Slashdot Mirror
Security Flaws Could Cripple Defense Network
userexec wrote to mention an FCW.com article about the uninspiring future for the Missile Defense System's software. The developers are apparently very worried about poor information security on the project. From the article: "The report said that neither MDA nor Boeing officials saw the need to install a system to conduct automated log audits on unencrypted communications and monitoring systems. Even though current DOD policies require such automated network monitoring, such a requirement 'was not in the contract.' The network, which was also developed to conform to more than 20-year-old DOD security policies rather than more recent guidelines, lacks a comprehensive user account management process, the report said. Neither MDA nor Boeing conducted required Information Assurance (IA) training for users before they were granted access to the network, the report stated. "
The subcontractor they hired to do the programming was called Diebold?
We'll no doubt see "All your missile base are belong to us" written on the system's password file.
Striking fear in the authors of godawful fanfiction, I am here, appearing in darkness, Tuxedo Jack!
Why not contract an Indian company to write it? Or make it a Sourceforge project. That always seem to generate high-calibre, error-free code.
Did you know my dad's dog died?
Does this mean the big fat trackball might not respond? Who's going to defend those six cities?
This sig, aah-ah, is comin' like a ghost-sig...
Hey man, don't forget our failure to win the men's 1500m speed skating gold in Turin!
Did you know my dad's dog died?
We'll just make talking about DOD security flaws illegal in Patriot Act 3 and then nobody will know.
It appears Ockham lost his razor and grew a beard.
There is an airgap in the system.
All the modems are connected to unlisted telephone numbers.
psst, hey buddy: check the location bar in your browser, whats that first word after http?
If Jesus wants me it knows where to find me.
There are sourceforge projects that *maybe* two people on the planet earth have accessed, and one of them might be googlebot. It's the perfect place to hide in semi plain sight, just label it an MP3 metadata morpher skindesigned to be posix non compliant text console only alpha planning stage and only run on os2 beta or something,and it'll stay hid forever.