Slashdot Mirror


Computer Security Lacking at Homeland Security

peter303 writes "The New York Times (reg. required) reports that computer backup procedures are woefully inadequate at 19 centers of the Department of Homeland Security. Should this agency strive to be good example for the rest of the country and protect against extreme hackers? " From the article: "Adequate backups were lacking for networks that screen airline passengers, that inspect goods moving across borders and that communicate with department employees and outside officials. Those same agencies, the auditors found, have in most cases failed to prepare sufficiently written disaster recovery plans that would guide operations if a main office or computer system was knocked out."

158 comments

  1. HA! by uberjoe · · Score: 2, Funny

    Oh what a delicious irony. Insecurity and the Dept of Security.

    --

    The days of the digital watch are numbered.

    1. Re:HA! by JamesD_UK · · Score: 2, Funny

      My computer homeland security appears to perfectly adequate. Just try hacking me!

    2. Re:HA! by Rei · · Score: 3, Funny

      Hey now, don't try and pressure them to reform. You know very well that if the Department of Homeland Security is forced to spend the resources to make its network more secure, the terrorists win. Do you really want the terrorists to win? Why do you hate America so much?

      --
      Sigur RÃs: I didn't know that Heaven had a rock band.
    3. Re:HA! by Anonymous Coward · · Score: 0

      that's getting really fucking old. oh, and congratulations, you live in the UNITED KINGDOM!!!111! how about you just try hacking me HAHAH HAHAHAHA HAAHA I AM T3H FUNNAY man, there goes my positive karma though... nah, fuck it i'm going anonymous. don't want to loose my mod modpoints

    4. Re:HA! by Rei · · Score: 1

      It's a lot more effective when you create a DNS entry that maps to 127.0.0.1. Then, even a person who knows very well that 127.0.0.1 is local loopback might not notice, and start issuing commands to scan and attack based on the DNS instead of the IP.

      --
      Sigur RÃs: I didn't know that Heaven had a rock band.
    5. Re:HA! by dodobh · · Score: 2, Funny

      The ministry of peace.
      The ministry of truth.
      The department of homeland security.

      --
      I can throw myself at the ground, and miss.
    6. Re:HA! by Spoing · · Score: 1

      "The ministry of peace.
      The ministry of truth.
      The department of homeland security."

      I still get the impression that the name implies a salute using a stiff palm raised high. Maybe with a little Vaugner playing in the background.

      What moron thought that was a good name?

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    7. Re:HA! by Bush+Pig · · Score: 1

      The thing is, that the Dept of Homeland Security is just theatre anyway. Most governments, notably the US govt, just want us all to be fearful, and hence easier to manipulate.

      --
      What a long, strange trip it's been.
    8. Re:HA! by Lord+Kano · · Score: 1

      Oh what a delicious irony. Insecurity and the Dept of Security.

      Yes, that was the joke. I know I'll sleep better tonight knowing that you got it.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
  2. duh by Anonymous Coward · · Score: 0

    no shit sherlock

  3. And this is... by Anonymous Coward · · Score: 0

    somehow surprising to people?

    1. Re:And this is... by rovingeyes · · Score: 2, Insightful
      Yes, and if not it should be. There is so much fuss made by the goverment about the "security" that "Homeland Security" is going to provide this country and we even had to sacrifice a lot for that elusive "security". If that department is itself going to be a network like my home then I should be surprised.

      If general public especially computer nerds say "eh whats new" then no one else is going to bother, coz the general public doesn't even realize they have to bother.

      I know I am going in to a ramble mode but for gods sake their only job is security and they fuck it up royally and blame terrorists.

  4. And for those of us who don't want to register.... by DotNM · · Score: 2, Informative

    ... for every little thing we want to read.... User ID: slashdotreader Password: slashdot

    --
    There's no place like localhost
  5. I'm torn... by bluGill · · Score: 3, Insightful

    It is wrong that they don't have backups. However a lot of this data is stuff that I want to be on a server that crashes hard, without backups. Preferably in such a way that even disaster recovery places can't get the data back.

    1. Re:I'm torn... by ImaLamer · · Score: 1

      What scares me is that this new agency is losing its records. Data loss is a security issue always, but now when we are paying people to do a job on our behalf.

      If another 9/11 happens do you want them to be able to look at their records? What if they are fsck'n the system on our dime?

      Just store them on a backup machine nicknamed "Deep Throat".

    2. Re:I'm torn... by Stanistani · · Score: 1

      No backups... disaster for DHS... added protection for the people who are listed on their servers... most of the identity information that's 'gone missing' lately has been from mislaid backup tapes.

    3. Re:I'm torn... by ScentCone · · Score: 0, Flamebait

      However a lot of this data is stuff that I want to be on a server that crashes hard, without backups. Preferably in such a way that even disaster recovery places can't get the data back.

      Um... because you'd rather that security is handled by systems that can mine for threats in real time, all the time, so they don't have to worry about it? Or, because you're really not worried about the foreign national who's overstayed his visa, but who took pilot lessons, just spent a couple of months touring the scenic mountains of northern Pakistan, doesn't file taxes but spends a lot on wholesale chemicals and used dental xray equipment, and wires a lot of money to Hamas? Definately we don't want that info available, even in profile/status form, when he's booking a seat on a flight back into Dulles, or trying to get a license to drive 18-wheelers tankers for his new job at the fuel delivery company or signing up at the railyard where they load chlorine by the megaliter.

      --
      Don't disappoint your bird dog. Go to the range.
    4. Re:I'm torn... by gstoddart · · Score: 1
      It is wrong that they don't have backups. However a lot of this data is stuff that I want to be on a server that crashes hard, without backups. Preferably in such a way that even disaster recovery places can't get the data back.

      As much as they're functioning as an evil entity ....

      If they are going to gather information which will be used to imprison people, strip them of their rights, or all of the other things they are doing, it behooves them to have accurate records.

      Otherwise, what happens when they 'lose' the data that got you held under a special ticket that says nobody gets to know where you are, but keep the data that indicates you're still evil.

      Is tha internal check going to say "anyone whose incriminating data has been lost is freed"??? No, they're going to say the reasons are still friggin' classified and that this person really does need to be secluded without a lawyer for even longer.

      They've been given powers whcich seem well outside the usual rule of law. If they're incapable of going to extra-ordinary lengths to preserve data integrity, then as an organization, they don't deserve such far reaching powers.
      --
      Lost at C:>. Found at C.
    5. Re:I'm torn... by ScentCone · · Score: 1

      Ah! The Flamebait Of Truth Mod! That's my favorite kind - it means I'm strking a chort. The GP thinks that DHS's systems might be better off trashed, but offers no notion of how he'd approach dealing with exactly the sort of issues that I just raised. The mod down means that there are at least two people that clueless.

      --
      Don't disappoint your bird dog. Go to the range.
    6. Re:I'm torn... by Anonymous Coward · · Score: 0

      Fear not. If they loose all data on terrorist watch list, they can rebuild it from the same sources they built it from in the first place. The DNC membership list, the Green party membership list, the ACLU membership list, the various human rights organistations membership lists, the union of concerned scientists membership list, etc.

  6. Who needs good security on homeland computers? by CrazyJim1 · · Score: 2, Funny

    If they can trace down who's hacking them, they deserve a stiff jail time. Any one who attempts to hack homeland security computers knows that they're going to get serious jail time. Basically the only people who want to hack homeland security computers would be terrorists.

    1. Re:Who needs good security on homeland computers? by Anonymous Coward · · Score: 0

      "Basically the only people who want to hack homeland security computers would be terrorists."

      I'm not American, but I always thought the very reason the Department for Homeland Security got established, was because there were threats from terrorist, so what's your point exactly?

      Further, how do you expect the same guys that seem to be unable to do a decent backup, to be able to track down a cracker who really knows his stuff?

      Finally, do you really think, oh, but they will be punished so hard (if we ever even notice something bad has gone on) is a good strategy for an Agency that calls itself Department of Homeland Security?

    2. Re:Who needs good security on homeland computers? by I+confirm+I'm+not+a · · Score: 3, Insightful

      Basically the only people who want to hack homeland security computers would be terrorists.

      ...and UFO researchers. Don't forget UFO researchers.

      ;-)

      Seriously, though, I'd tend to blame "hacking" like this on the intelligence and security services of foreign powers (and their domestic servants, etc) before I blamed terrorists. Terrorists tend to prefer, well, terror, preferably against a multitude of frightened civilians.

      --
      This is where the serious fun begins.
    3. Re:Who needs good security on homeland computers? by Shrapn3l · · Score: 1

      Basically the only people who want to hack homeland security computers would be terrorists.

      Perhaps. But we cannot just point the finger immediately as soon as a computer does get cracked. And the fact that crackers can use anonymous proxies and the like to carry out their attacks doesn't necessarily mean that they'll get caught right off the bat. And we all need good security in any case, really. No one wants a systemwide failure period. That motivation at least should be enough to upgrade Homeland Security Computer Security.

