Slashdot Mirror
US Military 'Hacked' by Emails
An anonymous reader writes "Two of the US Military's most important science labs were apparently 'hacked'. Phishing mail was sent to a pair of research labs, where trojan programs allowed interlopers access to the otherwise secure networks. One of the sites was the infamous Los Alamos, which has been discussed many times here at Slashdot for its string of security breaches. 'Los Alamos has a checkered security history, having suffered a sequence of embarrassing breaches in recent years. In August of this year, it was revealed that the lab had released sensitive nuclear research data by email, while in 2006 a drug dealer was allegedly found with a USB stick containing data on nuclear weapons tests. "This appears to be a new low, even drug dealers can get classified information out of Los Alamos," Danielle Brian, executive director of the Project On Government Oversight (POGO), said at the time. Two years earlier, the lab was accused of having lost hard disks.'"
Both labs in question are actually U.S. Department of Energy, not Department of Defense. Technically, they're not "military" labs.
More to the point, if they were military labs, the schlubs responsible for the security cockups would have been in the brig and awaiting a court-martial long ago. The knowledge that your "employer" can clap you in prison and then have you shot for almost a trivial incident is, to borrow a phrase, tremendously attention-focusing.
Yeah, yeah, I know, nuclear weapons and technology, blah, blah, blah... but really. Historically, these labs have always been run a little bit like the average academic research lab at any mainline university, and the stereotypes about egghead scientist types hating military-style regimentation (including security processes) rings very true. Read up about the Manhattan Project. (Which is fitting, since these labs are the direct descendants of that program.)
Welcome to the Panopticon. Used to be a prison, now it's your home.
Mushroom clouds be in order, beeyach!
A feeling of having made the same mistake before: Deja Foobar
No one can hack into a classified (Secret or above) network from the outside by sending them emails or anything else - *because classified networks are not connected to the outside world*.
Brett
Note that the
More recently, we're moving to some different networking configurations to help cut down on some of these breaches. It may help; it may not. Foreign nationals are losing administrator priveleges on their own (unclassified, mind you) computers, which is causing LOTS of headaches and won't solve a damned thing. Many of them have sent messages saying, "Yeah, remove my access, and see how much work gets done." If we had a moderation system here, those would be +5 Damned Right.
Actually conspiracy theorists are more like trolls. They take advantage of the gullible nature of most people.
HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
Actually, if you weren't an idiot trolling, you'd realize that the vast majority of foreign researchers in the US are in the country by virtue of the O1 visa, not the H1. This visa requires documentation and proof that the person is a world-renowned expert in their field, possesses world-class skills in the arts or sciences, and in short is nothing short of an absolutely unique and brilliant individual.
Or would you rather leave all those Pakistani, Chinese, and other brilliant scientists in their homelands, helping their repressive regimes?
Knowing a large number of people that work at Los Alamos National Lab (LANL) I can tell you that cutting the funding won't solve the problem. That would be a lot like trying to make a football team win games by cutting the legs off of a few team members. It just won't solve the problem. Yes, some projects should not be funded, just as other projects need more funding. And don't forget that many of the wasteful projects are ones that congress told them to work on. Some of the problems: 1) They are a big name. Whenever something bad happens it is all over the news. When something good happens it might or might make the news, and it will never be as big of a news item as a minor bad thing. Fork lift accident at Oak Ridge? Nobody hears about it. At LANL it makes national news. This is a huge factor in everyone saying that LANL is so poorly run. They hear about every bad thing there, but very little about the problems elsewhere. On top of that the news tends to give only part of the story. We hear on the news that someone at LANL buys a sports car on a LANL credit card. What they don't bother mentioning is that the order was a paperwork mix-up when they were ordering something else that cost just as much but was legit business. They also don't tell us that as soon as they found out there was a mix-up they actually corrected the order, returned the car, and got the money back. We hear "your tax dollars wasted by LANL" when the real story was "LANL makes paperwork error and then fixes it." 2) Because of 1 they get micro-managed by the DOE and congress. Congress has no clue how to run a large, secure, scientific lab and the DOE is not much better. 3) Congress & the DOE will tell them to do something and not provide the funding for the proper things. Recently they switched the management contract to a different agency and decided to pay them a lot more to manage the lab. The idea was that paying more would bring in better management. Well, the cost of the contract went from about 10 million to 90 million. Then congress said that the labs budget would stay the same. The net result? A 80 million budget cut. Are there problems at LANL? Yes. Will yelling about how bad things are fix it? No. Congress and the DOE need to get good management there and then give them the power and money to get the job done instead of giving them more rules to follow whenever something makes the news. Don't tell them that a forklift accident can't be allowed. Instead tell them that they have to have 30% fewer construction accidents than industry. Don't tell them that they can never loose a hard drive; tell them that they can never let weapons designs leak. Don't tell them how to run their security. Give them the money for good security and the ability to do it.
-WolvesOfTheNight