Slashdot Mirror

← Back to Stories (view on slashdot.org)

How A Contractor Exploited A Vulnerability In The FCC Website (wirelessestimator.com)

Posted by EditorDavid on from the needing-more-than-a-lock-screen dept.

RendonWI writes: A Wisconsin wireless contractor discovered a flaw in the FCC's Antenna Structure Registration (ASR) database, and changed the ownership of more than 40 towers from multiple carriers and tower owners into his company's name during the past five months without the rightful owners being notified by the agency, according to FCC documents and sources knowledgeable of the illegal transfers. Sprint, AT&T and key tower companies were targeted in the wide-ranging thefts... Changing ASR ownership is an easy process by applying online for an FCC Registration Number (FRN) which is instantly granted whether the factual or inaccurate information is provided. Then, once logged in, an FRN holder can submit a form stating that they are the new owner of any or multiple structures in the database. As soon as it is submitted, the change is immediately reflected in the ASR.

33 of 69 comments (clear)

  1. Summary? by Rockoon · · Score: 4, Insightful

    Why doesnt the summary indicate in any way what was gained by the perpetrator in doing this?

    --
    "His name was James Damore."
    1. Re: Summary? by Anonymous Coward · · Score: 1

      The perpetrator gained super karma somewhere on Reddit for having such a cool story bro.

    2. Re:Summary? by gnasher719 · · Score: 2

      Why doesnt the summary indicate in any way what was gained by the perpetrator in doing this?

      I would think a warm cell and three meals a day?

    3. Re:Summary? by Rockoon · · Score: 1

      The way I see it the summary might as well read "The competition of a wireless contractor..." because at least then there is a motive.

      --
      "His name was James Damore."
    4. Re:Summary? by dog77 · · Score: 1

      The article says "It is unknown why Nix changed the ownership of the structures or what benefits would be derived by being able to identify that Aura owned a $12-plus million group of towers.".

    5. Re: Summary? by Entrope · · Score: 2

      Changing the owner that is listed in one federal database doesn't actually transfer ownership of the assets in question.

    6. Re:Summary? by Chris+Mattern · · Score: 1

      It's impossible to even guess why a criminal would want $12 million worth of Towers and antenna equipment.

      But that's just it: it didn't actually get him the towers and equipment. He just hacked a database (which was not the legal record of ownership) to say he had it. It didn't get him possession of it, and if he tried to dispute ownership, the hacked records would quickly be shown as fake. So what did he intend to do?

    7. Re:Summary? by ma1wrbu5tr · · Score: 1

      Are we sure this guy wasn't a Comcast contractor? That would explain much.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    8. Re: Summary? by DesertNomad · · Score: 1

      No, that's "Jesus H. Christ!"

    9. Re: Summary? by mysidia · · Score: 1

      Changing the owner that is listed in one federal database doesn't actually transfer ownership of the assets in question.

      But they should send a Bill for all FCC fines for any violations found at any of those towers that occured to the registered owner while the contractor was listed as such.

    10. Re: Summary? by nnet · · Score: 1

      whats the H. stand for?

    11. Re: Summary? by nnet · · Score: 1

      Birdie birdie in the sky,
      dropping whitewash in my eye,
      I don't care, I don't cry,
      I'm just glad that cows don't fly.

    12. Re: Summary? by Radish03 · · Score: 2

      That would actually be Geese's Christ, the winged counterpart to Deer God in the animal pantheon.

    13. Re: Summary? by Maxwell'sSilverLART · · Score: 2

      whats the H. stand for?

      Haploid.

      --
      Moderate drunk! It's more fun that way!
    14. Re:Summary? by JustAnotherOldGuy · · Score: 1

      It's impossible to even guess why a criminal would want $12 million worth of Towers and antenna equipment.

      To sell it on eBay, of course!

      --
      Just cruising through this digital world at 33 1/3 rpm...
    15. Re: Summary? by JustAnotherOldGuy · · Score: 2

      Changing the owner that is listed in one federal database doesn't actually transfer ownership of the assets in question.

      Yes, but those entries may be enough to enable you to bluff your way through some other transaction or fraud scheme, if it looks like you're the owner.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    16. Re:Summary? by JustAnotherOldGuy · · Score: 1

      Those records may give him enough credibility to enable him to bluff his way through some other transaction or fraud, which may be the real target of what he was after.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    17. Re: Summary? by paiute · · Score: 1

      And a synonym for whoosh.

      --
      If Slashdot were chemistry it would look like this:Cadaverine
    18. Re: Summary? by paiute · · Score: 1

      Handicapped. Thus the Christ on a crutch saying.

      --
      If Slashdot were chemistry it would look like this:Cadaverine
    19. Re: Summary? by mysidia · · Score: 1

      Yes, but those entries may be enough to enable you to bluff your way through some other transaction or fraud scheme

      And this might have slipped under the radar if he targeted one or two towers, instead of 40, b/c as a result of claiming so many he wound up assigning himself some tower that was damaged requiring $21k repairs to make it safe to the public and thus under FCC investigation and making false statements, causing a safety hazard...