      --
      That that is, is.
    4. Re:Who needs good security on homeland computers? by Urania · · Score: 1

      What, so we shouldn't bother with strong security at Ft. Knox because anyone who tried to stage a robbery there would be locked up for eons, and would be a large-scale criminal anyway?

      Unfortunately, I think that quite a few people who aren't "terrorists" per se would be more than happy to try to hack into homeland security computers. Why? I'd imagine it's quite an accomplishment to claim, from certain points of view. Plus, there are certain people who are anti-government but not exactly anti-American-people enough to go around bombing places or whatever; this would seem a "harmless" target that would hurt the infrastructure but not kill anyone.

      That's misleading logic, though, since having to track/do damage control after someone wreaked havoc here would take energy and resources away from Homeland Security's real mission, and in doing so possibly endanger the country. Even if I'm rather skeptical of the agency's structure and initiatives (which I am), I still think it could be detrimental to gum its gears like that.

    5. Re:Who needs good security on homeland computers? by aurelian · · Score: 1
      Basically the only people who want to hack homeland security computers would be terrorists.

      So is it fair to say that someone who has a problem with the US Dept of Homeland Security is a terrorist sympathizer? Or even has terrorist tendencies?

    6. Re:Who needs good security on homeland computers? by Anonymous Coward · · Score: 0

      Adding your friends to the no fly list makes you a terrorist?

      I'm screwed!

    7. Re:Who needs good security on homeland computers? by Saeed+al-Sahaf · · Score: 1
      Terrorists tend to prefer, well, terror, preferably against a multitude of frightened civilians.

      You mean like these people?

      --
      "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    8. Re:Who needs good security on homeland computers? by CrazyJim2 · · Score: 1

      I'm gonna dress my children in erotic clothing and anyone who molests them is a child molestor. I'm gonna leave all my money taped to the front of my door and anyone who takes it is a thief. I'm gonna attach a loaded gun to my head and anyone who pulls the trigger is a murderer. I'm gonna publish ridiculous claims that I've invented True A.I. on the internet and then if anyone ever does invent True A.I., they stole my idea. Rather than prevent wrong-doing from occuring in the first place, I'm going to encourage ti to occur and punish the perpetrators, victims be damned.

      --
      "But theres things mightier than a sword, and there are things mightier than pens. Guns and rap." - CrazyJim1
  7. It's all an Illusion by ilyanep · · Score: 5, Insightful

    Don't take this as flamebait but I have the feeling that nobody's really trying hard enough to protect us. We stand an hour longer in the security line just so that people can bring explosives through in their shoes? Now they make us take our shoes off. What if someone brings explosives through in their pants?

    Same here...they pretend to try to catch terorists when in reality the next power failiure could knock the whole list out.

    --
    ~Ilyanep
    To get message, take amount of carrier pigeons at each stage mod 2. Then decode binary.
    1. Re:It's all an Illusion by Conspiracy_Of_Doves · · Score: 1

      Well of course. I thought that everyone knew that the government doesn't really give a damn about the people. It just needs to put on a good show so that the unintelligent majority can sit back and watch thier sitcoms and never actually think about anything.

    2. Re:It's all an Illusion by idontgno · · Score: 1

      It's a sick sad world when I can't tell if you're being sarcastic or sincere. Sigh.

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    3. Re:It's all an Illusion by Anonymous Coward · · Score: 0

      That is because the U.S. system is hamstrung by political correctness. We can't possibly offend anyone and profile.

    4. Re:It's all an Illusion by Anonymous Coward · · Score: 0

      That is because the U.S. system is hamstrung by political correctness. We can't possibly offend anyone and profile.

      Ted Kaczynski - white guy
      Jeffrey Dahlmer - white guy
      Terry Nichols, Tim McVeigh - white guys
      Dave Koresh - white guy
      The IRA - bunch of white guys
      The KKK - bunch of white guys in hoods.

    5. Re:It's all an Illusion by Tackhead · · Score: 2, Interesting
      > I have the feeling that nobody's really trying hard enough to protect us. We stand an hour longer in the security line just so that people can bring explosives through in their shoes? Now they make us take our shoes off. What if someone brings explosives through in their pants?

      ...then evolutionary pressures start to select in favor of people like the Goatse Guy?

      Seriously - that was the biggest disappointment about the shoe-bomber case. If he'd only smuggled the bomb up his ass, the simple act of getting in line at the airport would be a lot more fun.

      Imagine hearing stuff like "Excuse me, ma'am, I think you're kinda cute, and since I'm kinda average, and since the guy front of me is obviously better-looking than me, and since the guy standing behind you is obviously gay, I think that three out of the four of us would be happier if you and I switched places. How 'bout it?"

      Everybody wins!

    6. Re:It's all an Illusion by Conspiracy_Of_Doves · · Score: 1

      You think that's bad? I'm not even sure.

    7. Re:It's all an Illusion by pointbeing · · Score: 1
      Don't take this as flamebait but I have the feeling that nobody's really trying hard enough to protect us. We stand an hour longer in the security line just so that people can bring explosives through in their shoes? Now they make us take our shoes off. What if someone brings explosives through in their pants?

      Considering that IMO probably 98% of all the people in the world should never be seen naked I'd vote for gouging my eyes out, I think.

      On a happier note, it's also my opinion that the remaining 2% of the population should be prohibited from wearing clothing at any time.

      --
      we see things not as as they are, but as we are.
      -- anais nin
    8. Re:It's all an Illusion by Anonymous Coward · · Score: 0

      What if someone brings explosives through in their pants?
      ...ya, what if?
      ...what if someone brings explosives through up their ass?
      ...what if some crafty MacGyver type figures out how to make a bomb using earwax and urine?

    9. Re:It's all an Illusion by Bios_Hakr · · Score: 2, Interesting

      Something I've wondered is when the terrorists will actually have the explosives INSIDE them. Fuck, if you are gonna die anyway, just pull out a kidney or pack some explosives inside a lung.

      The main problem will be to get the guy so drugged he won't care about the stitches/pain yet will still be able to physically board the plane.

      It'd be even better to use a post-partum woman. She'd already have a lot of room and wouldn't really require surgery to implant the explosives. It'd be hard to get a woman recruited into their little cult, but if they kidnap a baby and promise to release the child if the woman goes with their plan, I'm sure they'd get a few willing moms.

      Just remember: The next thing will be something we don't expect. Kinda like the Inquisition.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    10. Re:It's all an Illusion by rsadelle · · Score: 1

      Oh, yeah, thanks for the image. "Are you happy to see me or are those explosives in your pants?"

    11. Re:It's all an Illusion by Anonymous Coward · · Score: 0

      The KKK - bunch of white guys in hoods.

      White hoods, mind you.

    12. Re:It's all an Illusion by geoff+lane · · Score: 2, Insightful

      If you do have a bomb, a long queue of annoyed, tired travellers in a crowded airport looks a lot like a lovely soft target. Why try to get on the plane?

    13. Re:It's all an Illusion by Pollardito · · Score: 2, Insightful

      it's not really about protecting us. it's about having a reason to issue contracts to the same companies that would be producing items for our military if we still had a credible opposing superpower. i for one feel a little warm fuzzy that they even bother to come up with these flimsy excuses. they wouldn't lie to us if they didn't care what we thought

    14. Re:It's all an Illusion by Vitriol+Angst · · Score: 1

      Absolutely.

      There is nothing about these security checks that is going to stop a real threat. It is a chance to spend money (power) and hire people (influence) to keep up employment (but not a public works program because its security and military--wink, wink). Making people wait in line is just training for our glorious future. Does it matter what you call your government if it just plane sucks?

      I see absolutely NO concern about terrorism from this government. I just see window dressing. Terrorism should be treated as a crime--not by attacking the innocent and creating a greater threat. We have to change conditions that we have created (not all of this is our fault, but a good bit is under our control --like propping up the Saudis).

      Do you think people who worry about being shot care if they are in a totalitarian or a communist country? But somehow we have spent $Billions to ensure that Iraqis can call the new tyranny a Democracy rather than a Tyranny. "Yeah. Can somebody turn on the candle?"

      Nothing addressed the fact that Dick Cheney and Bush sat on their ass for 2.5 hours waiting for a plane to hit, without telling the jets to take them out. Compared with an average of 15 minute intercepts for 99 planes before 9/11 which went off their transponders.

      The next horrible thing that happens-- I can guarantee that there will be an investigation. I just want a refund. Get rid of all this useless window dressing and give me my kids money back. Nothing has been done to secure cargo holds, chemical plants or other targets. Only to secure the government from the people. Tracking what I buy or what I read doesn't stop terrorism. But it does stop people from being empowered to make change -- or improve targeted campaigning.

