Slashdot Mirror


CIA's Info Ops Team Hosts 3-Day Cyber Wargame

ScentCone writes "The CIA has booked some conference rooms and is working through a simulated 'digital Pearl Harbor' to see how government and industry handle a monster net attack from an imaginary future foe composed of anti-American and anti-globalization hackers. Having been accused of lacking imagination about potential terror attacks, they're using the exercise to better shape the government's roles in a variety of attack scenarios. The networking industry, it seems, is expected to always play a big part in detecting and thwarting such threats, as 9/11-scale economic disruption is a likely bad-guy objective."

50 of 279 comments (clear)

  1. In Soviet Russia... by CypherXero · · Score: 4, Funny

    The network attacks YOU!

  2. Digital Pearl Harbor is Nice... by neo5064 · · Score: 5, Funny

    But personally, I'm waiting for "Digital Hiroshima"

  3. Comparison in slightly bad taste... by strider44 · · Score: 4, Insightful

    People compare September 11 with a lot of things, but comparing it with a crack-fest? I doubt that it's even *possible* to kill several thousand people with cracking, you could only cause extreme inconvenience.

    Besides, security can be achieved through a couple of simple steps: Don't use Windows, use OS's designed with security in mind. Use SELinux or equivalent on mission critical nodes. And secondly, educate the users and gain a culture of safety.

    1. Re:Comparison in slightly bad taste... by James_Duncan8181 · · Score: 5, Insightful
      What? Bringing down a power grid during rush hour, changing details of patient notes on a hospital network, or sending false messages and checking the content of sent messages all have the potential to kill.

      Have you no imagination at all? ;)

      --
      "To any truly impartial person, it would be obvious that I am right."
    2. Re:Comparison in slightly bad taste... by John+Seminal · · Score: 3, Insightful
      What? Bringing down a power grid during rush hour, changing details of patient notes on a hospital network, or sending false messages and checking the content of sent messages all have the potential to kill.

      Almost all hospitals have generators, so power would not be an issue for them. Sure, the hospital might shut down the non-emeregency, non-critical care wards, they will have enough energy to protect life.

      As for traffic signals not working, that won't cause a loss of life, it will cause many people to get pissed off.

      If 9/11 was not about flying airplanes into buildings, but shutting down all electricity in the USA, maybe we would not be in Iraq or in the middle of a war.

      Still... it would piss me off a ton if I could not watch any TV, could not check email. It is like an addiction, like caffine or cigarettes. Once you get hooked, you need your daily dose. In one way, they might be doing us a favor. Maybe people would pick up a book and think about the world, not in 30 second bursts like the TV programs us to do, but in thoughtful ways.

      What the fuck am I saying. I need some cake. I am sooo fucking hungry, not like the bastards in ethiopia who fake it for attention, but really hungry for some cake with icing. Then I am going to watch the 2am edition of the news to see if anything changed from the 1am edition of the news. Then I am going to work to make enough money to pay for my cable bill, my tivo bill, my cell phone bill, my internet bill, my insurance bill... i am sure everyone gets the idea.

      Slashdot folks are smarter than most. And that scares me.

      --

      Rosco: "If brains were gunpowder, Enos couldn't blow his nose."

    3. Re:Comparison in slightly bad taste... by voixderaison · · Score: 4, Insightful
      I suppose there are a variety of crack scenarios that would result in massive loss of life. Spoofing the air traffic control system in some fantastically improbably way might cause a few mid air collisions before the planes were grounded.

      Launching a single nuclear missile would shoot past the mark by rather a lot. Let's hope the control systems for those things are not connected via some backdoor to to a network in turn connected via some other back door to a network connected to the internet, eh?

      These crackfest doomsday scenarios are not preparing government for the real problems at hand, today. Consider the case reported by the New York Times last week :
      "During a two-day period they watched as the intruder tried to break into more than 100 locations on the Internet and was successful in gaining root access to more than 50. "
      It was probably a lone cracker, possibly a small group. rooting fifty boxes in a couple days. That was just a two day sample of a months long probably-one-man crackfest. Low level information theft poses a real threat to national security. Many government agencies are not even able to detect it.

      By the way, it seems to be more popular in government circles to invoke September 11, probably because in the current climate it helps get funding. At least there is that perception.
      --
      Things should be made as simple as possible, but not any simpler. -- Albert Einstein
    4. Re:Comparison in slightly bad taste... by Canberra+Bob · · Score: 3, Insightful

      "If 9/11 was not about flying airplanes into buildings, but shutting down all electricity in the USA, maybe we would not be in Iraq or in the middle of a war."

      Maybe if the USA went after the culprits of 9/11 you would not be in Iraq either. Otherwise I agree with your point.

    5. Re:Comparison in slightly bad taste... by John+Seminal · · Score: 2, Insightful
      Maybe if the USA went after the culprits of 9/11 you would not be in Iraq either. Otherwise I agree with your point.

      Do you know how many Americans think Iraq had WMD or was involved with 9/11? With 30 second news spots, and an ever smaller attention span, Americans will believe just about anything. Just package the editorial as news, pump in some patriotism and emotion, and Americans will do anything the big boys tell us.

