Democratic Convention Computer Security Threat?
Hiawatha writes "Excuse me for tooting my own horn, but check out my story in today's Boston Globe about a possible security problem at the Democratic convention next week. If visitors plug insecure laptops with wireless connections into the convention's wired network, there could be trouble..."
the article doesn't contain any new info. Everyone know how unsecure network connections can be at conventions. everyone know they can cause havoc.
Even the SANS conference, with all the security gurus, had issues with providing network connectivity. That is why they longer provide network connectivity, WiFi or otherwise, in classrooms.
Consensus is good, but informed dictatorship is better
The Democratic convention will use a standard wired network rather than WiFi. But according to Maggio, this won't provide any extra security. That's because many visitors who'll plug into the network will have computers with built-in WiFi capability. The WiFi feature is automatically switched on when the computer is running. In effect, the laptop can connect to a wired and a wireless network at the same time.
So... let me get this straight... they are going to connect to my laptop's wireless NIC, and then piggyback onto the wired connection? Riiiiight... This would be tough to accomplish... even in Windows.
Maggio said that an attacker with a high-powered WiFi access point could set up shop outside the FleetCenter, and communicate with WiFi laptops on the inside. If these laptops haven't been protected with the latest security patches, a skilled intruder will be able to gain access to the laptop. He could then leapfrog onto the Democrats' network, allowing him to steal information or vandalize computers. ''By being on both networks at the same time," said Maggio, ''that can compromise the entire network security."
Odds are, these laptops have already been 0wn3d..
Ah the consumer Internet appliances. Trying to make network engineers out of people that can't program their VCRs.
"Learning is not compulsory... neither is survival."
--Dr.W.Edwards Deming
Maybe somebody at the DNC has compromising pictures of George Bush getting wads of money stuffed up... oh wait, that wouldn't be news. (Same applies to Mr. Kerry) Just what sort of top secret information does anybody expect to snag? This is a planned media circus, not a cigar smoke-filled warroom meeting.
I don't see how the security vulnerabilities at the DNC are any different than any business, convention, or hotel on any day in any city.
Don't bash on the democrats. This has been a problem ever since wireless networking has become ubiquitous in every convention, company, and private network. The democrats are no more or less susceptible than anyone else...
I am disrespectful to dirt! Can you see that I am serious?!
In a similar light, I was wondering what kind of mayhem will ensue at Quakecon. I'm sure there will be a ton of virus/worm spewing boxes plugged into the byoc lan.
"He's lost in a 'floyd hole"
That way, sure someone can hijack a laptop, but all they get to do is piggy back on the Democrat's internet connection or target other machines on the untrusted network.
Sure it's possible they haven't thought of this, but it's such a basic precaution I find it hard to believe. If they're letting any untrusted computers on to their network they have to treat the physical network like the internet - untrusted jsut like the guest PCs.
Now, instead... Don't vote at all. Did that help the guy you don't like at all? No. It didn't. Admittedly you didn't hurt him either. You also didn't help/hurt the other "lesser of two evils". Starting to see my point yet?
OK, now then: Vote for an alternative candidate: You didn't help either of the "lesser of two evils" and you've demonstrated that you didn't like either of those two choices. Future candidates will look into that and modify their position on issues to better reflect what the public wants.
Of course if Diebold is right, voting would be illegal if it actually made a difference.
No one man knows what's best and true for all mankind. Don't be afraid of a polititian who is brave enough to change their mind because they've gained a different perspective. Fear the ones that never will because they have no perspective at all.
Ah yes, are you suggesting that the post use that pinnacle of journalistic integrity, FOX NEWS? Besides, most of the things he listed were not a matter of news sourcing or opinion, but a matter of public record. Are you saying that the existence of the patriot act is actually some democrat fabrication?
"...but voting third party is just going to help the guy I don't want to get (re-)elected"
A friend of mine said the same thing. He of course wants Kerry to win. I then reminded him that in California, there is no chance at all that Bush will take the electoral votes. Since I normally vote Republican or Libertarian, I would actually be taking away a vote for the Elephants by voting Libertarian.
If you live in California, you too can vote your conscience, whatever it may be, and not worry about Kerry not winning the State. On the other hand, if you vote Republican, and you want to vote different, you can since Bush wasn't going to win in California anyways.
The republicans already have hacked some democrat computers.