to one's manager's house at 2am is motivation to respond to pages. :)

    4. Re:Unmanned Vz facilities by Cramer · · Score: 1

      "free" is the right price. Stolen property is a Very Bad Idea (tm). I've always checked the serial numbers of all the "large" equipment I've ever purchased -- Cisco tracks the serial numbers of all their equipment, btw., and they make it a pain to get support on anything that has a void in that trail.

      Dot-com liquidations are the way most ISPs go. (You can find complete Lucent ATM switches on eBay. I once saw a Lucent 5ESS for sale -- buy has to come get it.)

    5. Re:Unmanned Vz facilities by Cramer · · Score: 1
      • though I'd imagine stealing a DSLAM would be a bit tougher
      Nah... wire (i.e. bolt) cutters, a big wrench, and a hand truck: unbolt the rack from the floor and wheel the whole mess to your truck. :-)

      (Heh. That's how one Telco/ISP I know installed them.)
  91. FP !!! by Anonymous Coward · · Score: 5, Funny

    FP!! Wtf though is up with these ungodly ping times here in NY.

  92. Isn't it obvious? by Godeke · · Score: 2, Funny

    The pirates who wanted more bandwidth have landed in New York!

    --
    Sig under construction since 1998.
  93. Switch room ops by JohnnyComeLately · · Score: 5, Interesting
    I worked as a switch tech at Nextel and later as second tier tech support at Sprint PCS.

    The physical security is usually pretty good. About on par with a normal Fortune 500 company, where you scan into areas that you have a reason to be in. The switch room is usually a little harder to get in, especially since 9/11. At Nextel, they actually hired armed guards for a short while when we almost hired an alleged Felon. A competitors security guard recognized him and tipped off our security. Turns out he was supposedly part of a crew that carted off entire racks of telecom equipment.

    Getting back on topic. The cards sound like they are the DS3 that pop into a larger fiber demark, like an OC12, 48 or 192. The cards are pretty small and just have coax-looking DS3 plugs on the front (in, out, and monitor). These aren't cards you could really ever use anywhere else. It almost sounds like someone accidentally yanked the wrong cards during maintenence. Although, most telecoms are very religious about not doing maint during the day (if the outage started at night, tho, I'd say it was a switch tech who screwed up).

    The reason I'd assert this is the theft was too small to be of any other value. Three DS3 cards aren't going to fetch much, and they're tainted goods. If you're malicious, you're not going to just grab 3. If you're damaging a competitor, grabbing 3 cards is somewhat silly. We commonly have a backhaul path in preparation for things such as this. For example, when I worked at Nextel a fiber dig broke a couple DS3s we had going through PacBell. Within 4 or 5 hours, we swung the traffic over to other DS3s that bypassed the carrier and area with the break.

    On a side note, it was also an eye opener that the "Protected, Redundant" Ring-topology that we were paying extra for was not being provided by the Telco. Let's just say there were some very colorful conversations going on between companies at the VP level.

    1. Re:Switch room ops by Anonymous Coward · · Score: 0
      I worked as a switch tech at Nextel and later as second tier tech support at Sprint PCS.

      The physical security is usually pretty good.
      Our current colo is with level3. A standard monkey wrench is all that stands between you and some serious hardware.

      Well. That and a level3 badge and the handprint that goes along with it.
    2. Re:Switch room ops by apayne · · Score: 3, Informative

      Well, depending on the make and model of the switch, the DS-3 interfaces could be rather spendy. We have 4 such Cisco 6500 series modules at my day-job. Together they cost upwards of $100K US 3 years ago.

      Someone mentioned tracking by MAC address... an OC-3/DS3 is a channelized TDM line. 28 DS1 channels of serial data. This is below IP layer. The only identification is going to be a serial number. This will only matter if someone attempts to connect it with a service contract with the manufacturer.

      Someone at least knew what to take. They could very well be one of the most expensive pieces of WAN hardware for their size and weight (often no larger than an average book).

      --
      -apayne
    3. Re:Switch room ops by Lodragandraoidh · · Score: 1

      "Although, most telecoms are very religious about not doing maint during the day..."

      That doesn't prevent someone from doing an uninstall on a circuit, either too early (before you cut over to new circuits), or the wrong circuit. I have had both happen to me.

      --

      Lodragan Draoidh
      The more you explain it, the more I don't understand it. - Mark Twain
    4. Re:Switch room ops by JohnnyComeLately · · Score: 1
      Heh, yep. I used to joke about chucking a handful of pennies into the BDFB. For the uninitiated, it's a huge power distribution unit with 00 gauge wiring going in and coming out...not high voltage, 48 VDC, but high amperage.

      Thats why it sounds more maintenance related than malicious. With a few keystrokes, literally, and about 5 minutes of time, I know how to bring an entire state's PCS traffic down. So why would I fool with 3 DS3? If I have compromised physical security to gain access to the cards, finding a spare console into the switch isn't a stretch.

      The other post is correct, growth can occur in the day. However, ops is highly discouraged, at least at Sprint, from doing any of it during the day for this very reason. I provided tech support for the DACS (digital cross connect for OC3 down to DS1/0), and even on protected, redundant cards I always instructed the techs to wait until the maintenance window to swap cards. Did they always listen? No. But that was the exception (which is possibly what happened here).