      Hell, god forbid if the news started spending 10 minutes on each news story. Sure, that would only be 4 or 5 news stories a night, but it would be better to know something about a topic than just associate an emotion with a 30 second news clip. "God Damn Iraqi's, they set off another bomb. That does it... time to send more troops, lets bomb them more. Those bastards. Screw the bystanders, they probably deserve it anyways, they asked for it.".

      The truth does not matter. Everything can be spinned and made into an emotional issue. Everything can be rationalized.

      Is it any wonder the government wants to cut funding for PBS and the National Endowment for the Arts. They are some of the few places left that will spend half an hour on an issue, and even then that is not enough time to capture everything needed to understand a topic. The powerful are better served with a population that does not think deeply about the world, their lives, and what life is for. Most just think about the next car they want, or how to make more money. They don't think about happiness, at least not the way Aristotle or the philosophers did.

      --

      Rosco: "If brains were gunpowder, Enos couldn't blow his nose."

    6. Re:Comparison in slightly bad taste... by FireFury03 · · Score: 2, Interesting

      People compare September 11 with a lot of things, but comparing it with a crack-fest?

      I don't think they are comparing the 9/11 attacks themselves to a crack-fest, they are compairing the resulting economic disruption to something that could be done through a coordinated cracking session. I'm not wholly convinced that economic disruption of such large proportions can be coordinated through cracking though.

      Don't use Windows, use OS's designed with security in mind.

      I'd agree with this - certainly for mission-critical systems anyway. However, *all* OSes must be kept patched and up to date - a 4 year old Linux distribution is probably just as vulnerable as a 4 year old Windows release, it's only when you keep them patched up to date that Linux gets significantly more secure than Windows.

      For workstations, Windows is sometimes a necessary evil but I think in most cases you *can* ditch Windows in favor of a better OS (Linux or consider OS X if Linux won't run the software you need).

      Use SELinux or equivalent on mission critical nodes.

      SELinux is still far from perfect on current distributions - certainly under Fedora Core 3 the supplied policies are too restrictive in a number of cases (Apache can't do a lot of stuff you want it to do, etc.). Whilest you _could_ rewrite the SELinux policies, you probably need a brain the size of a planet. :)

      And secondly, educate the users and gain a culture of safety.

      This is probably _the_ most important point. No matter how much you secure the software, the users are always a weak point. For the servers this isn't a big deal coz anyone who can log into them has (hopefully) got a clue. But you don't need to compromise the servers to cause disruption - once a single workstation has been compromised (maybe the user wanted to look at the cool new screensaver someone mailed them, whcih turned out to be a trojan) then your network is unsafe - your firewall won't do you much good now.

    7. Re:Comparison in slightly bad taste... by flyingsquid · · Score: 4, Informative
      Apparently the US managed to screw over the Russkies by doctoring some software and letting them steal it (from WWII onward, the Soviets engaged in industrial espionage on a massive scale); the software ran pipelines. From _At the Abyss_:

      "In order to disrupt the Soviet gas supply, its hard currency earnings from the West, and the internal Russian economy, the pipeline software that was to run the pumps, turbines, and valves was programmed to go haywire, after a decent interval, to reset pump speeds and valve settings to produce pressures far beyond those acceptable to pipeline joints and welds... The result was the most monumental non-nuclear explosion and fire ever seen from space. While there were no physical casualties from the pipeline explosion, there was significant damage to the Soviet economy. Its ultimate bankruptcy, not a bloody battle or nuclear exchange, is what brought the Cold War to an end. In time the Soviets came to understand that they had been stealing bogus technology, but now what were they to do? By implication, every cell of the Soviet leviathan might be infected. They had no way of knowing which equipment was sound, which was bogus. All was suspect, which was the intended endgame for the operation."

      You could wreak a lot of havoc on the American economy if you chose to. At present, I doubt many nations would be interested in that- it's just not in their interest. China, for instance, is making just way too much money off the U.S. economy to want to touch it. Even if we started exchanging shots over Taiwan I think they'd think hard before trying that. But what what about Al Qaeda?

      "All that we have mentioned has made it easy for us to provoke and bait this administration. All that we have to do is to send two mujahidin to the furthest point east to raise a piece of cloth on which is written al-Qaida, in order to make the generals race there to cause America to suffer human, economic, and political losses without their achieving for it anything of note other than some benefits for their private companies. This is in addition to our having experience in using guerrilla warfare and the war of attrition to fight tyrannical superpowers, as we, alongside the mujahidin, bled Russia for 10 years, until it went bankrupt and was forced to withdraw in defeat. All Praise is due to Allah. So we are continuing this policy in bleeding America to the point of bankruptcy. Allah willing, and nothing is too great for Allah."

      Bin Laden's ultimate goal probably isn't to kill American civilians, kill American troops, or defeat us militarily. He wants to attack our economy. That was definitely a large part of what 9/11 was about, and it's a very large part of what the ongoing insurgency is about (200 billion for this invasion by the end of 2005, with no end in sight. What's really shocking is that everybody is puzzling over the Iraqi insurgency's strategy, when bin Laden explicitly lays out his strategy). And it will be a very large part of any future attacks, which could concievably move into internet attacks. Carnage is part of it, sure. But if he can't bleed you physically, he's perfectly happy to bleed your bank account. Incidentally, I had to go to Al Jazeera to find that passage- CNN, those J-school dropouts, post a heavily edited version without even mentioning that it was edited.

