Slashdot Mirror
Fannie Mae Worker Indicted For Malicious Script
dfdashh writes "A former Fannie Mae contractor has been indicted by a federal grand jury in Baltimore, MD for computer intrusion. He attempted to propagate a malicious script throughout the company's 4,000 servers. The DC Examiner has details of the incident: 'Had this malicious script executed, [Fannie Mae] engineers expect it would have caused millions of dollars of damage and reduced if not shutdown operations at [Fannie Mae] for at least one week. ... The virus was set to execute at 9 a.m. Jan. 31, first disabling Fannie Mae's computer monitoring system and then cutting all access to the company's 4,000 servers, Nye wrote. Anyone trying to log in would receive a message saying "Server Graveyard." From there, the virus would wipe out all Fannie Mae data, replacing it with zeros, Nye wrote. Finally, the virus would shut down the servers.'"
the only thing that matters to me... will it erase my mortgage??!??!
We've gotta wipe the system, man. Give everyone a blank slate!
http://www.chaotickingdoms.com
Either a laughing skull and bones or an animated version of him as a bobblehead that pisses off Samuel L. Jackson with his hacker crap?
Kwisatz Haderach
Sell the spice to CHOAM
This Mahdi took Shaddam's Throne
Look like he was flying through a cyberspace version of his city while he was doing it???
...turned Fannie Mae into a financial failure.
Considering that Fannie Mae has been losing billions every week, the idea of only losing a few million for a week sounds like a great idea.
I am Jack's complete lack of surprise
Technically, all of the data in a computer is really just a bunch of ones and zeros, so assuming a fairly even mix of those two possibilities, writing over everything with zeros would only change half of their data.
One time I threw a brick at a duck.
Of course it isn't verifiable, but I thought this was interesting:
H1B#36a: "What wasn't reported was that the contractor was fired for writing a script poorly, that caused the failover over of a number of High-Availablitity production servers. His "landmine/timebomb" script was found through his same poor scripting skills. Whatever doping manager that hired that guy should be fired too, along with his director and VP!"
-t.
This is like if someone mixed the movies Office Space and Fight Club together!
Former FNMA employee here- I left a couple years ago.
1- The vast majority of their servers run Solaris- this wasn't some sort of cross-platform attack.
2- They have an infrastructure that allows a single admin server to execute commands on the entire farm simultaneously.
Suddenly being able to wipe out everything doesn't sound too difficult does it? From what I heard from friends- it was just a couple lines of shell, and it was discovered because there was a typo, and script to failed. Not a virus by any stretch.
Oh- and of course they have backups, but imagine restoring 2500+ servers from tape... Thats probably where the week of downtime came from, and it sounds accurate to me.
Obviously virus is what the idiot who wrote the article is calling it (and possibly a term used in whatever he has been charged with), but since he had root access to all the servers it wouldn't really be a virus. Just a script installed on them, probably run via plain old cron.
When you terminate a contractor or employee it is wise to also terminate their access to your servers...
#!/bin/sh /dev/[sh]d* /dev/zero >"$i" &
for i in
do
cat
done
is not exactly a great piece of programming (and the above is obviously untested, and since he was a unix admin he would actually know what the drive device names are in the presence of wierdo RAID setups...)
It seems to me that banks making loans over the last four years IS THE major problem. Had they not been able to, we wouldn't have had a baseless boom, Angelo Mozillo, a gazillion dollar bailout of the wealthiest individuals, and schemes to assist the most foolish "housing investors" -- all at my expense. I too am rather disappointed the script was found and I don't even have a mortgage. I refused to get caught up in the housing bubble choosing instead to wait for a return to normalcy, which turned out to be a mistake. What I should have done is bought a house way more expensive than I could afford on a negative amortization loan and let the government modify my interest rate and principal balance. I now realize that in America, prudence is punished and stupidity rewarded. So yeah, I'm actually very depressed the script didn't execute.
What changed under Obama? Nothing Good
Fannie Mae was not the problem there, they only purchased "conforming" mortgages which matched their definition of a 'non-risky' loan.
The problem was from the fact that the banks started moving from relying on Fannie Mae and started making "non-conforming" mortgages and selling them to other privately held companies. Once these mortgages started defaulting and housing prices started falling, even the "conforming" mortgages started having problems and the house of cards fell.
Fannie Mae is a good scapegoat for people who want to pin this whole situation on one group, but that's all they really are, a scapegoat. They had their own problems (notably shady dealing in the upper echelons) but they weren't the ones who cause or even setup this scenario.
When the deed was recorded at the local records office, the fact that the bank has a lien on it is recorded along with it. The only way to clear that lien is to get the lienholder to have a letter saying so attached to your deed, or you have to have a court do it.
SirWired
From there, the virus would wipe out all Fannie Mae data, replacing it with zeros
Wouldn't zero be an improvement over negative whatever?
Set your phasers on "funky"!
So if Fannie Mae had NOT been able to buy the conforming loans, banks making stupid loans would have had less money available to them because they'd have to hold the conforming loans, and as a result, those banks would have made fewer stupid loans. Sounds to me like FM was part of the problem. Honestly, I'm pissed. I'd like to see the entire banking industry lined up against the wall, because all it has amounted to recently is a Federally sanctioned highway robbery program targeted against people who live within their means and act responsibly.
What changed under Obama? Nothing Good
While reading through the article, and some of the talkback, I stumbled across this document which contains results of the actual investigation. It has lots of actual details, and is worth a read. (meanwhile, the news articles are a little too dumbed-down to be of any real value or interest).
Stupid SHOULD hurt. The government and the liberals don't realize this. And yes, I said Liberals ... not Democrats. There were plenty of LIBERAL (see compassionate conservatives) in the Republican Party too.
And by "Stupid" I don't mean lack of intelligence (IQ), I mean DARWIN Award winners types. These are the people who have a brain, should know better, but don't F'in care about what they are doing and expect everyone else to clean up their mess.
Sorry, but STUPID SHOULD HURT! Like when you stick your hand on the stove hurt. Like when you make stupid loans and bundle them into derivatives to leverage the stupidity and then re-bundle those into even more stupid derivatives. IT all works, until it doesn't, then everyone pays for the Ponzi Schemes.
Which is why the stupid Bailouts to the same people that caused this mess is just stupidity on top of stupidity. We are now leveraging STUPID to try to stop the "HURT".
And nobody is willing to tell it like it is. STUPID!
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
In Cambodia, the Khmer took the guns first, and then massacred 40% of their population.
Took the guns... from whom? And how? Did an elected body pass gun control legislation with the support of the populace, and then turn around and engage in wholesale massacre? Somehow I missed that part of the story.
What's to keep the government from "taking the guns" from a well-armed populace? The same populace? What if the government has bigger guns? They always will, because they have bigger budgets. Your well-armed populace better have fixed anti-aircraft emplacements if someone ever really launches a successful attempt at a military dictatorship in the US.
So, a well-armed populace cannot prevent the scenario you describe. Which leaves the question, just what *can* it accomplish? There will always be people within the population who are not armed, whether they are unwilling or unable to become so. Should they have their liberty and health threatened by the "well-armed populace?"
Is there a role for police in your world? Wouldn't any police force that could effectively protect the rights of individuals necessarily require the ability to exert superior force?
Don't you wish your girlfriend was a geek like me?