      I guess it's possible these were DS3 cards from an ATM, which would be more money. Again, why? 3 cards? You risk a felony and career for one month's wages (for a switch tech)? You'd be better off going on a credit card spending spree and filing Chapter 13. :D
      John

    5. Re:Switch room ops by Anonymous Coward · · Score: 0

      00 for cable? 2/0 is for wussies. We run 750 MCM in my neck of the woods!

    6. Re:Switch room ops by Anonymous Coward · · Score: 0

      I work at the Sprint NOC and I was there when this happened. THe reason we could not switch around the site is because we had no access. Every card in the bay was stolen, so the site was isolated. Every circuit that dropped at the site was down until the cards could be replaced. We did have spare cards from another site, but the police would not give us access until their investigation was over.

  94. Re:Was it easy? Why was it not major? by balubk · · Score: 2, Interesting

    I wish the article had indicated how secure the area was where the cards were stolen

    If people can steal routers from australian airport customs, this should be easy enough.

  95. This is crazy. by rice_burners_suck · · Score: 1
    This is CLEARLY an act of cyberterrorism. It effectively DESTROYED a portion of cyberspace, wiping out that portion of that universe.

    Mark my words, someone is going to be in deep shit for this.

  96. new Nigerian Scammer by Darthmalt · · Score: 4, Funny

    Hello owing to the death of my rch uncle I have come into possesion of some advanced technology. However due to the import / export restrictions I am unable to move it out of the country. I have some ds3 internet cards I will give you in return. Please contact me as soon as possible.

  97. Found them by Anonymous Coward · · Score: 2, Funny

    http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&cate gory=51264&item=3093986798&rd=1

    If sprint bids high, they can have it back in 20 hours.

  98. Re:Al Queda? by Anonymous Coward · · Score: 0

    It's off topic in as much that terrorists are NOT going to be knocking out BFRs.

    Terrorists like killing people.

    Removing some geek's access to pr0n for a few hours is hardly going to make targetting these things worthwhile...

  99. FOUND IT!!! by TRIEventHorizon · · Score: 2, Funny

    here you go:

    http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ca te gory=61832&item=3094887466&rd=1 :P

    --
    "And so the Trekkies were executed in the mannor most befitting virgins - thrown into volcanoes" - Futurama
  100. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    that makes no sense at all.

    why would a guard care if a machine booted? If it's booting, then it's still in the building and it's connected to the net.

    They should care if it's not pingable for a minute or two maybe.

    But even then, a security camera would be much more effective.

    all in all, I don't believe your story happened quite the way you think. sorry.

  101. Terrifying 911 call from incident by shadowmatter · · Score: 4, Funny

    911: 911 Emergency line
    Slashdot user: I just lost all Internet!!!
    911: Excuse me?
    Slashdot user: I was just about to first post to Slashdot, and I clicked "Submit," and nothing happened. I tried to ping them to see if I was dreaming, but got nothing, so I tracerouted and found out I couldn't get past localhost.
    911: I don't understa...
    Slashdot user: My god, this first post would have done wonders for my karma! And now I've been beaten by a goatsex troll...
    911: Sir, this line is used strictly for emerencies...
    Slashdot user: THIS IS AN EMERGENCY, DAMN IT!!! Send ambulences! DSL repairmen! Cowboyneal! I won't leave this computer until I get my Internet back, and I only have half a can of Mountain Dew to live on till then!

  102. Re:This is really bad. by cryosis · · Score: 1

    [...]but we have our own conectivity to ABOVE.NET[...]

    So you're outage was just the normal incompatance then?

  103. Re:This is really bad. by Zzootnik · · Score: 1

    You mean something like that final uber-plan from 'Fight-Club'?

    I suppose you wouldn't need to take down the entire building to take out all the credit information...

    I suppose those companies have a bit more security than average, though...

    --
    Sig currently under construction. Mind the gap....
  104. 38th Street CO by mclaugh · · Score: 3, Informative

    Like most/all Verizon Central Offices, security is via a keycard. If your keycard does not automatically grant you entry to the C.O., you must be manually allowed in by a guard. Each "guest" must sign in.
    38th Street C.O. is just about the highest trafficked C.O. in the world, in terms of Frame Terminations and the like. Being in Central Manhattan, near one of the major CoLoc Hotels nearby, only increases the data throughput on all the eqpt therein.
    Vandalism is most likely, performed by another company's techs.
    Also- when they say it's not considered a "major" failure, it's b/c Verizon is strictly governed by the PSC's guidelines as to what constitutes "major". These guidelines provide the framework that determines how Verizon (and others) are/can be fined each year with respect to how many/long outages.

  105. Re:This is really bad. by paraphase · · Score: 1

    Most of the colo's in the central offices I work in are used by many CLECs and IXCs... Joe Schmoe from Podunk Telecom would have very little trouble yanking a few OC-48 cards from a competitor, let alone DS3's.

  106. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    Cute -- it wasn't major, but they called in the terrorism task force anyway. That way they can overcharge the hell out of whoever they turn up. And, since the USA PARROT ACT specifies that, if an allegation of being "connected to a terrorism investigation" is made, wiretap requests have to be presented to a judge, but the "judge will sign" them, so there's no meaningful court supervision. "Get your camo on, boys -- we're going fishing".

  107. Re:Was it easy? Why was it not major? by IgnoramusMaximus · · Score: 3, Interesting
    why would a guard care if a machine booted?

    Not sure about SGI, but most standard UNIX machines can be rooted if you can get a custom boot floppy to boot so you can access the filesystem. NT is more difficult to compromise this way due to its convoluted/security-by-obscurity NTFS. That is not to say that NT is more secure, merely that this particular method is less useful.