    8. Re:Comparison in slightly bad taste... by thynk · · Score: 4, Interesting

      Hell, god forbid if the news started spending 10 minutes on each news story. Sure, that would only be 4 or 5 news stories a night, but it would be better to know something about a topic than just associate an emotion with a 30 second news clip.
      Hell, god forbid /.ers actually start RTFA before posting, and keep posts on topic. :-)

      While you do make a good point in that we associate emotions with events, I would find a news story that lasted 10 minutes to be probably 8 or 9 minutes of filler or opinion. The media has a hard enough time keeping bias out of the news with 30 seconds a clip, how much do you imagine there will be if we ask them to fill up 10 minutes? The purpose of a news article is to inform people of what is happening in the world, not to impart some deep understanding to everyone who watches it.

      The truth does not matter. Everything can be spinned and made into an emotional issue. Everything can be rationalized.

      The truth as defined by whom? There are 3 versions of every memory and story. 1st we have your side and how you remember it happening - this is the truth to you. Next we have my side and how I remember it happening - this is the truth to me. Next we have what really happened, but since no one is see it for what it really is it may as well not even exist. Remember, nothing ever happens exactly the way you remember it.

      and even then that is not enough time to capture everything needed to understand a topic

      While some places do a really good job of presenting ideas and concepts (PBS, Nova, Etc) 0 if you want to really understand a topic, don't rely on TV at all, or for that matter /. Go out and do some real research.

      Hope you'll take what I said here as some constuctive feedback on posting and not much else :D

      --

      Good judgment comes from experience, and a lot of that comes from bad judgment.
    9. Re:Comparison in slightly bad taste... by Vile+Slime · · Score: 2, Interesting

      > Spoofing the air traffic control system in some fantastically improbably way might cause a few mid air collisions before the planes were grounded.

      "Fantastically improbable" is the key phase there.

      The ATC system, at least in the US, is comprised of some pretty old and pretty obscure equipment.

      Not only would you have to take out the terminal area radars but you would also need to get the radio systems of both the pilots and the controllers. And don't forget that commercial airliners have radar and onboard aircraft avoidance systems of their own.

      Add to that a regional result could probably only ever be achieved since it's quite easy for pilots to fly by looking out their window for problems.

      In other words, the massive nationwide outtage could only occur on the improbable day where everywhere in the US has bad weather.

      As much as people would like to think ATC is automated, when it is looked at in even a cursory fashion you quickly realize that the whole system is a lot closer to the "Airport" disaster movies (kinda scary huh?) than a perfectly choreagraphed system.

      --
      ---- Go ahead, mod me down, I'll just post it again and you lose your mod points.
    10. Re:Comparison in slightly bad taste... by pandymen · · Score: 2, Interesting

      There is no software that exists and is 100% secure. True, there are OS's designed for government applications like air traffic control, power grids, and traffic grids. If someone hacks into the air traffic control system, they could easily crash several planes a la Die Hard 2. If they changed all the traffic lights in Chicago rush hour to green, more than a few people would die. And so on. The threat they are most worried about is another terrorist attack while the emergency services are preoccupied by another large-scale problem (i.e. no power, planes crashing, gridlock).

    11. Re:Comparison in slightly bad taste... by subtropolis · · Score: 2

      google 'SCADA'. Then use your imagination. (hint: others have already, and they're plenty concerned)

      --
      "Our interests are to see if we can't scale it up to something more exciting," he said.
    12. Re:Comparison in slightly bad taste... by synthespian · · Score: 4, Insightful

      Incidentally, I had to go to Al Jazeera to find that passage- CNN, those J-school dropouts, post a heavily edited version without even mentioning that it was edited.

      Yeah, I remember reading the original statement:
      "And it was to these sorts of notions and their like that the British diplomat and others were referring in their lectures at the Royal Institute of International Affairs. [When they pointed out that] for example, al-Qaida spent $500,000 on the event, while America, in the incident and its aftermath, lost - according to the lowest estimate - more than $500 billion.

      Meaning that every dollar of al-Qaida defeated a million dollars by the permission of Allah, besides the loss of a huge number of jobs.

      As for the size of the economic deficit, it has reached record astronomical numbers estimated to total more than a trillion dollars.

      And even more dangerous and bitter for America is that the mujahidin recently forced Bush to resort to emergency funds to continue the fight in Afghanistan and Iraq, which is evidence of the success of the bleed-until-bankruptcy plan - with Allah's permission.

      It is true that this shows that al-Qaida has gained, but on the other hand, it shows that the Bush administration has also gained, something of which anyone who looks at the size of the contracts acquired by the shady Bush administration-linked mega-corporations, like Halliburton and its kind, will be convinced. And it all shows that the real loser is ... you."here)

      Actually, at the time I was kind of shocked at the self-imposed censorship of the American media. Sometimes I think the USA has achieved a more effective way of brain-wahing than the Soviets could have ever dreamed of...No in-depth analysis in news media, no space for political discussion, people afraid to vent their political views, a presidential campagin that can only be won with loads of money, indirect elections for president, moralism, fear of "communism" (or, as the neo-macarthist term would have it today "anti-americanism"), etc. And, no, I'm, no a lefty.

