Council Sells Security Hole On Ebay

Barence writes "A security expert was stunned to discover a VPN device he'd bought on Ebay automatically connected to a local council's confidential servers. Bought for just 99p for use at work, when plugged in it automatically connected with the login details which had been carelessly left on the device. 'The whole selling point of the device was that it was extremely easy to configure. It's pretty horrific really,' says the intrusion-detection professional. The council says it is 'deeply concerned' by the news, but is confident that 'multiple layers of security have prevented access to systems and data.'"

Comments

Layers of Security

[MyLongNickName]

Am I the only one who cringes when hearing the phrase "multiple layers of security". It is like a process where you have five people proof read something to check for mistakes, but none of the five bears any responsibility if a typo goes through. Invariably, 80% of the mistakes make it to print.

Re:Layers of Security

[FireStormZ]

"Am I the only one who cringes when hearing the phrase "multiple layers of security". It is like a process where you have five people proof read something to check for mistakes, but none of the five bears any responsibility if a typo goes through."

Never, in the history of man has the true process of government been summed up so well!

Typo in the summary

[zappepcs]

The council says it is "deeply concerned" by the news, but is confident that "multiple layers of security have prevented access to systems and data.""

but is confident that "multiple layers of security have prevented the council from knowing if anyone has had or does have access to systems and data.""

There.. that's better
 

Erm...Layers?

[Sj0]

Once someone has a VPN tunnel directly into your network, any protection from outside attacks is automatically bypassed. What's left? A collection of passwords?