  108. Small Business Killer by yintercept · · Score: 2, Interesting

    I lived in an apartment complex where a small company was offering broadband internet access (circa 1998). Oddly, the day after they installed several grand in upgraded equipment...some jerk off broke into the telephone room and liberated the new routers. As the thief obviously knew the install dates and what to take, they figured it was either an employee or person in the supply chain.

    The tiny company went out of business a few monthes later.

    It is sad that we can't just put things in locked rooms and call it good. Thievery like this is a major small business killer.

  109. Above.net by SQLz · · Score: 0

    My shit used to get stolen at Above.net in Tysons Corner all the time. Never machines or anything but like wierd stuff. Network patch cables, power cables. Someone even stole my "llama crossing sign".

  110. rkz is the man. by Anonymous Coward · · Score: 0

    Another excellent karma-whoring troll. I especially enjoyed the "post 9/11" and terrorist bits. Keep up the good work. Give my regards to the rest of GNAA.

  111. Stupid Security by rednox · · Score: 3, Interesting

    We used to have a rack in a very prominent facility with lots of excellent security measures.

    1. Security guards at the front desk to check photo ID passcards
    2. Swipe passcard at light-beam turnstile for entrance to facility.
    3. Passcard to activate elevator
    4. Coded lock on cage
    5. Locked server rack cabinet

    Unfortunately every one of these security measures could be easily bypassed.

    1. Security Guards didn't even look at you, let alone your photo ID passcard
    2. People swiped their passcard wrong so often that the guards just waved you through if they heard the beep of an improper entry.
    3. Anyone coming in at the same time as you would swipe their card, unlocking the elevator buttons.
    4. Our cage door lock stopped working (probably a dead battery), and I discovered that anyone with reasonably long fingers could easily reach the latch on the other side and open the door.
    5. I forgot the keys to our rack cabinet one time and a sharp tug easily forced the cheap lock to open.

    The security guards didn't even ask us any questions or look at our ID when we moved our gear out of there. I'm glad we did!

  112. All your... by cheesy9999 · · Score: 0

    All your DS-3 cards belong to us.

    --
    -tom
  113. Found 'em! by eltoyoboyo · · Score: 1

    The cops still tell people to check the local pawn shops. How can pawn shops compete with eBay? Here are some Newly listed today DS3 cards

    Sprint uses a lot of Nortel equipment. So does someone have a DMS-100 at their house that needed a couple of cards?

    --
    Have you Meta Moderated t
  114. Terrorism? Please..... by the-banker · · Score: 1

    The article indicates an anti-terrorism task force was investigating. How likely is this?

    Are we to believe that an al Qaeda sleeper cell was activated to inconvenience Midtown? Perhaps a domestic militia group was getting into the colo business.

    One of the worst reactions we have had from Sept. 11 is to immediately try and associate everything with terrorism. Next thing you know, MSNBC will have security cam footage and speculating on what happened like it was the damn Zapruder film....

  115. Hollywood Movie by macdaddy · · Score: 4, Funny
    From the makers of "Dude, Where's My Car?" comes this summer's romantic routing comedy, "Dude, Where's My Router Blades?", a traceroute through a DS3 interface's puberty through to it's first 3-way handshake.

    Vixie gives it an allow ACL.

    Cisco's "Packet" magazine calls it "this season's most secure flick".

    NANOG calls it "an interface to remember".

    (ignore the creative liberties. I was out of ways to tie things together...)

  116. The butler did it. by calags · · Score: 1

    The butler always does it.

    --
    Never attribute to stupidity what can be construed as a monopoly preservation tactic.
  117. When did Slashdot become Fark? by Trifthen · · Score: 1

    Internet Outage Ensues? Wow. I guess I've underestimated the amount of Slashdot/Fark crossover that's been happening recently.

    --
    Read: Rabbit Rue - Free serial nove
  118. Re:This is really bad. by Anonymous Coward · · Score: 5, Funny

    it worries me that people can just roll in there and steel our equipment

    I don't need to worry about that because most of my equipment is steel already. Except my Powerbook, which is aluminum.

    What if a terrorist had got in there and blew up all our data.

    That would be terrible. I remember one time when I spilled all of my data on the floor. I was cleaning it up for days; it's almost impossible to get data out of a carpet once it dries!

    For terrorists this would be a major blow to interest banking which they so abbhor.

    I'm sure Osama bin Laden is at this very moment plotting to destroy those infidel bankers that are keeping his billions secure and earning him a nice revenue stream through his investments.

  119. Sounds like an on call guy needed a card by bxbaser · · Score: 2, Funny

    Tech one. Shit its got to be the net card.
    Tech two. Where the hell we gonna get one at this hour.
    Tech one. I aint waiting here all night to get the thing online again.
    Tech two. Hey let me check one of those boxes over ther.....

  120. A new meaning by vorwerk · · Score: 1

    This gives a whole new meaning to the concept of "closing the backdoors to your network". :)

  121. No Comment by cyranoVR · · Score: 2, Funny

    I would write something, but unfortunately I live in NYC and can't get online to make a comment right now.