      --
      Main difference between the BSD license and the GPL license: one is from California and the other is from Massachusetts
    13. Re:Comparison in slightly bad taste... by krbvroc1 · · Score: 2, Interesting
      It scares me that you think a cyber attack against the infrastructure of the country such as the power grid or financial system is only an annoyance. Someone on slashdot with this mentality and we wonder why cyber security is not taken seriously.

      Total loss of power for a sustained time can cause loss of life, not to mention huge financial consequences. That 'non-critical' care you say might be inconvienienced might be someones organ transplant or chem therapy.

    14. Re:Comparison in slightly bad taste... by WelcomeToTheFallout · · Score: 2, Interesting

      I doubt that it's even *possible* to kill several thousand people with cracking, you could only cause extreme inconvenience.

      What about hacking into the radar system at airports? (circa Die Hard 2). Seems to me that you could kill a few thousand people if you managed a major hack into all the airports in the US at once. How many planes are landing at this exact instant? Seems like it could be slightly more than an inconvenience.

      --
      What'chu lookin' at Willis?
  4. People don't die when networks crash by Dancin_Santa · · Score: 3, Insightful

    For all the hoopla about the pervasiveness of the internet in our daily lives, when it comes down to brass tacks, it's all just electronic pulses. When those pulses go dark, the wires are still around routing telephone calls. No one dies in a burning, collapsing building. No one dies in a hijacked airplane. No one dies because they stand too close to a bomb. Those bits just go dark and the internet disappears for a while.

    A day without the internet is like a sky without vaportrails.

    Even the data that is destroyed by such an attack is not at such a disadvantage. Though the paper-less office has been a longstanding goal, it is totally a dream. Everything has a papertrail and can be backed up.

    There is no calamity awaiting us in the event of a terrorist cyberattack. The real calamity is the usurpation of rights due to terrorist attack fearmongering.

    1. Re:People don't die when networks crash by louarnkoz · · Score: 2, Interesting
      Actually, people may very well already have died in network attacks, as these attacks managed to clog telephone lines and bring down 911 response centers. Someone may well have been waiting for the ambulance that never came.

      Or, suppose that someone manages to sneak a virus inside a nuclear plant control system. Wait -- that actually already happened! Slammer worm crashed Ohio nuke plant network.

    2. Re:People don't die when networks crash by thynk · · Score: 4, Insightful

      It depends on what network is crashed. Crash the network of your local 911 and see how many people die because the operator isn't able to find the address of a heart patient who can't speak well enough during the attack to give thier address.

      We've become very dependant on computers and networking. Sometimes, very critical systems are left wide open. I think that having them tested for security leaks is a good idea.

      A friend of mine who is a consultant did a 26 page report on a small town police department's network, finding that he was able to access everthing on thier network, including personal and critical information from home, with out a user account on the network.

      --

      Good judgment comes from experience, and a lot of that comes from bad judgment.
    3. Re:People don't die when networks crash by CleverNickedName · · Score: 2, Insightful

      It is not lives that are at stake, it is business.

      Cold as it may be, but a country can afford to loose a few thousand people. It can't afford to loose one or two large corporations.

      For the record, I find the above fact sickening, but this does seem to fit in with the world's priorities at the moment.

      --


      Unfortunately, I am not Wil Wheaton
  5. Tis already happened! by dj245 · · Score: 5, Funny
    The networking industry, it seems, is expected to always play a big part in detecting and thwarting such threats, as 9/11-scale economic disruption is a likely bad-guy objective."

    Sadly my website http://www.rogertheshrubber.net/ has already fallen victim to the hordes of the digital pearl harbour. There is a pestilence upon this land. Nothing is sacred. Even those who arrange and design shrubberies are under considerable economic stress at this period in history.

    --
    Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
  6. CIA security.... by iibagod · · Score: 3, Funny

    It's wonderful that the CIA has such trustworthy people that wouldn't think of disclosing details of such a secure operation..... Oh, wait.

  7. Digital Pearl Harbor? by sTalking_Goat · · Score: 2, Insightful
    "You hear less and less about the digital Pearl Harbor," said Dennis McGrath, who has helped run three similar exercises for the Institute for Security Technology Studies at Dartmouth College. "What people call cyberterrorism, it's just not at the top of the list."

    We finally get rid of one useless buzzword and this idiot wants to bring it back.

    The funniest thing about this is that from the sounds of it the whole thing is being run by CIA goons. I'm no "info-warrior" but seems kind of pointless to run a war-game with people whose tricks you already know. Wouldn't it be far more realistic if they setup a network and put out the word to John Q. Hacker that is open season.

    --

    My days of not taking you seriously are certainly coming to a middle...

  8. "Anti-American and anti-globalization hackers" by Raindance · · Score: 4, Insightful

    I'm not sure whether this is completely appropriate to include in a press release.

    Insofar as the intelligence community is coming up with possible scenarios, yes, I think this is a possible scenario. And worth looking into.

    Insofar as the government- MY government- is identifying and singling-out anti-globalization folks as "The Enemy" and "anti-American," I'm a bit frustrated. I'm an American who is also somewhat anti-globalization*.

    So, thumbs up for doing some preparation that might actually matter. Thumbs down, however, for singling out anti-globalization as "The Enemy" and "anti-American."

    You're the government. You have a responsibility to your citizens to not insult moderate views commonly held by U.S. citizens, however accidentally you do so. If you're going to put out press releases, hire some rhetoric Ph.Ds or something.