      Whatever. Those who get it already understand. And those idiots that voted for Bush -- well, by the time they get out of denial, it will be too late to care what is in their heads. Doesn't really matter if they vote against Bush next time or not, unless there is a 75% majority, anything less will be swept under the carpet.

      --
      >>"ad space available -- low rates!!!"
  8. Why does the word "homeland" by Anonymous Coward · · Score: 0


    remind me of 1940's Germany ?

    1. Re:Why does the word "homeland" by Anonymous Coward · · Score: 0

      Being German and studying history, I can't for the life of me figure out why it does?

      Really, there is no special significance to the word "homeland", or Heimatland when it comes to Nazi Germany.

      So, you beat me on that, but maybe you can enlighten us, why it does.

    2. Re:Why does the word "homeland" by not_a_product_id · · Score: 1

      nah, that was "Fatherland" and Soviet's shoved loads of folk off to the gulags for the sake of the "Motherland". I'm sure "Homeland" has nooooooooo connections. ;-)

      --

      ---
      We spoke for about a half an hour. I don't recall a thing we said. - Colorblind James Experience

  9. And this matters how??? by shoppa · · Score: 2, Interesting
    What difference does it make whether you have backup hardware/network/software ready when the primary doesn't even do the desired job? The government as a whole spends billions every year to attempt to refine ill-defined requirements into working productive systems that fill real needs. The DHS has never succeeded in producing such a system.

    It's easy to pick holes in the lack of backup of a system, but it's pointless when the system has no utility to begin with.

    1. Re:And this matters how??? by moranar · · Score: 1

      I notice the full name is "Department of Homeland Security". That's shortened more properly to "DOHS". Now, where have I heard "d'ohs!"?

      Striking coincidence...

      --
      "I think it would be a good idea!"
      Gandhi, about Internet Security
  10. omg!!11! by RetroRichie · · Score: 1

    Something is lacking at Homeland Security???

    Say it ain't so!

  11. Careful What You Wish For by Doc+Ruby · · Score: 1

    When are people in Washington going to wake up? It's probably going to take a Pearl Harbor style disaster for them to do something...

    --

    --
    make install -not war

    1. Re:Careful What You Wish For by Anonymous Coward · · Score: 0

      It's probably going to take a Pearl Harbor style disaster for them to do something...

      lets hope so, some children wont learn something is bad until they are spanked, and the next time USA is spanked the rest of the world will just say "oh dear thats a shame"

    2. Re:Careful What You Wish For by plopez · · Score: 1

      I thought 9/11 WAS Pearl Harbor.

      But wait! After Pearl Harbor Roosevelt didn't say 'Let's go shopping!'. Which is precisely what Bush Cheney said after 9/11 so maybe you are right....

      --
      putting the 'B' in LGBTQ+
    3. Re:Careful What You Wish For by 99BottlesOfBeerInMyF · · Score: 1

      It's probably going to take a Pearl Harbor style disaster for them to do something...

      They are doing something. They're taking a pile of your tax dollars and using it to collect information on you while simultaneously giving huge amounts of money to all sorts of ex-cons and ex-govt officials in a variety of security industries. Or did you mean you wish they would do something about improving their computer security or inconveniencing terrorists. Fat chance of that.

    4. Re:Careful What You Wish For by zoloto · · Score: 1

      If you remember from your history class, Pearl Harbor was in direct responce to the United States economic and political pressures, which were at the time, quite a misperception.

      The increasing diplomatic confrontations and economic sanctions against Japan by the United States and others, compounded by Japan's undeclared war in China and the weakening of European control in Asian colonies, precipitated the war in the Pacific.

      You can find this information here: http://www.mindef.gov.sg.nyud.net:8090/safti/point er/back/journals/2000/Vol26_1/5.htm and search on google for more information. Don't mistakenly call 9/11/01 anything similar to Pearl Harbor. We didn't sanction the terrorists or put any political pressure on them, but the we did to the Japanese. The terrorists or muslim extremists, or whatever you want to call them, were NOT provoked. They simply call us heathans, infidels and say we've been interfering for generations.

      We have, like other countries. But you don't see those places being attacked with their own airplanes now do you?

    5. Re:Careful What You Wish For by Doc+Ruby · · Score: 1

      Pearl Harbor was, in retrospect (the only perspective that matters today), important as the galvanizing event sending the American public to war against the Japanese, regardless of the prior interest of the American government. Or prior provocation. The Qaeda WTC/Pentagon planebombings were the same: galvanizing event, sending Americans ourselves to war against "Terror". We already had several prior attacks, including the USS Cole, African embassies, even the 1993 WTC bombing. But the planebombings galvanized the public, sending us to war. That is the nature of the event to which I referred, sarcastically, in my post.

      Not that the preceeding events aren't important in understanding the turning point itself. Which is why your mistake about American pressure on the Qaeda is important. The Qaeda is not a government like the Japanese enemy was, but bin Ladin and his network are the self-proclaimed army fighting the fight of their community, as they see it. Regardless of the legitimacy of their claim, or the obviously unacceptable methods in their fight, they are in fact responding to pressure from the US on that community. Decades of American pressure, like supporting the Saudi mob family that oppresses their people, stationing troops in their countries to keep cheap oil flowing to America, all the American military, political and economic complicity in perpetuating the artificial system of Arab/muslim countries, all take their toll. There are, of course, other partners in that oppression: the UK, France, Russia, all the other industrial powers which benefit from the oppression. But America is the most visible partner, especially because America seems more vulnerable to returned pressure, precisely because we say we represent democracy and freedom - all of which we oppose in their countries. Of course the Saudis, Iranians, Syrians, Egyptians, etc who oppress their own people are primarily responsible, but they're much harder to change, and certain to respond to direct pressure with deadly recriminations. Moreover, they're directly in control of their local propaganda. That immediate power, combined with the difficulty of harnessing Arab xenophobia in service of "fighting back" against other Arabs, focuses the response on America, rather than fellow Arabs. Of course the same mechanics drag in oversimplified versions of problems like Palestinian oppression (largely by Palestinians like Arafat partnering in perpetual war with Israelis), which again justifies attacking America as the weak link in that oppression.

      There is no denying that billions of Arabs have been oppressed for many generations. And that Americans, and our European predecessors, have either led the oppression, or (more lately) supported proxies, for our economic, military and political benefit. Bin Ladin, his Qaeda network, and other terrorists are insane liars, capitalizing on that oppression to launch a coup, taking the reigns as the new oppressors. But we have to recognize that our complicity in their problems is both direct, and part of the root of the return pressure. What has changed on the Arab side of the oppression is the emergence of financed, organized leaders - and increased American vulnerability from terrible foreign policy and defence strategies which ignore the actual threats, or exploit them for more power, just like their terrorist counterparts. New changes are required to make the current unacceptable situation different. If we don't accept the truth about the current situation, and some of its causes we've long denied, we can't create a new situation that we can accept.

      --

      --
      make install -not war

    6. Re:Careful What You Wish For by Anonymous Coward · · Score: 0
      Wake up. No government can protect you from terrorists. But they're happy to spend lots of your money pretending.

      And this is why security at Homeland Security is so bad. They know what they're doing doesn't really matter.

  12. If you don't know how to do it... by shoppa · · Score: 2, Insightful
    As a follow-up to my previous comment:
    If you don't know how to do it, YOU DON'T KNOW HOW TO DO IT ON A COMPUTER

    DHS has computer problems, sure, but the agency as a whole is a misguided waste of resources. It's probably better that it's computer systems don't work, otherwise they'd figure out a way to stop Ted Kennedy from driving or using an elevator in addition to not flying.

    1. Re:If you don't know how to do it... by ignorant_coward · · Score: 1


      Add that the only agencies that could ever hope to get funding to do a computer system properly are not under DHS. The CIA, NSA, somewhere deep in the DoD, etc., they probably get the resources they need, but DHS is a cost for Congress to budget without immediate intelligence or defense benefits like spy satellites or cruise missiles.

      Probably the biggest challenge for DHS is not computers, either, as it is probably raw man power. Thousands of miles of borders, compounded by interdependent economies, isn't an easy thing to deal with, for example.

    2. Re:If you don't know how to do it... by mchugh · · Score: 1
      ...otherwise they'd figure out a way to stop Ted Kennedy from driving...

      Mary Jo Kopechne might not think that that's such a bad idea.

  13. Well, duh! by Anonymous Coward · · Score: 0

    It's the Department of Homeland Security, not the Department of Computer Security. What do you expect?

  14. This could really suck... by idontgno · · Score: 5, Insightful
    Adequate backups were lacking for networks that screen airline passengers...

    "I'm sorry, Sir, you can't board. Our screening system is down."

    "I've got a ticket. I've shown you my papers. You (and every RFID hacker within 50 feet of my entire path through this airport) have scrutinized my RFID passport. I've given my decilitre of blood for biometric screening. The plane is about to close door and push off. I'm returning home after 18 months dodging RPGs and Kalashnikov fire in Bagdhad, and I'm still in uniform. And you're telling me I can't board because you can't be sure I'm actually not bin Laden in extremely clever disguise?"