    Sucks... :(

  122. Not sure which ones they lost by INeededALogin · · Score: 0
  123. COs are typically rigorous on uptime/reliability by Anonymous Coward · · Score: 3, Informative
    and security is definitely a part of that. When I was in school in Pittsburgh we went on a tour of the local CO. This was a relatively major CO in that it linked long distance lines between the south and northeast corridors, and also was the first roll-out for DSL in the country. It also handled Internet backbone traffic for CMU and UPitt, so the need for reliability was high. The only reason we were allowed in was that our prof was nationally known in the telco industry.

    First off, let me just say that the one thing telcos get right is engineering for uptime and reliability. When companies talk about "dial tone" reliability, there's a reason for it. Think about it, when was the last time your phone stopped working (assuming you're still with a Baby Bell for local calls)? They have engineered triple redundancy for power for the station:

    1. Two independent power feeds from separate substations each running at 50% with a crossover switch. If one station goes down, the other flips to 100% draw with no downtime.
    2. Failing that, 2 diesel powered generators with enough fuel to run the CO for 3 weeks without interruption.
    3. Failing that, enough lead acid batteries to run the entire station for 13 hours. Some of those dated back to the 60s, but were maintained in pristine condition.

    Now, the one thing I will say is that co-located equipment was treated like it was coated in anthrax. It was maintained in a separate cage that could not be accessed from the main building. All co-located equipment was accessed from a separate street level entry that only had a single door and no monitoring. So if the stolen equipment was from Sprint in a Verizon CO, odds are that no one from Verizon was even watching it. (This was back when the 94 telecom bill was just coming into effect, so all of these rules were new...)

    For the main building, we had to be escorted at all times, and the engineer we were with got antsy if we bumped against any of the equipment (including some great old magnetic physical switches that were still in use for some old lines). But I wasn't too impressed with the overall security. Some locked doors and a security guard but nothing fancy. That said, if any of Verizon's equipment had broken/shut down I'll guarantee that they have an immediate monitoring/notification system.

  124. Re:Was it easy? Why was it not major? by plantman-the-womb-st · · Score: 1

    NT is more difficult to compromise this way due to its convoluted/security-by-obscurity NTFS Not really, all you need is a WinNT boot floppy with a few utils, none of the data is even encrypted.

    --
    Say bad words about my book, in cold oatmeal, or I shall sue!
  125. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    Root disk to ass-raping idiot

  126. Damn Hackers by Skjellifetti · · Score: 1

    The latest rumor on this situation is that some fiber optic cables were cut...

    Does this finally show that hackers and crackers are the same thing?

  127. Third world by SuperDry · · Score: 1

    Who'd you sell it to? A lot of this sort of stuff ends up in third-world countries where some mainstream companies are much less likely to care where stuff comes from.

  128. That reminds me... by arduous · · Score: 1

    ... I need to change the combination for my luggage!

    --
    "It's the smell! If there is such a thing." Agent Smith - The Matrix
  129. Re:This is really bad. by Anonymous Coward · · Score: 0

    "In this post 9/11 era I would have expected security to be tighter. What if a terrorist had got in there and blew up all our data."

    Yeah, because we all know that's their real target.

    Forget the military from various countries in Iraq, forget the tourist spots in South East Asia, forget the high profile meetings where high-ranking representatives will be attending, and forget world-famous landmarks.

    Forget them all because we all know the intelligence dossiers have been saying that the terrorists plan to break into your company, steal some equipment, and blow up your data.

  130. Re:Was it easy? Why was it not major? by IgnoramusMaximus · · Score: 2, Informative
    Not really, all you need is a WinNT boot floppy with a few utils, none of the data is even encrypted.

    What I meant is that it is harder to reset the root/admin password and/or install keyboard sniffers etc. And there is no such thing as a NT boot floppy, you mean a set of 4 uber-hacked disks at the minimum to get some sort of command prompt. NT is famous for being a royal PITA to repair from floppies, that is why there are bootable Linux CDs with (partial) NTFS support on them so you can at least try. Most people just pull hard-drives out and stick them into another running NT box in order to access them. In short, it is way more convoluted then a single floppy you can use to achieve that goal on most UNIX machines.

  131. What I want to know is... by bluethundr · · Score: 1

    Sprint's DS-3 network cards were stolen from a Verizon colocation center at 38th St in Manhattan.

    38th and what??? My dry cleaners...where I get my assortment of workmen's - varying professions - overalls...done is on 36th and 3rd...wanna play "name that contractor"?

    --
    Quod scripsi, scripsi.
  132. Hmm... by Max+Threshold · · Score: 2, Informative
    Anything look familiar?

    It's hard to imagine anybody would be so stupid, but then, it wouldn't be the first time.

  133. Re:This is really bad. by sharkey · · Score: 1
    Then, if your hosting company isn't full of morons,

    Well, since it's already been established that it was Sprint and Verizon that got pwned...

    --

    --
    "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  134. Re:Was it easy? Why was it not major? by rockmanac · · Score: 1

    In the place I used to work, the data center was right next to the help desk. (I worked in the help desk)

    I think that the datacenter was physically more secure than the actual systems in there. I mean, it was ID Access at all doors (you had to have your card specifically programmed for those doors) and the only people with keys was the head operator, the networking people, the CIO and her administrative assistants (who had the master building keys in their office)

    We actually had problems getting in there ourselves (we printed to a printer in the data center for some reason and not the printer in the office that we were attached to where the manager/analyst were at). Ok,, Our problem was mostly faulty equipment (our card reader sucked!) but the entire thing is still between 2 locked doors in most spots.

    -A

  135. Whoops! by jcuervo · · Score: 1

    Sorry 'bout that. Was in the wrong cage.

