dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
8
share rss forum feed


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Reviews:
·SONIC.NET

2 recommendations

reply to Smokey Bear

Re: Convicted hacker attend IT class.. and hacks prison networks

The bulk of the blame should fall onto the prison IT staff. Why was there a connection from the training room to the prison internal network in the first place ? It probably was the most convenient way to hook the training computers up to the Internet. Convenience and security are often at odds with each other.
--
Got some spare cpu cycles ? Join Team Helix or Team Starfire!


neochu

join:2008-12-12
Windsor, ON

1 recommendation

said by leibold:

The bulk of the blame should fall onto the prison IT staff. Why was there a connection from the training room to the prison internal network in the first place ? It probably was the most convenient way to hook the training computers up to the Internet. Convenience and security are often at odds with each other.

And lack of reasonable risk assessments...


MxxCon

join:1999-11-19
Brooklyn, NY
reply to leibold
I think even bigger question is why are they still running mainframe? :/
--
[Sig removed by Administrator: signature can not exceed 20GB]


EGeezer
zichrona livracha
Premium
join:2002-08-04
Midwest
kudos:8
Reviews:
·Callcentric
said by MxxCon:

I think even bigger question is why are they still running mainframe? :/

I've heard people call the system case of their PCs a 'mainframe'. I wouldn't be surprised if the reporter or prison's P.R. spokesman meant the prison education network's server.
--
Buckle Up. It makes it harder for the aliens to suck you out of your car.

daveinpoway
Premium
join:2006-07-03
Poway, CA
kudos:2
Here's another article about this: »www.net-security.org/secworld.ph···ecurity)


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Reviews:
·SONIC.NET
If the statement from the Prison Spokesperson is true (closed education network with no possible access to the Internet or other prison systems) why was the teacher of the training class fired ?

I also find the "at the time of this incident" part of the quote amusing. Does that mean they suspended those security measures and the prison education network is now wide open ?


The quote of the Prison Spokesperson first confirms that there was an incident and then goes on to claim that it would have been impossible. That doesn't give it much credibility.

Of course we don't have any details. Perhaps there was something that the IT teacher did that bridged the closed education network to the rest of the prison ?
--
Got some spare cpu cycles ? Join Team Helix or Team Starfire!