    "No, Sir, I'm telling you that you can't board. Our screening system is down."

    "This is unacceptable. Who is your supervisor?"

    "That is classified. Please wait here. [whispers into radio: "Got another Gitmo client for ya."]

    --
    Welcome to the Panopticon. Used to be a prison, now it's your home.
  15. But George said it was OK! by Yonkeltron · · Score: 2, Insightful

    This is very interesting news after Bush just got done saying how great the new patriot act is. It looks to me that our own security got lost while we were busy questioning the integrity of others. Between the roving wire-taps and the judge-less warrants, I think I deserve to know that the people taking away my information can keep it safe from others who would want to take it away.

    --
    Keep the faith, share the code
    1. Re:But George said it was OK! by Anonymous Coward · · Score: 0

      It is OK. But unless they leave themselves vulnerable they can't be hacked and then George can't use it as an excuse to demand passage of Patriot Act III. Expect the postal service to get anthrax spored again at that time (just in case anyone wants to write to their congressman). Hey it worked once, why change a winning strategy?

  16. Dry humor by benhocking · · Score: 1

    I'm assuming that there will be a lot of people who won't realize you're kidding.

    --
    Ben Hocking
    Need a professional organizer?
  17. Thank god they don't have backups! by Anonymous Coward · · Score: 0

    I'm sure most of them would have been lost in transit via USPS by now.

    1. Re:Thank god they don't have backups! by Anonymous Coward · · Score: 0

      You do realize that was UPS, not USPS that lost the tapes, don't you?

  18. What do backups have to do with security? by MythoBeast · · Score: 2, Interesting

    Since when does failing to back up your hard drive make your system easier to hack into? If you're talking about them having poor data integrity that's one thing, but this doesn't seem to point to poor computer security.

    --
    Wake up - the future is arriving faster than you think.
    1. Re:What do backups have to do with security? by Bob+4knee · · Score: 2, Informative

      Security is normally considered to have 3 aspects. Secrecy (or confidentiality), integrity, and availability. (Use the mnenomic "CIA" to remember the three components). While secrecy is (sometimes) important, it is just one part of security.

    2. Re:What do backups have to do with security? by poot_rootbeer · · Score: 1


      Exactly.

      While backup processes are related to data retention policy, and such polieces are related to security, it's a gross oversimplification to assert that "NO BACKUPS = NO SECURITY" as Submitter has done.

    3. Re:What do backups have to do with security? by Spoing · · Score: 1
      Since when does failing to back up your hard drive make your system easier to hack into? If you're talking about them having poor data integrity that's one thing, but this doesn't seem to point to poor computer security.

      (scratches head)

      1. If you don't know what you had you don't know if what you have has been screwed with.

      2. If you do get screwed with, it's critical to be able to restore from a known good system. Otherwise, game over; you have to rebuild from scratch and guess about what has/has not been compromised.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    4. Re:What do backups have to do with security? by Vombatus · · Score: 1

      Backups are related to disaster recovery plans, not data retention policies - there is a difference

      --
      This sig is intentionally blank
  19. Anyone Surprised? by 1967mustangman · · Score: 1

    Is anyone seriously surpised about this? I mean this department was cobbled together soooooo quickly its a wonder they can even function. I mean look at all the other departments of gov out their that have a barely functioning website. I don't know about you, but I have always found the most annoying websites to be government sites.

    --
    Madre de Dios! Es El Pollo Diablo! -- Captain Blondebeard
    1. Re:Anyone Surprised? by ignorant_coward · · Score: 1

      I don't know about you, but I have always found the most annoying websites to be government sites.

      Some do really well. My state's website is awesome. I found out how to start a sole prorpietorship and do sales tax within a few clicks of the mouse. It also helps my state has awesome laws for sole prorietorships and sales tax (no business license and a single page return for state and county tax!).

      Sometimes, how a state government presents itself shows the overall health of that state. My state has a very level-headed approach, it seems, and tries hard to be reasonable to businesses. Some other states put on the red tape so thick, it is just pathetic...oh, and their websites suck, too.

    2. Re:Anyone Surprised? by Bourbonium · · Score: 1

      Speaking as someone from a state with a very poor record of supporting or encouraging business (and a reputation for taxing them into insolvency), can you tell me where I should move to enjoy the benefits you describe?

    3. Re:Anyone Surprised? by Anonymous Coward · · Score: 0


      I'm partial to North Carolina, and no one should ever compare it to South Carolina. NC has a good university system, is small business friendly, and is generally a fine place to live. SC is the home of Bob Jones University, no need to say more.

  20. "Extreme Hackers"? by Shaper_pmp · · Score: 3, Funny

    WTF are "Extreme hackers"?

    People who crack Windows boxen while bungee jumping? Releasing IIS worms from a wi-fi enabled handheld in a canoe half-way down some whitewater rapids?

    Or, y'know, just yet another pathetic attempt to make something fundamentally known and understood sound suddenly somehow exciting and dangerous?

    Oh, and for reference? The "Extreme Hacker" your link's about was a 37 year-old script kiddie who Haxx0red Us government machines direct from his own home connection.

    You couldn't get stupider (and less '1ee7) if you tried...

    --
    Everything in moderation, including moderation itself
    1. Re:"Extreme Hackers"? by Anonymous Coward · · Score: 0

      they drink mountain dew while doing ollies over crocodile pits.

    2. Re:"Extreme Hackers"? by Anonymous Coward · · Score: 0

      You couldn't get stupider (and less '1ee7) if you tried...

      You could be so stupid you couldn't even spell "1337" correctly but that is uncommon.

    3. Re:"Extreme Hackers"? by Anonymous Coward · · Score: 0

      Extreme hackers should be defined as those that utilize extreme programming techniques.

      Yeah, the word "extreme" gets thrown around too much.

      AFAIK, paintball is considered an extreme sport while death rates (the original reason for calling a sport extreme) are pretty much nil.

    4. Re:"Extreme Hackers"? by Gary+W.+Longsine · · Score: 1
      Oh, and for reference? The "Extreme Hacker" your link's about was a 37 year-old script kiddie who Haxx0red Us government machines direct from his own home connection.
      Was his home connection a satellite link to a raft floating on a pond with ill-tempered Sea Bass at least?
      --
      If you mod me down, I shall become more powerful than you could possibly imagine.
    5. Re:"Extreme Hackers"? by Shaper_pmp · · Score: 1

      When did the spelling and grammar of 'leetspeak get standardised? I must have missed that meeting.

      I thought the whole point of leetspeak was that you proved how much of a rebel you were by intentionally disregarding restrictive and arbitrary rules... like spelling, grammar and basic comprehensibility...

      --
      Everything in moderation, including moderation itself
  21. Look by blair1q · · Score: 2, Insightful

    Come on.

    Is anyone really surprised that the Bush administration has done nothing significant right in the War on Terror?

    The agencies still can't communicate, they're security holes in themselves, our resources are diverted to a fanatical war in Iraq that has nothing to do with terror in America, and we find that the greatest threat to the safety of Americans today is the lies the President told or ordered to be told in order to get 1500 kids killed in a place he admits we had no pressing reason to attack.

    This isn't a troll. It's a list of the facts. Anyone disagreeing can disagree, but will be fighting the truth. Consider that before posting political dogma.

    1. Re:Look by twiddlingbits · · Score: 2, Insightful

      It IS Flamebait and you know it!

      . You don't have a clue about the facts. The Agencies DO co-operate (as indicated in the way some of the terrorists wannabes and funding sources have been rooted out here in the States), but they don't co-operate as well as they could. Do you really expect to change 25 yrs of Civil Servant attitudes in less than 4 yrs?

      The War in Iraq has a LOT to do with terrorism. Saddam and his Baath party provided sanctuary, training camps and funding for Al-Queda. To deny that is to deny FACTS, hard evidence and the statements of terrorists themselves. He would have provided WMDs when he got his programs back together when the UN got tired to looking and went back home.

      As long as Gov't agencies use Windoze there will be holes. As long as they employ humans mistakes will be made in either policy or implementation that cause holes. The issue is are they FINDING and closing the holes which I would say they are.

      Typical liberal distortion of the facts, thinking no one remembers what the truth is within a few days.

    2. Re:Look by WarPresident · · Score: 1

      s anyone really surprised that the Bush administration has done nothing significant right in the War on Terror?

      Filthy liar! Here's just one thing that the Department of Homeland Security has done to protect the homeland from terrorist threats. And you can bet that there are a million more stories just like that one!

      --
      Here come da fudge!
    3. Re:Look by Anonymous Coward · · Score: 0

      This isn't a troll. It's a list of the facts. Anyone disagreeing can disagree, but will be fighting the truth. Consider that before posting political dogma.