    --
    Assume I was drunk when I posted this.
  136. Re:Was it easy? Why was it not major? by shepd · · Score: 2, Informative

    chntpasswd + windows PE = Done & Done. :-)

    --
    If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
  137. I know where the routers went! by Anonymous Coward · · Score: 0

    Sure they were used by Sprint to achieve the Internet2 Land Speed Record (see this).

  138. Re:Was it easy? Why was it not major? by Megane · · Score: 1

    Uh, yeah, but these are SGI machines. IRIX was infamous for being insecure. If I wanted root on an IRIX box, I could think of better ways than a boot floppy.

    --
    #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
  139. Re:Was it easy? Why was it not major? by IgnoramusMaximus · · Score: 1
    chntpasswd + windows PE = Done & Done. :-)

    Well, thats a bootable CD not a floppy.

    This whole disucssion however is about splitting hair since one way or the other the only method to secure those boxes was to prevent any sort of booting from floppies or CDs in hardware.

    I still say that repairing/hacking NT is more pain then a UNIX box since to get something Windows-like to boot that is able to recognize normal hadware requires much more then a floppy, but as I said, its an academic discussion.

  140. my vote by Anonymous Coward · · Score: 0

    My vote goes to the disgrundled FORMER Verizon customer. Nothing beats waiting for 6 hours on sunday morning (starting at midnight) for the telco to simply cross connect circuits which were provisioned WEEKS in advanced.

    Note: This was my situation less than 48 hours ago. Mind you I had full access to the ds3 niu's, and was VERY tempted to get the issue escalated.

    IT'S NOT MY FUCKING CSU's YOU DUMB SHITS?

    Thanks.

  141. obligatory post.. by ctime · · Score: 2, Funny

    Dude, where's my card?

  142. Re:Was it easy? Why was it not major? by jhunsake · · Score: 1

    I'm just borrowing them. I'm going to return them, I swear.

  143. USA is becoming a police state by Anonymous Coward · · Score: 0

    Kind of like Germany in the 1920-1930s...

  144. Re:Was it easy? Why was it not major? by Stackster · · Score: 1

    Most PC:s/workstations can disable booting from removable media, have password access to the setup menu, and a physically locked case (so you can't connect other harddrives, or reset the password). If you don't do this, there's really no way to stop people from booting whatever they want, unless they actually break into the box (which could have some kind of alarm). And for any major OS (including Windows NT, and most *nix-likes), there are bootable CD's/floppies with grandma-simple tools to steal or set passwords.

    --

    There are 010 kinds of people. Those who understand octal, those who don't, and 06 other kinds of morons.
  145. OMG! by Azure+Khan · · Score: 1

    H4x0r5 really DID stoeled their MEGAHURTZ!!11!

    --

    --- I'm going sane in a crazy world.
  146. Re:Was it easy? Why was it not major? by linzeal · · Score: 1

    Well we even had biometric scans, but it all came down to the people that let people in the building and go past those measures. It was the dot com era, every salesman and his brother brought chicks down there to show off the servers. I was not hallucinating during those years, was I?

  147. Re:Was it easy? Why was it not major? by ComaVN · · Score: 1

    then again, the MS-DOS editor (no, not edlin) was better than notepad too.

    Although I never quite understood why you needed qbasic.exe to use it.

    --
    Be wary of any facts that confirm your opinion.
  148. Re:Was it easy? Why was it not major? by Wire+Head · · Score: 1

    Better question...

    Are the theives just plain stupid?

    Network cards have MAC addresses.
    Anyone caught plugging them in will
    be caught red-handed.

    --


    WireHead

    The previous message was created with 100% recycled words.
  149. Re:Was it easy? Why was it not major? by Felinoid · · Score: 1

    However SGI machines aren't PCs and may not provide any means of disabling the removable media.

    Config BIOS: Douptful you'll find this ability on a machine that is nither a PC nore inspired by PC design.

    Unplug floppy: Hardware fault drive not responding.
    Typical design includes a full hardware dignostic before trying to boot anything.
    Don't want to boot on a computer experencing malfuctions.
    (Even more so when the costummer has to come to you for repacement parts)

    Floppy insert lock: To obveous.
    Some times you'll never convence a burrocrat that a $15 solution will work better than a $100 solution.

    This would go dubble for any lab that wouldn't even THINK of trying to figure out what's crashing the SGIs (Or Alphas) in the first place.

    --
    I don't actually exist.
  150. Cisco 7200VXR stolen from GlobalCrossing by Anonymous Coward · · Score: 2, Informative

    This was back in 1999 or 2000. Back when I worked for Primenet, which later become GlobalCenter, then Frontier... bla bla bla, then Global Crossing, they had a blackout in Michigan. When they sent a tech out to check it, they found that the entire router was gone! It was a 7200VXR with a couple of DS1s and DS3s. Those customers were down for about 60 hours while a new router was purchased and shipped out. The POP was owned by someone else, and they didn't have a camera or recorded check-in, so we have no idea who did it. Insurance paid for the router.

  151. Crackheads? by LightwaveNet · · Score: 2, Funny

    Crackheads? It's not like it's a sparkplug

  152. Don't laugh by Anonymous Coward · · Score: 0

    Don't laugh... I bought an Aegis cruiser from a street vender just last year. I know it's just a cheep Korean knockoff, but it still looks nice, goes really fast, and can blow up small fishing boats.