      I would Hope they put Aura on the hook for the $21K, and block him from making further FCC filings regarding towers, and go ahead and make the charges for making fraudulent statements and filing false documents with the FCC.

  2. ugh..... by starblazer · · Score: 3, Informative

    What a jackass... now the FCC is going to burden us honest folk with extra paperwork. I liked being able to submit my AU to the ULS and it being approved the next day automatically.

    1. Re:ugh..... by JustAnotherOldGuy · · Score: 1

      What a jackass... now the FCC is going to burden us honest folk with extra paperwork.
      I liked being able to submit my AU to the ULS and it being approved the next day automatically.

      I'm that was convenient and all, but what if it was someone mucking about with your records and changing stuff in them?

      --
      Just cruising through this digital world at 33 1/3 rpm...
  3. Why? by mhkohne · · Score: 4, Interesting

    From the article: "It is unknown why Nix changed the ownership of the structures or what benefits would be derived by being able to identify that Aura owned a $12-plus million group of towers."

    This seems like a 'Step 2: ???' kinda plan, since the FCC database gets you exactly nothing in terms of money, or ability to transfer ownership of the towers.

    Weird.

    --
    A thousand pounds of wood moving at 300 feet per minute. Don't get in the way.
    1. Re:Why? by subanark · · Score: 1

      My guess would be to try and sell them

    2. Re:Why? by ancientt · · Score: 1

      You know, I'll bet you're right. Selling them would be like selling a bridge you don't own, and the con would work a lot easier if you can show that the FCC has you down as the owner.

      --
      B) Eliminate all the stupid users. This is frowned upon by society.
    3. Re:Why? by PPH · · Score: 2

      Borrow against them.

      After 2008, bankers are desperate to write new loans against practically anything. Since the home mortgage business is being watched like a hawk by regulators, lots of business scams are popping up.

      --
      Have gnu, will travel.
    4. Re:Why? by mysidia · · Score: 2

      Bankers are going to require more paperwork to show clear title than a listing in the FCC database,
      just because you're listed as owner doesn't mean there's no Lien or other mortgage against the property, for example.

    5. Re:Why? by Anonymous Coward · · Score: 1

      Obviously he was just trying to get laid. Women get soaking wet over guys who own a lot of cellular infrastructure. There's even a famous rap song about it.

      Sprint, Cricket, Let me stick it
      in your butt hole like T-Mobile,
      slide in your buns like Verizon,
      This nigga own so many towers
      you gonna be suckin my dick for hours

    6. Re:Why? by Aighearach · · Score: 1

      This seems like a 'Step 2: ???' kinda plan, since the FCC database gets you exactly nothing in terms of money, or ability to transfer ownership of the towers.

      Just because the reporter who wrote the story didn't have details of the scam, doesn't mean that there were no details. It just means they're not going to be able to tell you.

      An obvious thing would be scamming investors by making your company look larger than it is. Who knows? Chances are, catching him at this stage means whatever the rest of the plan was we'll never know because he won't be able to do it now.

    7. Re: Why? by KGIII · · Score: 1

      Of all the suggested reasons, this is most likely.

      --
      "So long and thanks for all the fish."
  4. To everyone wondering what was gained by Anonymous Coward · · Score: 3, Insightful

    When I, a small wISP owner, want to access a tower I look up the tower owner in the FCC database. I then contact said owner and proceed to work out a lease agreement. When I, a small wisp owner, want a bank loan I attach my FCC Database records as part of proof of ownership. The structure itself very often does not have records with the county like land does. The land can be owned by J. Q. Public, Et Al. Now I have $12M worth of assets and can get a 3 to 5m loan with a very attractive rate because its so far under my asset value.

  5. Seriously?? by JustAnotherOldGuy · · Score: 1

    "Changing ASR ownership is an easy process by applying online for an FCC Registration Number (FRN) which is instantly granted whether the factual or inaccurate information is provided. Then, once logged in, an FRN holder can submit a form stating that they are the new owner of any or multiple structures in the database. As soon as it is submitted, the change is immediately reflected in the ASR."

    That is a breathtakingly bad process. Epic, in fact.

    Thousands of security analysts around the country are feeling light-headed right now and are looking for a place to lay down. Thousands of others are reaching for aspirin to to try damp down the near-fatal brain cramp they got when they read this magnificent example of sheer bureaucratic stupidity.

    --
    Just cruising through this digital world at 33 1/3 rpm...
  6. Not what my news source said by barbariccow · · Score: 1

    My news source says that this guy was actually legitimately buying the towers, but because of some backroom HILBAMA scheme after he spent the money it got reversed, he was blamed for hacking.

    As far as motivation, according to several anonymous sources that couldn't be contacted for further details, word on the street was this guy had a lot of secret details THE GOVERNMENT DOESN'T WANT YOU TO KNOW about the REAL story of..... BatBoy!