Council Sells Security Hole On Ebay

Posted by CmdrTaco on Monday September 29, 2008 @03:34AM from the only-as-good-as-your-weakest-link dept.

Barence writes "A security expert was stunned to discover a VPN device he'd bought on Ebay automatically connected to a local council's confidential servers. Bought for just 99p for use at work, when plugged in it automatically connected with the login details which had been carelessly left on the device. 'The whole selling point of the device was that it was extremely easy to configure. It's pretty horrific really,' says the intrusion-detection professional. The council says it is 'deeply concerned' by the news, but is confident that 'multiple layers of security have prevented access to systems and data.'"

1 of 147 comments (clear)

Min score:

Reason:

Sort:

Re:Layers of Security by Anonymous Coward · 2008-09-29 04:23 · Score: -1, Flamebait

No. If they are worth anything (doubtful from their mistake), then multiple layers of security means that they treat their inside like the outside, so even if you have the vpn device it doesn't get you that far.
Plus, now that they know what's happened, they should have been able to revoke rights for the vpn device. Stop trying to be such chicken little security weiners, slashdot posers. You are not as cool as you wish you were.