  153. Re:Was it easy? Why was it not major? by torpor · · Score: 1

    assuming you could get to them. where does it say these sgi boxes were on the 'net?

    --
    ; -- the corruption of government starts with its secrets. a truly free people keep no secrets. --
  154. Brainstormming how to improve security by Felinoid · · Score: 2, Informative

    What what I've read we seam to be dealing with an unmanned data center.

    What should be done is add nothing more complex than automated net camras.
    Program them to automaticly feed all motion into a server in a manned (and guarded) data center.

    Put a minnor firewall between the two (just one that says it can only send data to ONE box and NOBODY talks to it..)

    Then someone walks into the data center and SMILE!!!

    Make sure the camra is dual mode.. night vision and color.
    Or if you can only get em in color (in fact maybe this is a better idea) add motion detection flood lamps.
    Now it's SMILE while your blind and have no choice but to stand there and let the camra upload your picture to the data center.

    The receaving server verifys the repair/service scedual and if nobody should be there a random on staff security guy is given the pritty picture.
    From there they can send down police or security staff.

    Security staff.. Becouse I know in a few weeks after this is installed SOMEBODY is going to do a service call with out checking in or someone is going to forget to enter someones repair scedual.

    I'm also sure service staff are going to stock up on sunglasses and learn to open doors with eyes closed.

    --
    I don't actually exist.
  155. Re:Was it easy? Why was it not major? by RollingThunder · · Score: 4, Insightful

    It's all about acting like you're supposed to be doing what you're doing. Act like you own the place, and nobody will say a thing to you.

  156. Re:Was it easy? Why was it not major? by raju1kabir · · Score: 1
    Network cards have MAC addresses. Anyone caught plugging them in will be caught red-handed.

    Ethernet cards have MAC addresses. That is a subset of "network cards" and does not include the DS-3 interface cards that the article is about.

    And, of course, even if it did, MAC addresses are only visible to someone on the same side of a router as the card in question.

    --
    "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
  157. Silly rabbit by Evil+MarNuke · · Score: 1

    We're talking about Sprint. This is no profit in a Sprint equation.

    --
    The journey is better then the end.
  158. Proper security needed by Anonymous Coward · · Score: 0

    At our old co-lo, the server room had a door directly out to the city streets and no guards.
    At our new place, there is a guard. We only get in with a special picture id card which we deposit in a drawer from the outside, then we get in through a scanning device(think plastic tube with 2 doors) and when we get in, we get another ID which only gives us access to doors inside and not outside. plus all doors are monitored with cameras at all times. all racks are monitored by cameras which records any activity.
    I am happy we switched co-lo.

  159. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    With physical access to the system I can do anything.

    Locked case? Pfft. Ever hear of a little thing called a drill? If not, how about a lockpick?

    Password to BIOS setup? Remember, the case is open, so all I need to do is shut down, bridge the necessary contacts, then welcome to NT land.

    After that the bootable CDs, etc. come into play. Without physical security, you have no security at all. Everything else is only going to stop someone with enough skills to be a script kiddie. And let me tell you, those kiddies, they're fierce into those CD-Rs, yo.

  160. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    That works with most women too, you know...

  161. No problem by clone22 · · Score: 1

    Fortunately, Sprint provides online outage reporting.

    --
    Ask me about my vow of silence!
  162. The new pepsi Mars commericial! by Anonymous Coward · · Score: 0

    I was watching TV last night and saw a new pepsi commercial about the Mars rover. The 3rd shift geeks are asleep while one guy is enjoying his pepsi while he watches the rover beep! beep! along at 2 inches/sec. While he's slugging it down, all of a sudden you hear air wrenches going off. When he looks back at the screen, you see all six tires on the mars rover are stolen with the martians running off in the distance with the tires. I'm waiting for the new ET commercial so that when they are trying to call home, the DirectTV satellite dish and set top box are stolen and he gets a disconnection signal!

  163. New open source routers! by Anonymous Coward · · Score: 0

    Hmmmm, this gives new meaning to the story about "open source routers a threat". I guess the thieves thought "open-source" mean't free as in beer!

  164. Anyone notice... by AnomalyConcept · · Score: 1

    When I loaded up the page, the advertisement frame that was displayed inline with the page was blank. ;-)

  165. More sayings by swb · · Score: 1

    I like that!

    My personal favorite is "They can never pay me less than I can work." I forget where I picked that up, but I think it was (no +5 Funny intended) a catchphrase from Soviet Russia, said of incentiveless makework jobs.

  166. knowing new yorkers... by Anonymous Coward · · Score: 0

    they'll whine that it's terrorism.

    why don't you idiots go outside or something while you wait for your connection to be restored....

  167. Windows 98 SE boot disk by OldSchoolNapster · · Score: 1

    Windows 98 Second Edition boot disk is by far the best boot disk you will ever find. It reads FAT32 and NTFS. It even reads your cdrom. It is one floppy disk. One day, I hope to combine my DNA with this disk in a gruesome mateing of man and removeable media.

  168. Bummer... by Greyfox · · Score: 1

    Sprint's gonna have to get some more routers. Quick, someone open another box of Post Toasties. I'm honestly surprised that anyone even noticed a difference in their performance. Every time I have network connectivity troubles, it seems like the culprit is some Sprint router dropping my packets on the floor.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  169. Re:Was it easy? Why was it not major? by Alioth · · Score: 1

    Actually, NT is equally trivial to compromise. NTFS is not rocket science. Using a Linux-based rescue disk, I've done things like reset administrator passwords and re-enable local administrator access on boxes that people have locked themselves out of.