      Buddy, you need to eat those words. You're spouting nothing but "political dogma".

      Isn't a troll my ass.

    4. Re:Look by stinkykitten · · Score: 0

      Go back to watching your sitcoms Jesus-Land boy and leave reality to those who have opinions that aren't dictated by what they see on CNN.

    5. Re:Look by Anonymous Coward · · Score: 0

      Since it's currently +4 Insightful...

      ... our resources are diverted to a fanatical war in Iraq that has nothing to do with terror in America, ...

      I think you mistyped 'has' with 'had'.

      Currently, from what everyone reads, Iraq is a very important influence in the anti-America terrorism circles. Prior to invasion, Iraq was not. This is a very important distinction.

      I don't disagree with your general statement, but when you claim that any counterpoint would be arguing against "truth", be sure that everything you write is absolutely correct (that truth) before making such assertions.

    6. Re:Look by Gulthek · · Score: 1

      So...wow.

      Maybe you should read the 9/11 Commission's report.

      Shortpoint: Iraq had no ties to Al-Qaeda, Bin Laden considered Saddam an foe rather than a friend.

      The key phrase there is had no ties. Al-Qaeda seems pretty well integrated into Iraq now. Go us, I feel safer already. While Iraq is serving as a kind of lightning rod for terrorist activities, how long can it last?

    7. Re:Look by Guuge · · Score: 1

      Typical liberal distortion of the facts, thinking no one remembers what the truth is within a few days.

      Hilarious. The word 'liberal' seems to have encompassed every intelligent, educated person in the country.

      Really now, when you call the 9/11 report and the UN Iraq weapons report "distortion of the facts", I have to wonder where you get your "facts". Maybe less than 100% of what your beloved politicians have been saying is actually true. Do you think you might actually do your civic duty and become more informed on these issues, or is being informed too liberal for you?

  22. what a surprise by phoenix42 · · Score: 1

    what a huge surprise that an enormous government agency would be totally unprepared to deal with many of the contigencies it was created to handle. No government agency will ever be as secure or prepared as it should be. Have you seen these morons holding up walls at the airport? I don't see them doing anything but standing there. They've got 47 employees per machine, but only 3 of them actually doing anything. The beauty of bureacracy is that 33 people can do what it would take one private sector employee to do.

    --
    forty-two
    1. Re:what a surprise by quarkscat · · Score: 1

      Actually, private sector airport security is where all this "anti-terrorism" business started to begin with. It's called "lowest cost bidder" contracting, and unfortunately the DHS (and the Dubya regime) has adopted it already for airport screening.

      The Dubya regime and the neo-con allies in Congress are hard at work making private contactor airport security a reality again. They decided (1) that they don't want 60,000 new Federal workers joining Federal unions, (2) that they can't do any better hiring security workers (for what they are willing to pay them) than private contractors can, and (3) they are really only interested in the appearance of better airport security.

      The people who service the planes on the tarmack, including the baggage handlers, do not pass through the same security screening that the airline passengers do. The bulk of air cargo never passes through any sort of screening process, just like our seaport cargo doesn't get screened.

      A local TV news organization (Metro DC) went out to Dulles International Airport on the heels of a group of FAA security investigators in April or May of 2001. DIA's private airport security had previosly failed FAA security inspections. Someone (within FAA?) tipped off Dulles Airport regarding the "surprise" inspection, and airport security officers refused (on TV) to allow FAA inspectors onto airport property. A short few months later, and a commercial aircraft was hijacked from Dulles airport and flown into the Pentagon. That is the value of private airport security.

      The biggest problem with the DHS under the Dubya regime is that the expansion of the Federal workforce is less desirable than the benefit of reducing terror threats. Similar problems can be seen with US Border Patrol, US Customs (seaports), and the TSA -- spending big bucks on flashy high technology equipment (that often doesn't work) is preferable to spending big bucks long term on more Federal employees. I have yet to see a buried seismic sensor or a UAV actually apprehend an unknown terrorist crossing our borders or slipping out of a cargo container -- that takes "boots on the ground".

      And that is why I believe the DHS is an oxymoron. Having the DHS spend $6 Billion (plus) USD on a multiyear software contract with Microsoft for their server and desktop OSes merely confirms that conviction. And their inability to facilitate an IT strategy of redundency and viable backups underlines the problem.

      These are not so much problems that can be better addressed by the private sector as they are problems with the corrupt regime currently in power.

  23. Set an example? by AtlanticGiraffe · · Score: 1

    "Should this agency strive to be good example for the rest of the country and protect against extreme hackers?"

    No. It's not their job. If the institution has to exist, it should outsource the IT stuff.

    When they founded the US government, they weren't trying to make a good example about computer security. They were trying to protect human rights. Let's stick to that. Everything else should be up to free enterprise.

    1. Re:Set an example? by cosinezero · · Score: 1

      You mean like they outsourced electronic voting? Don't be fooled. All the IT in government is outsourced to companies run by republicans.

  24. Biggest Threat To Security and Peace: +1, Heroic by Anonymous Coward · · Score: 0

    are the http://www.whitehouse.org/">felons-in-command.

    More http://www.cursor.org/">dirt on the felons-in-command.

    Put that in your bong and inhale.

    Thanks for nothing.

    Patriotically as always,
    Kilgore Trout, CEO

  25. my opinion by BigHungryJoe · · Score: 0, Troll

    As a rather well-known cyber-security consultant (you'd know my $450/hr name, I guarantee it) at Foundstone, I can tell you what the problem is - the lack of a comprehensive, rehearsed disaster recovery plan. It really isn't that hard, to implement it correctly, I always recommend this (clients are always amazed by its brilliance and simplicity) - every night, copy all of your company's critical data to a CD, and have EACH EMPLOYEE TAKE HOME A COPY.

    Bam - that pops, it sizzles, as we say in the consulting biz. Simple yet EXTREMELY effective.

    Now, if you want anymore advice, its gonna cost ya - ($450/hr)

    1. Re:my opinion by NewWazoo · · Score: 1

      And here's my $14.72/hr advice:

      You're an idiot if you let your thousands of underlings each take home their own personal copy of the classified data that they work on.

      B

    2. Re:my opinion by pandrijeczko · · Score: 1
      Erm, these "clients" that hire you for $450/hr...

      They're not generally females in the 20-40 age range are they?

      They don't by chance, ask you to come round to their houses at certain times, do they?

      When you get there, there's not a whole bunch of happy kids sat around a table and a big iced cake?

      You're not, by chance, asked to put on a big red nose, a pair of big shoes and make animals from balloons, are you?

      Just wondered - sounds like you'd be good at it.

      --
      Gentoo Linux - another day, another USE flag.
    3. Re:my opinion by Anonymous Coward · · Score: 0

      Yea really. Anybody who cares enough about their
      data to hire this guy would care about it enough to
      manage who has access to it.

      I hope he is kidding

    4. Re:my opinion by Anonymous Coward · · Score: 0

      coughBULLSHITcough.

      Gee, you're right. We could easily burn our critical apps & databases onto a few thousand CDs every evening.

    5. Re:my opinion by ignorant_coward · · Score: 1


      Actually, with the right encryption, it could work fairly well. Unrecoverable media failure (leaving the CD on a car dashboard) is mitigated by the huge redundancy.

      Of course, there's only so much a CD or even a DVD can hold, so only the smallest businesses could do this.

    6. Re:my opinion by eskoperkele · · Score: 1



      Anyways, I live in Finland, northern Europe. I'm fairly sure that I have never heard about you.

      --
      E. Perkele
  26. Two Words: Plausible Deniability by Shadow+Wrought · · Score: 1
    That way, when a hacker trying to find a UFO cover-up stumbles across the treasure trove of smoking guns, the DHS can simply wipe their servers and say, "Due to lack of funding we were unable to afford back-ups. That's why, if you want to be safe, you need to give us more money." Thereby shifting the debate safely away from UFOs and back onto funding.

    Ideally they would be able to do a trade with those shifty HUD bastards whereby they trade funding for storage of embarrising documents;-)

    --
    If brevity is the soul of wit, then how does one explain Twitter?
  27. This reminds me of a story... by Foolomon · · Score: 4, Funny

    This reminds me of a story. I once worked for a company that specialized in tape backup software, name withheld. (I worked on Long Island then, not the on the plains of CHEYENNE, so don't try to guess the name of the company.) A few months after I stopped working there, I received a phone call from my ex-manager that went something like this:

    Mgr: So how's it going? Blah blah blah...

    Me: It's fine. Blah blah blah...

    Mgr: So..um..did you ever "borrow" a copy of the source code to the Disaster Recovery solution that you single-handedly wrote? You know, for "posterity" reasons?

    Me: Of course I didn't. That wouldn't be ethical for sure and probably would be illegal. Why do you ask?

    Mgr: Well, it seems that the hard drive that your machine used crashed and we don't have a backup.

