Duplicate RSA Keys Enable Lockheed Martin Network Intrusion

An anonymous reader writes "Unknown hackers have broken into the security networks of Lockheed Martin Corp and several other US military contractors, a source with direct knowledge of the attacks told Reuters. They breached security systems designed to keep out intruders by creating duplicates to 'SecurID' electronic keys from EMC Corp's RSA security division, said the person who was not authorized to publicly discuss the matter." There's also coverage at PC Magazine.

Comments

The Security Dance

[Frosty Piss]

â¦said the person who was not authorized to publicly discuss the matter

I love it how these companies and even our own government can't keep people from talking about secrets, like it's so fucking juicy that everyone just has to spill it out to the press.

Yes, I'm not a moron, I know these "not authorized" folks are probably explicitly authorized... It's just the whole security "dance" is so fucking silly.

Spoken like a true spokesperson...

[Zakabog]

and we remain confident in the integrity of our robust, multi-layered information systems security

Translation: Our system's breached but maybe you won't realize that if I throw enough buzz words at you...

Re:Spoken like a true spokesperson...

[betterunixthanunix]

On the other hand, a robust security system should be able to keep your most important information secure even when a breach occurs at lower levels. So, perhaps a breach occurred that allows some expense reports to be copied but does not enable the attackers to obtain designs for stealth aircraft. A breach is not a good thing, but it does not have to be an all-or-nothing scenario.

Re:Spoken like a true spokesperson...

[Fallen Kell]

For anyone working at a place like this, they know that the real data is on a separate network which has no physical connection to the internet. The only data that could possibly have been compromised would be unclassified, business trade secrets, and/or proprietary information.

As the one official said (which was almost completely ignored by the article's authors), there should be little risk to actual projects. Really, what they got was access to "TPS reports", and other such documents. Now, there may be an issue with "Export Control" as even if some documents are unclassified, they may not be allowed to be transmitted to certain countries. But all the real information is on that other network which you need physical access to hack, which is one of the easiest things to secure.

Does RSA store usernames and pins?

[solarium_rider]

Can someone explain what was actually stolen from RSA that allowed them to break into the networks? From what I understand even if you had had a duplicate SecurID number generator, you would still need the username and securid password (fixed code + random 6 digit) associated with the account to get into the network. Once you are into the network you probably also need a username (same as above) and user password to access the machines. This sounds more like the attackers must have had significant insider knowledge to get in.

Re:Quantum

[VortexCortex]

Wonder what relation, if any, this has to the quantum computer?

My guess is that their new quantum computer enables their security to exists as a super position of itself -- both being very secure, and completely unsecured at the same time.

However, now that the state of their security has been observed, it has collapsed into only one state (which is unfortunately: unsecured).

Re:Aha!

[fuzzyfuzzyfungus]

I, for one, am shocked, shocked, that RSA's assertion that the breach was minor and totally, not, y'know, a real world issue was less than 100% truthful...

Comment removed

[account_deleted]

Comment removed based on user account deletion