  170. Re:Was it easy? Why was it not major? by Beowulf_Boy · · Score: 2, Interesting

    Not to sound stupid here, but I believe you can change MAC addresses. My school makes me report my mac address to plug in my computer, so I just swapped MAC's between my little linksys router and my desktop after I reported it, and then put all my equipment behind the router.

  171. Re:Was it easy? Why was it not major? by sjames · · Score: 1

    NT is more difficult to compromise this way due to its convoluted/security-by-obscurity NTFS.

    Not really! I've seen CD images that when booted will automatically change the admin password in a few seconds (plus boot time of course).

  172. and they said... by sv25 · · Score: 0

    ... $5 wiresnips were useless.

  173. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    where i work security guards arent notified of nothing other than unauthorized visitors entering into the doors. and we monitor for environmental alarms aka door opens, door closes, temp rises, temp lowers, power failures etc etc. obiously sprint wasn't monitoring very well because here at my noc when a door opens were on the phone unless its scheduled maitenance.

    and when an active card is pulled from a shelf we see alarms immediately. i dont think sprint is keeping a good eye on things in NY

  174. Re:Was it easy? Why was it not major? by Stackster · · Score: 1

    Well, if not a PC, I would at least consider it a _workstation_. And at least the admins setting the stuff up, should be able to access the "BIOS setup" (or something equivalent, which I just assume it has somewhere). You can be sure that anyone trying to hack it will know how too.

    If there's no way of "logically" disabling booting from floppies (or other removable media), you'll have to disable it physically. Unplug/remove it, or fill it with plastic padding (my favourite for dealing with those 3½" plastic pieces of hell).
    Or just use one of those locks. Of course it's obvious that it's there, but it works. It can't easily be removed without destroying the floppy drive, which means that you still can't access the floppy, which is the whole point.

    --

    There are 010 kinds of people. Those who understand octal, those who don't, and 06 other kinds of morons.
  175. Re:Was it easy? Why was it not major? by scenic · · Score: 2, Interesting
    Screw the implications for connectivity... if it's easy enough to break into rooms like this to steal crap... how hard is it to install sniffers and loggers? How often do people check the unmanned rooms? I realize the amount of data that would be generated, but presumably you could filter or do something with fast enough hardware or specialized equipment (I'm thinking big budget crime, not podunk credit card theft).

    That bugs me more than people bringing down the Internet via theft...

    sujal

    --

    politics, food, music, life: FatMixx

  176. Re:Was it easy? Why was it not major? by Pii · · Score: 1
    These weren't WICs...

    They were (4) DS-3 modules, which are not cheap.

    What's more, they were probably not hot-swap parts. I wonder if the bandits had the courtesy of shutting down the router before making off with the DS-3 cards.

    I certainly hope Verizon has to pay Sprint for the loss, both the replacement cost of the cards, and any costs incurred by Sprint associated with the customers affected by the outage.

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  177. Re:Was it easy? Why was it not major? by Pii · · Score: 1

    There are no MAC addresses on serial connections...

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  178. Anyone else read that as by cfortin · · Score: 1

    'Spirit rover stolen'?

    Damn martian punks ...

  179. Re:Was it easy? Why was it not major? by Tore+S+B · · Score: 1

    Although I never quite understood why you needed qbasic.exe to use it.

    edit.exe just loaded qbasic.exe and disabled the interpreter. Also, help.exe did the same, but had some extra functionality (hyperlinks!)

    --
    toresbe
  180. Re:Was it easy? Why was it not major? by Tore+S+B · · Score: 1

    The guest account was enabled on SGI machines. You could just telnet localhost and and you'd be r00t.

    --
    toresbe
  181. Re:Was it easy? Why was it not major? by the_weasel · · Score: 2, Insightful

    Right.

    Now go back in time to when NT Alpha first came out. Where is your magic Linux-based rescue disk now? I remember when the first of those came out.

    Just because its trivial now does not mean it was trivial then.

    --
    - sarcasm is just one more service we offer -
  182. Did anyone else see this? by crashnbur · · Score: 1
    From a slightly updated eWeek article:
    Last summer, a major part of the Northeast U.S. was hit by a power outage that knocked out telecommunications and networks in several states. A recent report blames some of the problem on IT policies. Click here to read more.
    Apparently someone didn't read the article that carefully though, because it goes on to say it's "not an IT issue, it's a business issue".

    Anyway, the article mentioned it, and I thought it to be a useful comparison. Once again, the problem doesn't seem to be IT, but poor preparedness on the business end of things that allowed this outage to occur.
  183. Moi? Why? by /dev/trash · · Score: 1

    Why?

  184. Re:Was it easy? Why was it not major? by torpor · · Score: 1

    Again ... assuming you could get to them ... what about those guards?

    --
    ; -- the corruption of government starts with its secrets. a truly free people keep no secrets. --
  185. Re:Was it easy? Why was it not major? by hesiod · · Score: 1

    > > Act like you own the place, and nobody will say a thing to you.
    > That works with most women too, you know...

    I think you have that backwards... Act like you own the place & women flock to you for their ritual beatings. Act respectful and don't steal, they ignore you.

  186. The Onion, right? Right? Uh oh. by RobertB-DC · · Score: 1

    Patriot Act Suppresses News Of Challenge to Patriot Act

    Oh, man, that Onion. Their stories are always such a hoot. I've got to go check out the original, see if they've got a picture to go with it.