  28. It's not about security, only the perception of it by khasim · · Score: 4, Insightful
    Don't take this as flamebait but I have the feeling that nobody's really trying hard enough to protect us.
    Hey, I agree with you on that.
    We stand an hour longer in the security line just so that people can bring explosives through in their shoes? Now they make us take our shoes off. What if someone brings explosives through in their pants?
    Yep. That's because no one is looking at the systems and processes with the intent of actually improving them.

    Instead, we have knee-jerk reactions from people who do NOT understand security who attempt to compensate for previous attacks with new rules/regs.
    Same here...they pretend to try to catch terorists when in reality the next power failiure could knock the whole list out.

    And the "pretend" is the problem. That's exactly what they're doing. And they're hoping that the public will accept that as them actually doing something about the problem.

    It's all about the public perception of the issue.

    The same as it is in all aspects of politics.

    As long as there isn't a power outage, they're doing a "good" job, as far as the public is concerned.

    If there is a power outage, then it comes down to whom they can blame.

    It's a lot easier and far more cost effective for the politicians to be re-active rather than pro-active.

    Which is why security is NOT something that ANYONE should allow a politician to be involved in.
  29. WTF? Backups and DR equate to 'security?' by Mille+Mots · · Score: 4, Insightful
    From the title: Computer Security Lacking at Homeland Security

    From the summary (no, I'm not going to RTFA when the subject and summary are so far out of whack):

    Adequate backups were lacking for networks that ... in most cases failed to prepare sufficiently written disaster recovery plans that would ..."

    So, if I have valid backups of all the patient data here, I guess those HIPAA security requirements are met, eh? Or do I have to have valid backups and a DR plan to achieve 'computer security' nirvana?

    Now, if the issue were that their backup tapes were going offsite, unsecured and unencrypted, then the subject might make sense. But, this is silliness. Almost as silly as the DHS itself (hint: The Department of Homeland Security isn't supposed to keep the people safe from terrorists, it's supposed to keep the government safe...think about that one), but...whatever. (sigh)

  30. Re:And for those of us who don't want to register. by Anonymous Coward · · Score: 0

    the U/L doesn't work... phooey T-T

  31. Re:And for those of us who don't want to register. by rovingeyes · · Score: 1

    while you are at it why don't you provide us with some usable SSN too? You know I don't wanna be registered ;)

  32. Re:And for those of us who don't want to register. by justforaday · · Score: 1

    Here, you can use mine. I figure since social security will be gone soon it doesn't matter if anyone/everyone has my number anymore...Anyways, enjoy!

    078-05-1120

    --
    I'll turn into a supernova and burn up everything. Well I'll turn into a black little hole and you'll turn into string.
  33. It's not just America by CHESTER+COPPERPOT · · Score: 2, Interesting
    Your friends in the war on terror over here in Australia plainly don't care about security either. In the last few weeks we've found dodgy baggage handlers in the airports, a chinese diplomat who is trying to defect and says that Australia is infested with chinese spies and threats against foreign countries embassies within our own soil.

    Governments are hopeless at dealing with security. They are slow, lack innovative thinking and care more for their own careers than for their constituents. What matters most is whether or not you can protect yourself, your assets and your family when (if) the time comes. Then you can rid your mind of all the political and media led one-upmanship that comes along with security and the war on terrorism and get more important things done in life.

  34. DHS: by ohzero · · Score: 1

    1. The entire DHS electronic infrastructure buildout was outsourced to a private defense contractor at a fixed budget cost. Pretty clearly, when money runs out, compromises need to be made. Obviously, backups were one of those compromises. I can also guarantee you that you don't have top industry minds in the SOC at DHS, and this organization is going to need serious help over the next few years to remediate all the things that they're breaking "out of the gate." 2. The title "the world's best hacker" could only be made up by someone as lame as the British media. I'm sure that ass clown was way to busy writing exploits to ever post meaningful or useful information to anywhere frequented by actual, knowledgable network security people. In short, what i'm saying is that he's a script kiddie who can code shell. /rant

    --
    -- http://www.criticalassets.com
  35. DHS backup plan by It+doesn't+come+easy · · Score: 1

    Don't worry about it. As soon as any data appears on a DHS computer, someone will hack into it and copy the data to an offsite location...

    --
    The NSA: The only part of the US government that actually listens.
  36. Natalie Portman is 24 today by Anonymous Coward · · Score: 0

    that is all :)

    1. Re:Natalie Portman is 24 today by Anonymous Coward · · Score: 0

      May she enjoy a large bowl of Hot Grits!

    2. Re:Natalie Portman is 24 today by Anonymous Coward · · Score: 0

      And covered in hot grits!!! w00t baby!!!!!

  37. Re:You haven't seen the half of it! by Anonymous Coward · · Score: 0

    DoD and DoHS have many unsecured wireless hotspots where it was discovered that there are people who use to break in their networks and pirate internet usage...

    These guys really need to start getting their acts together >.

  38. Internet Security threats and OS Guerilla warfare by CHESTER+COPPERPOT · · Score: 1

    An interesting link.

  39. Moderators, please mod parent up. by nietsch · · Score: 1

    I haven't got mod points for years, maybe because i like to ridicule those silly yanks. But assuming the parent is a USian, this one shows some severe signs of intelligence. No if the rest of them...

    --
    This space is intentionally staring blankly at you
  40. Could? (was Re:This could really suck...) by ArielMT · · Score: 1

    And this is the reason why I won't ever fly commercial again. Everything I've ever hated about flying has only gotten worse since That Day.

    --
    It must be Windows. It needs half a gig of RAM and a hardware-accelerated graphics card just to run Solitaire.
  41. Re:FUD. Check out SOLDIER or NOT.com by Anonymous Coward · · Score: 0

    hey buddy I think you got the wrong forum. Here people look for nerds not faggets.

  42. You are the one distorting the facts by Anonymous Coward · · Score: 0, Insightful
    "Do you really expect to change 25 yrs of Civil Servant attitudes in less than 4 yrs?"

    After 9/11, yes. Or did that NOT change everything as the president keeps reminding us?

    "The War in Iraq has a LOT to do with terrorism."

    It had very little to do with it, and was far down the list of hot spots that needed attention. For one thing, they might have finished the job in Afghanistan, instead of allowing most of the country to fall back under the control of war lords and Taliban.

    "Saddam and his Baath party provided sanctuary, training camps and funding for Al-Queda. To deny that is to deny FACTS, hard evidence and the statements of terrorists themselves."

    He funded Palestinian terrorist activities, but had no connect to al Qaeda, except perhaps as a friend of a friend of a friend sort of thing. Bin Laden considered Saddam an enemy, after all.

    "He would have provided WMDs when he got his programs back together when the UN got tired to looking and went back home."

    The UN showed no inclination to go home, but was chased out of the country before they could get the job done by Bush in his rush to war. Think of all the American lives who could have been saved if Bush had just allowed the inspections to find out what we now all know: No WMDs.

  43. Summarization of Events by A+beautiful+mind · · Score: 1

    Consider this flamebait if you wish, but that is how i see events from an european perspective.

    Since 9/11, the goverment of USA has been granted extra money, extra legal rights, extra measures and lives to defend against the 'terrorist threat'. I find it extremely ironic, let me tell you why.

    First, what did the government do in the last years to improve security? A lot of in-depth reports and analysis say that the results can be barely registered as an improvement, meanwhile being a major annoyance to the ordinary person. The terrorist threat will not be stopped by technology. Humans drive technological advancement and can defeat technology just the same way (if you consider humans to be an advanced piece of engineering, it can be seen clearly). The only way is to convince people, so basically through political and demographical measures, in which areas the USA managed to alienate a sizable chunk of the world after 9/11.

    So what do you managed to do in 4 years? The threat level increased in your country by your own actions, working technological measures could have been taken to decrease that risk, but instead the government ended up scaring people to give them more rights and tools. My post is not only related to this particular article, since i try to paint the bigger picture. Placing this particular article in the context of the proposed extension of the Patriot act, the increase in government buerocracy, the laws which you cannot know about but are subject to, the discrimination of muslim people (at customs, and generally in the us administration), the questionable state of DMCA and associated measures, etc. indicates that people need to question the government's actions. To sum it up what i find extremely ironic is that the government promised security and an indefinite fight against a concept (terrorism) and in the process you ended up with less security and less rights.

    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
    1. Re:Summarization of Events by Baron+von+Blapp · · Score: 2, Insightful
      More Government and More Laws (not to be confused with Moore's Law) never protected or "secured" anyone. Ever. Just look at Europe for example.

      No matter what the government (any government) does, it will not be to protect you, it will be to protect the government. Why do they ban firearms, yet the government has firearms.... is the government somehow more responsible than the individual? No.

      As a matter of fact the governments of the world have laws that make them exempt from being responsible for anything.