    *There a lot of ins-and-outs to globalization. I'm against greedy globalization, which so far has unfortunately been rampant.

    1. Re:"Anti-American and anti-globalization hackers" by Jack+Taylor · · Score: 3, Insightful

      singling-out anti-globalization folks as "The Enemy" and "anti-American,"

      I agree. I'd even go one step further and disagree with their use of "anti-American" itself. I mean, it seems that these days all you need to be "anti-American" is to disagree with some of the current US government's policies, the right to which would seem to be a fundamental tenet of democracy. If that's the case then Amnesty International is an "anti-American organization" for protesting about the US government's use of Guantanamo Bay. I live in the UK, and I've never heard anyone utter the words "anti-British"...

      --
      One good turn - gets all the covers.
    2. Re:"Anti-American and anti-globalization hackers" by 1u3hr · · Score: 2

      I think the emphasis should have been on "an imaginary future foe composed of anti-American and anti-globalization hackers." There are loonies all over the ideological spectrum. But as far as I can tell, the "anti-globalisation" groups don't indulge in terrorism; they just want to be heard. When the police forces herd them away and beat them down (literally, in many cases) some may respond likewise, but mostly it's street theatre. But as for a calculated act of terrorism; what evidence is there to suggest this is at all likely? If anyone wants to cite 9/11 as an example of an unanticipated act, well similar groups have been making terrorist attacks in the Middle East (for a century) in Europe (eg, Munich, 1972) and elsewhere for decades, just not in the US. Anyway, wasn't something like this done a year or so ago, when the bogeyman was North Korean elite ninja hackers? Just call them Red team and concentrate on tactics, not preemptive smearing.

    3. Re:"Anti-American and anti-globalization hackers" by DJCF · · Score: 3, Informative

      Hate to nitpick (and not to miss the humour in your post) but Hitler's Nazi party were quite pro-British -- they saw Britain as a valued trading partner for when the war was over. It was us who were anti-them.

  9. Government computer security? by IO+ERROR · · Score: 3, Interesting
    I don't ever remember government computer systems ever being regarded as being anywhere near secure. Whether it's Microsoft Windows, unpatched Unix boxes, or incompetent sysadmins, government and military boxes have historically been regarded as some of the least secure on the Internet.

    Has any progress been made in the last few years on improving the state of government computer security?

    --
    How am I supposed to fit a pithy, relevant quote into 120 characters?
    1. Re:Government computer security? by TrappedByMyself · · Score: 2

      I hope my anon posting takes.

      I'm kinda worried that someone working on information systems warfare thinks they can make an anonymous post to a popular website ;)

      Change is hard in the military because of what is at stake. If something works, people really don't want to change because it may cost lives if not done properly. There is not alot of room for experimentation.

      --

      Help me take back Slashdot. When did 'News for Nerds' become 'FUD and Conspiracy Theories for Extremist Nutjobs'?
  10. sounds like fun by cryptoz · · Score: 3, Interesting

    Hey, if you were on the committee deciding how to spend the new money you got on the defence budget, wouldn't you want to spend it on some fun war-style games? That way, you can pretend there's a disaster and save the world without the whole mess of killing lots of Americans. Much more fun. I bet you that more money is spent on the lunches of the people involved in this than money spent on ACTUAL foriegn aid (not money called foreign aid sent to the pockets of other politicians, real foreign aid). And I'm not joking.

  11. Digital Pearl Harbor? by Motherfucking+Shit · · Score: 3, Funny

    Why not just call the event "Perl Harbor," I think everyone would get the reference.

    --
    "BSD: Free as in speech. Linux: Free as in beer. Windows 10: Free as in herpes." --Man On Pink Corner in #52607549.
  12. Comment removed by account_deleted · · Score: 5, Funny

    Comment removed based on user account deletion

  13. Worse! by Dancin_Santa · · Score: 2, Insightful

    What if someone was selling off your country's debt to its largest rival (ideologically, politically, economically, and militarily) to such an extent that they were able to blackmail your government with the threat of bankruptcy and thereby force your government to bow to their demands?

  14. Help from private technology firms by CUGWMUI · · Score: 2, Interesting
    From TFA:

    It also questioned whether the U.S. government would be able to detect the early stages of such an attack without significant help from private technology companies.
    This is a very important statement. The US govt may have their eye on all the networks, but given the nature of the Internet, as well as the PSTN to some extent, they just cant do it themselves. It has to be strong collaboration with private firms, whose technology may well be better than theirs, as well as all the big service providers.
  15. Bad Guys? by larsl · · Score: 2, Insightful

    Defending yourself against the United States makes you a "bad guy?"

    1. Re:Bad Guys? by Etcetera · · Score: 4, Funny


      Defending yourself against the United States makes you a "bad guy?"

      From the perspective of a citizen of the United States, yes.

  16. We fear what we don't understand by Moraelin · · Score: 3, Insightful

    The less one knows about computers and networks, the more one can believe any "digital Pearl Harbour" scenarios.

    E.g., I still fondly remember when I was 18, and mind you I was programming assembly for some years already, I thought I could write _the_ virus that would bring the whole economy to its knees. (Which is why I didn't actually release it.) Looking back in retrospect, omg, that idea was soo retarded.

    Now throw in politicians, who have about as much clue of computers as your cat has _and_ make a living by blowing things out of proportion to an audience who knows even less. Right. You can see where that is going.