    Oh, crap.

    I'm outta here.

    --
    Stressed? Me? Of course not. Stress is what a rubber band feels before it breaks, silly.
  187. Re:Was it easy? Why was it not major? by TheLink · · Score: 1

    Well if they weren't hot-swap parts and they didn't switch off the router then those hot parts might not be that hot ... :)

    --
  188. Re:Was it easy? Why was it not major? by d-rock · · Score: 1

    Well, they were actually smaller machines, both fit on a cart. I remember the story and they weren't big iron in the sense that they took up a whole room, more in the software they run (I think they were smaller AS/400s or something similar).

    Derek

    --
    Don't Panic...
  189. Re:Was it easy? Why was it not major? by Alioth · · Score: 1

    Dunno about NT Alpha, but not long after NT x86 was out, we had 4 floppy disks that'd boot you to a NT command line where you could reset passwords and generally mess around with the entire FS unauthenticated. I'm sure the same could have been done for NT Alpha (it was after all generated using the NT install disk)

  190. Re:Was it easy? Why was it not major? by DirkGently · · Score: 1

    I beat Level 3. The end guy was hard.

    --

    I keep trying to pick fights, but I can't shake this Excellent karma.

  191. Re:Was it easy? Why was it not major? by Cramer · · Score: 1

    Any telco grade network gear will support hot-swaps. In fact, 99% of the stuff in a telco co-lo is hot-swapable[*] and redundant... including the power plant.

    [*] Cisco definition: you don't have to turn the power off to swap cards. The router may require a reload (read: "it will crash") afterwards. (There have been thousands of bugs w.r.t. "OIR".)

  192. Re:Was it easy? Why was it not major? by Tore+S+B · · Score: 1

    You mean the ones in the basement, waiting for the reboot alarm to go off?

    --
    toresbe
  193. Re:Moi? Why? by Anonymous Coward · · Score: 0

    (was I? think about it)

  194. Re:Was it easy? Why was it not major? by GSloop · · Score: 3, Informative

    Jeepers...

    That can be a boot floppy too.

    On a NT/2000/2003 box, PDC/AD-PDC etc, I can get complete root access in less than 10 minutes, provided I can boot from CD/floppy. (If the file system is encrypted, then no go, but I suspect that is very rare.)

    Sure NT/2000 can be a pain to *fix* if the filesystem trashes a bunch of things. But we're talking about a system that is functioning properly.

    And with the shatter exploits, priviledged escalation is trivial on a Win box.

    Frankly, for most boxes, local access is game over, but for Win boxes, it's pretty dang easy. Just do a google search for "NT reset password" - the first link is a free-ware utility that will do it easily for you. Ironically, it uses Linux and Linux drivers to do it for you...

    Cheers,
    Greg

  195. Re:Was it easy? Why was it not major? by Myrcurial · · Score: 1

    Yaknow... for someone who claims to be a wirehead, you know shit about wires. Why don't you go back to your mom and tell her that you need to return your computer to BestBuy. DS-3 cards are part of the serial world, one in which you don't have a toe-hold, let alone a single reason to open your mouth. Either read the article, the google for terms that are unfamiliar before posting or just save us all the bloody torment and just don't post. Discussions on /. are already approaching spam-like signal to noise ratios - don't be part of the problem, be part of the solution.

  196. Think that's bad? by kruczkowski · · Score: 1

    My friend in Poland gets his internet cut every now and then.

    The reason, people steel the cables and sell them on the black market.

    --
    hmm... for fun I enjoy launching DDoS attacks against 127.87.42.5
  197. Re:Was it easy? Why was it not major? by Punk+Walrus · · Score: 1
    This reminds me of a colo we had in the Southwest where it turns out this major switching hub was actually in the basement of an old (~100 years) manor. They had all the major networks going through there. One of the exits was literally the old basement door that opened at a slant like a storm cellar. To say the place was underventilated was an understatement.

    Security was a HUGE problem, too, because often techs working on the site would leave that cellar door open, and stuff would "wander." There was a series of attempted thefts that were done by someone who probably didn't know what the equipment actually was, because cables and live power cords would be cut by what we think were shears or boltcutters. $50 CRT terminals would be stolen, and the $30,000 router it was connected to would be left behind, the serial cable just dangling from a cut cord.

  198. Re:Was it easy? Why was it not major? by nlindstrom · · Score: 1
    They still had regular internet connectivity through a 100mbit cogent line...
    Hah! "Cogent" and "connectivity" go together like oil and water.
  199. Correction by Anonymous Coward · · Score: 0

    You write nothing worth reading and you suck any male that will drop their pants.

    No further comment needed.

  200. Can you hear me now? by Anonymous Coward · · Score: 0

    You know, like the commercial...

  201. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    I could be wrong, but I assumed that the alarm went off when power to the SGI was turned off. That way the gaurd would know if someone unplugged one in order to physically remove it from the building. I doubt there is much that the security gaurd could have done to prevent it from being rooted anyways.

  202. Re:Was it easy? Why was it not major? by Lord+Kestrel · · Score: 1

    They weren't routers, they were full on mainframes.

  203. Cards by coyotedata · · Score: 0

    The things Verizon will do to get you to come back.

  204. Re:Was it easy? Why was it not major? by Anonymous Coward · · Score: 0

    You had a woman as CIO! You sir are a pussy bitch. Women should be at home.