      From a global perspective, law abiding and responsible humans are screwed. As Geryon would say "I think the end of the world must be getting near. Hell is getting full."

      --
      "It's too bad she won't live, but then again who does?" - Gaff
  44. Typical by spurious+cowherd · · Score: 1

    A standard example of the 3 biggest lies in the world.

    3. I promise not to come in your mouth
    2. The check is in the mail
    1. We're from the Government & we're here to help you

    --

    Time flies like an arrow, fruit flies like a banana.

  45. Re:And for those of us who don't want to register. by ndansmith · · Score: 1
    Apparently someone at the New York Times reads Slashdot and killed that username . . .

    . . . or some punk hijacked the password!

  46. Re:WTF? Backups and DR equate to 'security?' by fuzzybunny · · Score: 2, Informative

    Backups are part of an overall security strategy, comprising, to use a well-worn phrase, confidentiality, integrity and availability. In a broad sense, you can apply this to DHS' "mission" (such as it is) as well. And yes, a DR plan, especially for an organization which is supposedly so "critical" to the nation's safety, is part of the whole shebang.

    What's this have to do with HIPAA?

    --
    Cole's Law: Thinly sliced cabbage
  47. Re:WTF? Backups and DR equate to 'security?' by nharmon · · Score: 1

    Disaster Recovery and Backups are parts of an overall security plan, but are not the only parts.

  48. This really tweaks me... by Akardam · · Score: 1

    *rant mode: enable*

    The above scenario really pisses me off, and it is a scenario that I see has a real probability of happening, all the more so because of the moronic alarmist intimidating position that the powers that be have taken about this whole national security thing. (Something similar, though not necessarily technology related happened during the "war" in Afghanistan when a wounded army Lt. was told he could not bring the wire clippers, that he could use to cut the wire holding his wounded jaw shut in case he started to choke, on the plane).

    As a reservist, the scenario gets me going even more because I could see it happening to a fellow reservist. Not only do you have a brave young man or woman who has, regardless of whether you think it right or wrong, been dodging bullets and rockets in humvee's with barely improvised armour, but who has also made the sacrifice as a reservist, by being away from their family and their chosen life in the line of duty. To me, if one of my shipmates who'd been on a year's deployment over there had this happen to them, it would be the ultimate smack in the face. "Thanks for serving, here's what we think of you!"

    I think by and large that most people, regardless of how they feel about the greater agenda, wouldn't hesitate to give a helping hand to that single instance of a citizen soldier. Except, of couse, for those big wigs who make policy, and to whom every man woman and child is guilty until proven innocent in the name of "homeland security".

    *rant mode: disable*

    1. Re:This really tweaks me... by Anonymous Coward · · Score: 0

      I have nothing against our men and women in uniform and wish them nothing more than a quick and safe trip home.

      However, if members of the military were given special treatment at the border, it would create a rather obvious security hole.

      Not that there aren't plenty of others. Not that there's any real indication that anyone is planning another 9/11-scale attack. I don't think it's a good thing to hassle members of the military on the way home, but if we're truly interested in securing the borders, it's necessary. Sometimes life makes no sense. Ah, if only we hadn't started that damnfool war in the first place...

    2. Re:This really tweaks me... by Akardam · · Score: 2, Insightful

      However, if members of the military were given special treatment at the border, it would create a rather obvious security hole ... I don't think it's a good thing to hassle members of the military on the way home, but if we're truly interested in securing the borders, it's necessary.

      I'm not talking about special treatment nor do I think hassling members of the military is necessary. I suppose it comes down to the fact that I don't think anybody should be treated like that.

      The real problem I have is that "homeland security" has decided that the idea of probable cause is unfashionable in this "terrorist" riddled day and age. I will grant the proceedure searching my luggage and my person for prohibited items at a security checkpoint. If I am not carrying any prohibited items, not doing anything illegal at the time, and if I am not acting in a clearly suspicious fashion, then airport security should have no probable cause to detain me.

      The military of all groups is security concious. Servicemembers traveling on orders these days have multiple ways to authenticate who they are and account for their actions (we are required to carry official copies of our orders when we travel). If the military trusts these documents enough for their own security purposes, then airport security should, too. Otherwise, the whole trust metric breaks down.

      Basically, if I show up at the security checkpoint with my military ID and orders, once I have been physically checked, why should they have any further need to detain or check me? Members of the military might not warrant special treatment but like it or not we are held to a different standard. If "homeland security" ignores that standard, then they're saying that it is as much as worthless, which is yet another slap in the face.

  49. Re:And for those of us who don't want to register. by MarkGriz · · Score: 1

    Dear,

    The Social Security Administration is reviewing our records and it appears you information for SS# 078-05-1120 is out of date.
    Please reply to update with your correct date of birth and home address.

    Sinceerly

    Social Secureity Dept.

    --
    Beauty is in the eye of the beerholder.
  50. computer security? by cccpkgb · · Score: 1

    I'd say the DHS has much bigger problems on their hands.

  51. They did wake up! by Teun · · Score: 1
    And are now protecrted by things like the Patriot act that disallows you to share their information and other laws that make cracking illegal in the first place.

    They only have to post his information on their servers and the hackers will stay away.

    --
    "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
  52. Re:And for those of us who don't want to register. by Anonymous Coward · · Score: 0

    Bug Me Not, for all your registration bypassing needs.

  53. Backup != Security by Anonymous Coward · · Score: 1, Interesting

    " What do backups have to do with security? (Score:3, Insightful) by MythoBeast (54294) on Thursday June 09, @12:28PM (#12770125) (http://www.mythologicalbeast.org/ | Last Journal: Monday September 08, @02:27PM) Since when does failing to back up your hard drive make your system easier to hack into? If you're talking about them having poor data integrity that's one thing, but this doesn't seem to point to poor computer security."

    No kidding. Backups in one hand, security in the other. I'm sure /. is full of enough computer literate people to know that. Please explain to me how not making a backup makes one more suspectible to a hack. Okay, so if you did get hacked, you risk losing everything when you don't have a backup. But if you store that backup on another network drive you are MORE susceptible because you have more data spread out and available to hack.

    Sounds like an excuse to bring up other arguments, which it seems most on here have chosen to do.

    "As a rather well-known cyber-security consultant (you'd know my $450/hr name, I guarantee it) at Foundstone, I can tell you what the problem is - the lack of a comprehensive, rehearsed disaster recovery plan. It really isn't that hard, to implement it correctly, I always recommend this (clients are always amazed by its brilliance and simplicity) - every night, copy all of your company's critical data to a CD, and have EACH EMPLOYEE TAKE HOME A COPY."

    You've got to be kidding. This wouldn't even work for a business. So you are going to give EVERY employee access to everything in the business, trade secrets and all? And how are you going to ensure that the disc doesn't leave the employees possesion, and that old discs get destoryed? Plus, even the relatively small business that I work for has 20gig or more of things that should be backed up. How are you going to send that home? DVDs? Or an external backup drive for each employee?

    And the key point that everyone seems to be missing is that the point of all this extra spending is to make Americans, on average, FEEL safer. Doesn't really have to be safer. It's all part of the media/government spin on the truth. The war has a lot to do with terrorism because without terrorism there wouldn't be a lot of support for what the gov wants to get done. It's all politics. Look, if 9/11 never happened, do you think anybody would really support the actions we are taking across seas? It was a perfect time for the gov to expand their control and finish the job on Iraq. Whether the gov did this "primetime for action" tactic on purpose or they truthfully believed in what they were reporting to the public is up for debate. I'm dissapointed and scared to see so many of my fellow citizens willfully give up many rights for "safety" from perceived threats. Reminds me of the mob and extortion money: "We'll provide you safety for this price".

    Without politics, there would be a lot less crime. Why, you ask? Because there are a lot of measures that could be taken to drastically reduce crime that are poltically-incorrect or unpopular. Same goes for economic policy. There are times when a temporary tax hike would benefit the country immensely, yet no politician would want to back that platform.

    It will be interesting to see what happens in the next few years. A lot of universities have adopted programs for computer security due to the increase in demand for KNOWLEDGABLE staff. Seems to me a lot of these guys were raised on networking and know little about security and forensics, at least compared to what they would be expected to know.

  54. Their IT director needs some jail time. by Anonymous Coward · · Score: 0

    Accountability starts at the top. If DHS is as critical as they pretend it is, then someone needs to pay for this bonehead ploy.

    Someone in authority needs a little jail time to put them in the right frame of reference. And just for kicks, tell the other inmates that the crime was molesting children.

    Just remember that nothing gets done well outside the private sector. Nothing.

  55. Funny... by Anonymous Coward · · Score: 0

    Funny, I delete all of my backups before I make them. I figure if it's important, I will just rewrite it.

