Puppy Linux Discussion Forum

cthisbear · Joined: 29 Jan 2006 Posts: 2943 Location: Sydney Australia

"These dipshits are using an automatic digital forensics and incident response tool," the hacker wrote.

"All of this [hacking] had been done within 30-40 minutes. Could of been faster if I didn't stop to laugh so much."

http://www.smh.com.au/technology/security/hackers-break-into-police-computer-as-sting-backfires-20090818-eohc.html

Shaon Diwakar, a security consultant at Hack Labs in Sydney, explained how the hack occurred.

"The attacker has discovered that the server didn't have a password for its database application and he has logged on ... and, using a technique called SQL injection, he created a PHP file on the disk and browsed through that PHP file to get complete control of that particular server," he said."

Chris.

Bruce B · Posted: Wed 19 Aug 2009, 05:36 Post subject:

Chris,

The G agencies love technology. Pay big money for it.

There are businesses, contractors if you prefer, in the business of catering to the agencies.

Agencies buy the products, often first class crapware. They get a little training from the vendor on how to use the crap.

They, the agencies, do not however maintain or develop the technology. The crapware vendors do. The maintenance is often times included with the contract, with much of the maintenance done remotely. Very little security concern on the part of the vendors.

Frankly, IMO, in many cases all would be required to completely compromise the entire network is one disgruntled employee, someone from software, a technician or supervisor.

Bruce