    In practice, our computers aren't that vulnerable, ironically, because we know they're a fragile contraption. They don't exist in a vaccuum, as some box in a corner that noone knows about. Any company has a small army of admins who can deal with threats, has backups, etc.

    Even things like Blaster didn't really do that much harm. The network congestion died pretty quickly, as everyone scrambled to block ports and disinfect machines. At the corporation I work for, it cost a total of a couple of days of the IT staff's work, to deal with some tens of infected computers out of many thousands. And that was the only virus I know of that made it inside in the last half a decade. (Unlike what Linux zealots like to claim about Windows securitiy, IRL it doesn't really cost _that_ much to keep it running.)

    Or I remember one bank bitching about their DB/2 corruption, but even that didn't shut them down. Even doing the irresponsible thing and keeping running with a corrupt database and repairing it on the fly, in the end worked. It cost them some millions per day, yes, but the bank continued to work.

    Just about the only thing one can't really defend against is a DDOS attack. No matter how well patched and firewalled a network is, when you have 10 GB/s stuffing your inbound pipe, you're stuffed.

    But here's the fun part about those: they work against one site at a time. Directing some tens of thousands of zombies to spew 10 GB/s at one site, yeah, stuffs it. Directing the same 10 GB/s at 10,000 sites, won't even start to matter. There is no way that can be a threat to the whole economy or anything.

    --
    A polar bear is a cartesian bear after a coordinate transform.
  17. The Truth Is Not Out There by John+Seminal · · Score: 2, Insightful
    I can't help but wonder, with the USA threatening Korea and Iran for their weapons programs, how the hell we get away with half the shit we make that has no usefullness outside of killing people. Like the new bomb they have developed, that kills all the people in a city, but does not damage any structures.

    1984 has come people. They have weapons of mass destruction and we must defend ourselves. They don't have weapons of mass destruction but we needed to remove a tyrant. We have, as a basic saftey gaurd against an overbearing government, the right to be secure in our papers and possesions unless a judge signs a warrents. It is war against terrorism, the FBI needs the powers to conduct searches without judicial overview. WTF???

    People, is the USA about to have a coup? It is one of the most common events in history. How many people in other countries expected the coup when it happened? I believe Bush will never leave office, or he will hand pick his sucessor.

    There are so many danger signs with that family. Bush's father was the chief of the CIA in the 1970s, he ran the CIA and did all the hiring of senior staff. Then he was VP for 8 years in the 1980's. He becomes president through the early 90's, then his son becomes president 8 years later. There is a saying that power currupts, and this family has been in the highest level of power for over 40 years, and that is not counting their grandfather who was in congress.

    This is more than haliburton or giving government contracts to friends. This is more than the spoils system. This is about jobs leaving the USA, about people having a lower standard of life, about more people becomming poor, about the rich getting richer, about government removing 200 year old rights gaurenteed to us by the founding fathers. What has happened the last 20 years should be a warning. A whole class of people is getting enslaved, to working for only enough money to pay for rent and very little low quality food.

    Just wait people. Those fingerprint machines in public libraries are not there because libraries are going bankrupt with non-members checking their emails.

    Most coups do not happen with the people overthrowing the government. Most coups happen when a powerful person gains too much influence and power, and takes over the military. But this coup will be about economics. The people with the money will have the lobbyists which will control the congress, and the rest of us will be relegated to nothings. Government will jail the loudest voices as terrorists. The rest will believe they are free, free to work for $9 an hour. Just wait.

    --

    Rosco: "If brains were gunpowder, Enos couldn't blow his nose."

    1. Re:The Truth Is Not Out There by minus_273 · · Score: 2, Informative

      haha i love the fact that this was modded insightful! ive see this post in several other places.

      --
      The war with islam is a war on the beast
      The war on terror is a war for peace
    2. Re:The Truth Is Not Out There by corpsiclex · · Score: 2, Funny

      Actually, 1984 came (and went) more than twenty years ago. Parent may want to review this article for a quick update on where things stand.

      --

      eBayDig 1s a typo saerch engien
  18. Re:Simulation Games are useless by CHESTER+COPPERPOT · · Score: 4, Interesting
    "I am just saying the money that attracts top talents are with the corporations.

    To some people money doesn't matter. Time and time again the military and intelligence communities attract hugely talented individuals because of the work environment. Dave Grossman talked about this in his book On Killing. There is a small minority of people who are talented warlike mischeif makers who given the right environment, ethical and monetary backing can go a long way to louse up the enemies day. Bruce Schneier says the same thing in Secrets and Lies. Examples of this in history are myriad. Google topics like the Tunnel Rats in vietnam. The bad guy mentality in the right environment attracts these guys.

    You don't have to have to be a "bad guy" but being/thinking so is what separates the best intelligence and military personnel from the average. Obviously, you still need a 'good' value system but the 'bad guy' psyche still is needed.

    It's even written in the vast majority of intelligence literature out there that the best overall intelligence guys are borderline 'bad guys'. Examples are myriad:

    The original detective Eugène François Vidocq was the founding father of criminal investigation. He was a notorious bad guy whose innovations bolstered police intelligence gathering.

