Slashdot Mirror
Stealing Data? A Sniffer Shows it's Easy
museumpeace writes "Though its not exactly a How-To of cracking into financial institutions, a few intriguing details are mentioned in a New York Times article "the Sniffer vs the Cybercrooks" (it's worth the cookie). From the article: ""Tell me the things you most want to keep secret," Mr. Seiden challenged a top executive at the bank a few years back.....A week later, Mr. Seiden again sat in this man's office in Manhattan, in possession of both supposedly guarded secrets....""
http://www.bugmenot.com/
gets you past registration
I hate the one hundred and twenty character limit for signatures with an all-enveloping, all-destroying, incredible pass
SATAN is a software package which can determine whether there are sniffers on your network. It finds some sniffers when the sniffer host looks up the same dns entries as other hosts.
Paste this link into google and click through for a single page version
n ey/31hack.html?pagewanted=all
http://www.nytimes.com/2005/07/31/business/yourmo
no reg required
Even people that believe in pre-destiny look both ways before crossing the street.
Geesh people... how hard can it be?
n ey/31hack.html?ex=1280462400&en=31158975e4a4090a&e i=5090&partner=rssuserland&emc=rss
http://www.nytimes.com/2005/07/31/business/yourmo
Whilst I recognise this, as a techie I've seen plenty of weak security, and been left unattended with computer systems that handle a LOT of money.
However my experience is that organisations where security really(!) matters, or handling very big money, you just don't get in the door unescorted.
And in one case, by appointment only, no electro-magnetic media, no electronic devices, physical search, photographic id, and they took a photo as you enter (just for the record).
Most of these also had serious network security policies. That meant even people with significant internal know-how couldn't easily export information (unauthorised) via the network.
Although interestingly one, which of necessity needed a lot of networking, achieved a lot of the security by dint of the staff not talking about the "problem areas" outside of a "need to know" basis. Technically this is security by obscurity, but it worked surprisingly well. Guess, as they say, it comes down to the people.
Curiously the only thorough check I've ever been aware of on leaving any place, was a nuclear power station, and they were only looking to make sure I hadn't accidentally been contaminated, not that I think they had many secrets, or anything "safe" to steal.
The data remains, therefore it is not really stolen. It's privacy is merely infringed :P
But seriously. If you're so adamant about "copyright infringement" != "theft", I think you should do the same for "data theft" and "identity theft". In all cases no physical property is taken, so it doesn't seem right to call two theft and the other something else. Oh, right. It's only "theft" when it affects "us".