  56. For those of us who want to read it. by Anonymous Coward · · Score: 0


    Choose Genlink

  57. No Wonder by Anonymous Coward · · Score: 0

    They are angry at the hacker who "deleted" data. If they had no backups, they are sure worried

  58. Re:It's not about security, only the perception of by SuperBigGulp · · Score: 1
    If there is a power outage, then it comes down to whom they can blame.

    I think this is my favorite part. SOP is to appoint a panel and narrowly define their charge. Extra points if the committee doesn't have subpoena power.

    After a year or so, the panel finds that no single person is to blame, and that the "culture" needs to change. They write a report. Maybe people read it. The report goes on a shelf. Nobody loses their job. Eventually, things will hit the fan again and a new panel can be appointed. Witness the Challenger and Columbia reports.

    The 9/11 panel is one of the few to have any kind of follow through, and they are doing on their own.

    --
    Someday a Slashdot ID of 177180 will mean something.
  59. Re:It's not about security, only the perception of by 4of12 · · Score: 4, Insightful
    Which is why security is NOT something that ANYONE should allow a politician to be involved in.

    Security? The same argument may be applied to politicians running the economy and creating legislation and regulations, too.

    Perhaps we ought to look into education so our peasants aren't so damn gullible to the wiles of politicians.

    --
    "Provided by the management for your protection."
  60. DoD? by uberjoe · · Score: 1

    I have always wondered why it was not called the deptartment of offence.

    --

    The days of the digital watch are numbered.

  61. They need an audit by Sir_Eptishous · · Score: 1

    I think these government goon squads need an outside audit from someone in private industry. That would straighten their shit out.

    --
    We play the game with the bravery of being out of range
  62. DHS not SH, big surprise. by Baron+von+Blapp · · Score: 1
    DHS not securing homeland.

    They are more worried about data security then they are worried about securing the borders. Funny, I can just imagine the scenario played out in a congressional hearing AFTER a NBC weapon (Nuke/Bio/Chem not that other WMD, know as the NBC network) goes off in a major population sector.

    Congressional Stooge1: According to this report, you, Mr. DHS IT Guy failed to do your job. Sensitive data was lost or destroyed, data that when analyzed could have saved the lives of millions of people.

    Ofcourse that is what they would say, they would wring their hands and not blame the real culprit (lack of PROPERLY ANALYZED intel and porous borders). No no, dont blame the real culprit, dont take responsibility whatever you do!

    Whatever you do, pander to the illegal immigrants. Pander to the special interest groups, Pander to the muslims that want us dead... sell our souls and country to the corporations that exploit us and mortgage our lives for pennies.

    Dont say "dont blame me, I voted for the other guy". In the end you are still part of the problem, because instead of America boycotting our own elections (or overthrowing the government ;) until we have real choice. You know, not just coke or pepsi but a real third, fourth or even fifth choice. We should follow the founding fathers wisdom and end party politics that ruin our country. Dem or Rep, no matter who wins we all get screwed... including those in other countries.

    Funny how foreigners hate our foreign policy, while anyone who lives in the USA thinks our domestic policy is in shambles, in one way or another we think it could be better.

    We need a real libertarian candidate next election, President L. Neil Smith just rolls of the tongue...

    --
    "It's too bad she won't live, but then again who does?" - Gaff
  63. In Other News by Master+of+Transhuman · · Score: 1


    "Government reported incompetent at everything, including invading other nations."

    Film at 11.

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  64. Not so uncommon by Anonymous Coward · · Score: 0

    Having not RTFA and "security" aside, the lack of backups seems to be quite common in the government facilities I've worked in. Developers bandstand about regular backups, disaster recover plans, and offsite backup storage, and nothing is done. And when the servers do fail and the backup tapes "seem to have not worked", the US gov has got to be the only major institution where the admin don't get fired. Just more of the same.

  65. All you slashdot hackers... by Anonymous Coward · · Score: 0

    Those same agencies, the auditors found, have in most cases failed to prepare sufficiently written disaster recovery plans that would guide operations if a main office or computer system was knocked out.

    Hint hint....

  66. Re:And for those of us who don't want to register. by Pollardito · · Score: 1

    don't do it, it's a trap!

  67. Re:It's not about security, only the perception of by pilgrim23 · · Score: 1

    Security is all of our concern, individually. It is not a job for government. The Private Sector seems able to rise to most occasions and when it comes to security, I leave mine in the capable hands of Col. Colt If he is unavailabale I have been known at times to employ the services of a a Mr Ruger. The firm of Smith and Wesson have also shown promise in this field.

    --
    - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
  68. Clarification by Anonymous Coward · · Score: 1, Insightful

    I'm not talking about special treatment nor do I think hassling members of the military is necessary. I suppose it comes down to the fact that I don't think anybody should be treated like that.

    Agreed. What I should have said is "Members of the military should be exactly as likely to be hassled exactly as much as any other poor schmuck." I don't think that the tyrant-in-a-teapot sort of behavior of many members of the TSA is making anyone safer, and I don't approve of it at all. I just think that if it's going to happen, it would be most safe and most fair to have it dished out uniformly.

    If the military trusts these documents enough for their own security purposes, then airport security should, too.

    There, I'm not sure I agree. That's expecting a lot of knowledge (training) from the airline security folks. Some of that knowledge is probably the sort of thing that someone like you has absorbed by immersion in military culture, so to you it seems like simple, obvious, common-sense stuff. It wouldn't be to outsiders like the TSA inspectors, though. Something like this could actually make new problems for members of the military, given the TSA's record so far.

    And no matter how you slice it, accepting a different (military) form of documentation from one class of passengers (military) is a form of "special treatment". Not in the sense of privileged treatment, but in the sense of a special case. Special cases tend to be where mistakes happen, whether one is writing computer code, or, I'd guess, securing an airport. I think that special cases should be avoided in principle if possible.

  69. Written Recovery Plan by Java+Ape · · Score: 1
    Over the past several IT workers (particularly at government installation) have been buried under a mountain of new security requirements and demands. Most of these, in my opinion, merely codify common sense into a few thousand pages of fluff that's outdated the day after it's written, which is seldom a problem because nobody reads it.

    So they don't have a written disaster recovery plan -- how terrible. I'm a DBA, and I have six or seven disaster recovery plans, all neatly typed, with lots of polysyllabic verbiage, designed to impress auditors. They have official stamps and signatures of various company officials, and are kept in various safes etc. Unfortunately, the short version all this wated paper and time is "If the server crashes, we'll restore it from backup. If local backups are not available, we'll use off-site backups."

    So, having jumped through hoops, and burned a considerable number of company hours complying with ever-dumber requirements, can anybody tell me how this would actually help me recover from a real disaster? It's freaking common sense.

    So, while they may not be setting a good example for us corporate drones, I have a hard time seeing this as a SECURITY FAILURE!. Get a grip -- their Sysops and DBA's probably have a clue about data recovery even without an official plan.

  70. Some people... by Dunbal · · Score: 1

    Some people still don't get the fact that "Homeland Security" is a political creature that is supposed to make people feel better because they "think" the government is doing something to "prevent" terrorism, when in fact their rights are being violated while they are looking the other way...

    When did a law EVER stop a crime? Criminals BY DEFINTION don't give a damn about the law.

    How does searching your checked luggage prevent an aircraft from being high-jacked? How many terrorists have access to the cargo bay to get their weapon out of their checked luggage mid flight?

    And how does taking people's civil liberties away prevent acts of terror? Sure, you can arrest a lot of people. Almost everyone has SOMETHING to hide - cheating, in one way or another, is human nature. The more you look, the more you will find. And when we are all tarred with the same brush and calling each other terrorists and ciminals, what then?

    Don't tell me that all this craziness has prevented other buildings from being knocked down even if the politicians would have you think this is the case. The criminal, unfortunately, always has the first move. And people are surprised when they can't even protect their computers...

    --
    Seven puppies were harmed during the making of this post.
    1. Re:Some people... by Gangalino · · Score: 1

      Things are so bad now, we're actually talking about how stupid DHS is on Slashdot, like it's not a glaring fact apparent to everyone. How is it that authorities can say something so stupifyingly stupid and then not have anyone immediately yell out "That's so stupid!" Can't carry nail-clippers on a plane because of terrorism!?? It's gonna take more than chatting on Slashdot. I feel stupid even illuminating a point that's already as bright as the sun.

  71. mod parent up by strikethree · · Score: 1

    I have rarely seen a post that I wanted to mod insightful more than yours. I am without mod points today though so I will repeat your words.

    Perhaps we ought to look into education so our peasants aren't so damn gullible to the wiles of politicians.

    strike

    --
    "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
  72. It should be obvious by PunkOfLinux · · Score: 0

    It should be obvious that this would happen.
    Rather than taking the necessary steps to prevent most malicious hacking, just blame it on the hackers; say that there's 'no way' to secure against them.
    Of course, there's really no guaranteed way to defend yourself against the truly superb hackers; but if you don't take the time to properly secure yourself, you get loonies in your box.