    Michael Levine who was one of the top undercover agents ever assigned to the Drug Enforcement Agency said in an interview that "The secret to my success was ..... A police lieutenant, with whom I worked many years later, looked at me, after I had done, in one day, something like four or five undercover buys from different groups -- from Hispanics, from Blacks, from Whites -- and he was covering me along with my group. He said: "You know what the thing is about you, Levine? You're a guy who should've gone bad. You should have been a gangster. You should have been in jail. But somehow you turned out right. And that's why you're so ..." [convincing]. And I thought about it, and I thought about my youth and about the way I grew up, and I realized that there was a lot of truth in what he said. I was FROM the streets. The streets were in me. There was a thin line between me and the guys who I was working against. And that line was so thin that drug dealers couldn't see it. Do you understand? The line that separated them from me as a suspected agent was so thin that drug dealers could NEVER believe that I was an agent. And that's an attitude .... that's something you can't teach."

    The CIA Case officer Gust Avrakotos who ran the covert operation arming the Mujahideen by proxy through Pakistan in the 1980's Afgan-Russian war was nicknamed 'Dr Dirty' by his CIA peers because he was such an aggressive rule-breaking intelligence operative who had an inherent 'bad guy' view of intelligence operations which helped him numerous times in executing deals inside and outside the CIA.

    Ex US Army intelligence analyst Ralph Peters Essay "The Black Art of Intelligence" speaks that the best intelligence analysts have a specific talent for the job and that talent is an underlying understanding of the dark side of humanity and this talent is born not made.

    I could go on and on. Of course, you don't have to be a bad guy or empathise to be good at the job. In fact having an organisation filled with these guys would be counter-productive. But, like I stated, what separates the good from the brilliant is this 'bad guy' mentality.

    "The best soldiers have a seasoning of devilry." General A.P. Wavell

  19. Wrong branch? by P0ldy · · Score: 2, Interesting

    Isn't this the NSA's job, or Homeland Security? I can't really see how this is gathering intelligence. Is this supposed to be Ops? TFA mentions

    "Information Operations Center, which evaluates threats to U.S. computer systems from foreign governments"

    , which is understandable, but the conventional notion of "terrorists" aren't "foreign governments". Does this mean we're expecting to go to cybercarpetbombing against France, the "anti-Americans"?

  20. It is probably recruitment by John+Seminal · · Score: 3, Insightful
    It's wonderful that the CIA has such trustworthy people that wouldn't think of disclosing details of such a secure operation..... Oh, wait.

    Nah, we don't kill people. We play video games.

    Sometimes I think the Army and government recruits like a gang or drug dealer. They offer people with little hope in life a job. They offer training. Stop me if you have heard this one: "The Navy will train you how to work on nuclear submaries... do you know how much people who work on nuclear stuff make outside the navy? $100,000 cash. Cold cash. Come on, let me hook you up, we'll even give you $5,000 if you sign up. It is a cakewalk, in 4 years you'll be out, and while you are in, we'll show you exotic places, exotic pussy. What do you want to do? Work in a McDonalds the next 4 years trying to save money for college? Hell, you can't even read".

    Then the real story starts after boot camp. "You want me to do what? Tie a rope around my waist and drop down off the side of the battleship and clean the salt off the boat??" then in 4 years "My time is finally up. WHAT??? I got extended. By who?". And then the worst trick of all, 5 years later. "But I have nuclear experience, why can't I work for Ford? What, you exported all your jobs? Where??"

    They have to get people in one way or another. Army and government recruitment is like spam for making your penis bigger. They will rip off anyone they can. It is ashame we let them in highschools to sell their programs to kids under 18, to prep them for when they turn 18. Kids should need to have their parents sign an approval form for their kids in highschool to watch the recruitments.

    --

    Rosco: "If brains were gunpowder, Enos couldn't blow his nose."

  21. Re:anti globalism = anti americanism? by arstchnca · · Score: 3, Insightful

    It is an all-too-common misconception that disagreeing with a nation's administration renders one "unpatriotic." As far as I know, the definition of a patriot remains "one who loves and defends his or her country."

    What many these days seem to fail to realize is that one's country and one's government are too very different things. If that were not the case, those fighting for America's freedom from British rule during the American Revolution, the quintessential example of an American patriot, would not be considered patriotic at all.

    I'd like to remind everyone that the kid wearing the "Fuck Bush" t-shirt is still very much a patriot, so long as he loves his country for blessing him with the freedom to express his beliefs that contradict the administration's policy.

    (And yes, I do realize that anyone kid wearing said t-shirt is, in all likelihood, doing so for attention rather than to further a political opinion.)

    --
    -- arstchnca
    --
  22. About time Some appreciates the Sweet Deal that is by Creepy+Crawler · · Score: 2, Interesting

    the military life. I get so annoyed with some of these active duty crybabies and their complaints about low pay.

    Let me tell you something, the military is a swank deal and everyone should stop crying wolf over a bogus issue. Let me break it down.

    Okay, so starting off, military pay is kind of on the low side. However, its not low considering the great benefits, which render the salary pure gravy. Especially considering, you're getting free paid training. How many companies offer free paid training, with total benefits, to completely unskilled people? Not many. You get free housing, all you have to do is pay for optionals like cable TV and telephone calls. But even that is subsided by the BAH II, which chips in some dough, tax-free, to you, to pay for things, like toilet paper and paper towels. Hell, your initial work clothes are given to you free, everyone else in the real world has to pay out of pocket.

