Slashdot Mirror
Houston Courts Shut Down By Malware
Conficker is still at it: dstates writes "The municipal courts of Houston were shut down yesterday after a computer virus spread through the courts' computer systems. The shutdown canceled hearings and suspended arrests for minor offenses and is expected to extend through Monday. The disruption affected many city departments, the Houston Emergency Center was briefly disconnected and police temporarily stopped making some arrests for minor offenses. The infection appears to be contained to 475 of the city's more than 16,000 computers, but officials are still investigating. Gray Hat Research, a technology security company, has been brought in on an emergency contract to eradicate the infection. In 2006, the City spent $10M to install a new computer system and bring the Courts online, but the system has been beset by multiple problems. After threatening litigation, the city reached a $5 million settlement with the original vendor, Maximus, and may seek another vendor."
It's amazing what can happen when you "lose" a few dozen pen drives with downadup at various strategic places.
Help stamp out iliturcy.
The monoculture strikes again! My heart is bleeding peanut-butter right now. Having all your eggs in one basket (especially Microsoft's) is never a good idea.
"terrorism" and "pedophilia" are the root passwords to the Constitution
I wonder, what operating system(s) were compromised by this infection?
Could it be -- say it isn't -- yet another outbreak of infestations on Windows machines?
If people haven't learned by this point not to trust Windows machines with anything critical, they deserve what they get. It's no longer a matter of ignorance as these things have been widely documented for decades.
From the article:
It sounds like this whole computerization effort was poorly executed from the get-go. Many such projects have problems, since they typically pit bumbling bureaucrats against shark-like consultants.
Anyway maybe they ought to take the database and just pull out the pending cases using ad hoc queries, and send the print-outs to the courthouse so they can get on with their work. This can't be rocket science here.
it's = "it is"; its = possessive. E.g., it's flapping its wings.
Social engineering can work on *any* OS (even the OS certified by NSA) . It is the user that needs to fixed.
It's as if a thousand bureaucrats cried out "Houston, we have a problem" in terror, and were suddenly silenced.
It's more of a gaping hole, it seems
No tyrant thrives when every subject says no.
Ok, so if these computers were used solely for official business, there wouldn't be this big of an issue. Lower paid workers tend not to have computers or internet at home, so they use work systems for "surfing." No internet access and email should only be via highly filtered webmail. USB, DVD drives and floppies locked off with zero access.
I used to work in Telecom. Our biggest malware/virus issues were at E911 centers even when the computers were on a dedicated network without any non-911 access. The nationwide 911 system doesn't use IP, so the problems didn't come from outside each 911 center. Those folks were paid $8/hr by cities and were under constant virus and malware attack from workers bringing programs in on diskettes, CDs and USB drives.
The other problem is the lack of understanding that many municipalities have over computer system maintenance. Many localities are smart and cautious, while many others treat work systems like home systems and hope for the best. Some have decided to provide free municiple wifi internet access with the same network their police and emergency services use for remote access. fools.
Hate to break this to you, but TDCJ is state jail and prison (two separate entities, only handles felons). Entirely separate from Houston City courts (which only handle class C misdemeanor sentences and traffic ticket fines - no one stays in City Jail longer than a week) or Harris County Jail (up to 18 months, IIRC, and still a separate entity). And the only thing your idea would do is cause a riot.
Not that it wouldn't break the monotony. But the chain link fences topped with barbed wire, armed guards, and mechanical systems wouldn't be effected in the least. TDCJ is a lot less technical than city/county jails. It's a prison, after all, not a local jail.
PC moderators can suck my White pierced, tattooed dick. If you think pride == hate, s/dick/Aryan meat mallet/g.
After threatening litigation, the city reached a $5 million settlement with the original vendor, Maximus, and may seek another vendor."
That's what happens when you buy your network from a vendor just because you liked their SimCity games.
They can have the best firewalls and anti-virus e-mail scanner on the planet but it takes ONE person with an infected laptop to plug it into the internal network and do it's dirty work without them knowing it in time.
It's possible they have been infected for months and didn't know it until things started to act funny.
To have that many PCs infected didn't surprise me as they didn't bother to take proper security precautions and audits. System admins didn't routinely check for viruses on their servers and didn't check their logs for anything out of the ordinary is asking for trouble.
I guess the system admins there figured, "Well, long as nobody is complaining about anything we're golden." It's possible they have a very small IT staff and outsource the security details to the vendor who they bought the system from who they are putting the blame on?
We have a security firewall appliance at work that does just about everything but I don't rely on it 100% to make sure it's doing it's job. I go through the logs daily and test it. Just have to be proactive on finding problems and fix it before anybody else notices it.
If you're going to roll out a large-scale installation, you do the install on one box, get everything tweaked just the way you need it, then ghost it to the rest of the boxes. I'd think it was clear by now that turning off autorun should be one of the tweaks you do by reflex before ghosting.
Good, inexpensive web hosting