RE: FAA hacked

[InfoSec News <isn () c4i org>]

Forwarded from: "Kevin L. Poulsen" <klp () securityfocus com>
Cc: <john.pescatore () gartner com>

I don't know what John Pescatore thinks "fact checking" means, but my
contacting the FAA, confirming the hack with them, reporting on the
details and quoting their spokeman, qualifies, I think, under any
reasonable definition of the term. On the other hand, John's claim
that my piece "basically consists of snippets of email conversations
between hackers" is demonstrably false. It's a five-hundred word
story, with a single quote from the hackers' email at the end.

Kevin L. Poulsen
Editorial Director
SecurityFocus Online
klp () securityfocus com


-----Original Message-----
From: owner-isn () attrition org [mailto:owner-isn () attrition org]On Behalf
Of InfoSec News
Sent: Monday, April 29, 2002 2:14 AM
To: isn () attrition org
Subject: [ISN] FAA hacked


Forwarded from: John Pescatore <john.pescatore () gartner com>

There are a couple of interesting things here:

1. Ex hacker Kevin Poulsen writes for SecurityFocus online, and gets
published out of the box by The Register. The article basically
consists of snippets of email conversations between hackers. This is
kind of self-perpetuating 15 minutes of fame loop, with not a whole
lot of fact checking going on.

2. That said, I heard through other channels that it is accurate, so
when will the federal government clean up its own backyard and stop
telling private industry it isn't secure enough?

JP



http://www.theregister.co.uk/content/55/25029.html

By Kevin Poulsen, SecurityFocus Online
Posted: 26/04/2002 at 06:54 GMT

Hackers were able to penetrate a Federal Aviation Administration system
earlier this week and download unpublished information on airport passenger
screening activities, federal officials confirmed Thursday.

Styling themselves "The Deceptive Duo," the hackers on Wednesday publicly
defaced an FAA server used by what was the administration's Civil Aviation
Security organization, which until recently was responsible for supervising
passenger screening at U.S. airports.

There, the intruders posted a mission statement vowing to expose America's
poor state of cyber security for the good of the nation.

[...]




-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn'
in the BODY of the mail.