    Replacement work clothes, aka BDUs, are paid for too. They give you a nice fat check to use to buy new clothing as you see fit.

    These things, and many many others, are sold at a heavily discounted rate .... Wholesale cost plus 5%. You have subsided entertainment options, you pay nothing for health, dental, mental health, or vision care. Your transportation costs are lower because the base has its own intra-base mass transit, and if you own a car, maintenance is a available at a discount rate,

    Plus you get 30 days of paid vacation and 12 federal holidays off a year. That's 42 day or 12% of the year off. That's 3xs the average of two weeks a year in the civilian world. The military even provides free travel on Space Available Flights, for, at worse a nominal fee, and there are often on base accommodations for members at discount. In addition to paid vacation time, you also receive unlimited paid sick leave. Plus there is no risk of being fired for using these benefits as very few soldiers are fired during their period of guaranteed employment. How many companies offer their wage slaves guaranteed employment? Again not many. This is because the military does not outsource its jobs overseas, rarely does it cut down on its numbers, and never does it fire anyway for anything less than gross incompetence or criminality. In many cases, criminal conduct is swept under the rung with a slap on the wrist thanks to Article 15s.

    As you mature,get older, and serve longer guess what? The deal gets even sweeter. You only have to serve twenty years and guess what? You get a free retirement for life, a giant, never ending 401k you didn't have to pay into. Its free money and you can start receiving, depending on the age of enlistment at 37. The VA begins to provide you with low cost healthcare upon retirement as well. You get the MGIB, which will pay for any college expense you may have left over. This should not be too much of a problem given the military already pays 100% of all college tuition of all people on active duty. If you went to college before enlistment, the military has programs, for student loan repayment. Soldiers who retired or leave after one enlistment get access to numerous other benefits like low cost VA housing lows, job training, and preferential hiring for government jobs, no matter how unqualified or incompetent they are, allowing them to beat out superior applicants.

    In addition, over those twenty years of service, you get multiple, guaranteed pay raises. You get more money for marrying and for each dependent you have, meaning the military pays you to fuck and have kids.

    So to brake it down: The military deal includes
    Free College
    Free Housing
    Free Health/Mental/Dental/Vision care (often for life)
    Free Retirement
    Free Paid Training
    Paid Vacation
    Unlimited Paid Sick Leave
    Guaranteed Raises
    Job Programs
    Subsided Shopping/ Transportation/ Entertainment
    Security Clearance

    (taken from http://www.kuro5hin.org/comments/2005/5/23/15739/0 556/20#20 )

    --
  23. Slashdot has caught the political meme by Anonymous Coward · · Score: 5, Insightful

    There used to be a time when you could comment on such articles without it being turned into a political diatribe. This article is damn interesting and there could be some awesome commentary by some /.'ers. However you political numbnuts decided to turn this into soapbox rant afternoon.

    BTW, I am left-leaning as well, but for fucks sake keep your politics to yourself. It's completely off-topic yet gets modded up becuase of /. groupthink. Leave your political rants for the /. political threads.

    Cmon guys don't drag this place down a notch. It's annoying to sort through at +4/5 expecting cool comments but all you get is some guys off topic political rant that fits the /. atmosphere.

  24. Some people rubbish the parent, but by panurge · · Score: 3, Insightful

    They suffer from imagination deficiency. Apart from disrupting things like pipelines, which (as I discovered when working for a company that made pipeline parts, among other things) have some interesting design deficiencies, there is the potential to do things like change the schedule of estuarine sewage pumps so that they pump out on the rising, not the falling tide. Or change the dosing pump settings on water treatment plants. Most of the world is incredibly dependent on clean water and sewage treatment, with river pollution so high as to make untreated water undrinkable. Serious disruption to the water system would kill or make sick a lot of old people and young children - and, just like US and Russian landmines that are designed to injure children rather than kill them, this would have disruptive effects out of proportion to the numbers and economic activity of those affected.

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
  25. Re:Is that your attack strategy by thynk · · Score: 2, Insightful

    Is that you're terror attack strategy? Try to break into the 911 network just as someone who doesn't speak very good English, is having a heart attack?

    Your response has shown me that I didn't make myself very clear in the posting. I was simply refuting the statement that no one dies when networks go down and provided a simple example to back it up.

    I'm not so small minded to think that attacking just the 911 system would be an effective terror attack. Now, take down the cell towers and phone exchanges in NYC would cause havoc enough, but do it while turning off the power grids and killing off the communication channels the emergency response units use to communicate to people in the field. With no way to contact police and emergency responce units, the greed and paranoia of 8 million people would quickly make a war zone look like a kindergarden.

    I could go farther, but I don't want to give up too many ideas to the RIAA/MPAA and the phone company to use for evil.

    --

    Good judgment comes from experience, and a lot of that comes from bad judgment.
  26. Actually... by Savage-Rabbit · · Score: 2, Informative

    ...the worst stuff doesn't happen at Gitmo. Allegedly the CIA has a small fleet of executive jets including the legendary N379P that regulary overfly Europe on their way to Egypt or some other place where people are still allowed to conduct what the KGB used to call 'Efficient interrogations' Amnesty international (quoting ex CIA employees) call it torture but who listens to them?.

    --
    Only to idiots, are orders laws.
    -- Henning von Tresckow