“A break-in targeting State Department computers worldwide last summer occurred after a department employee in Asia opened a mysterious e-mail that quietly allowed hackers inside the U.S. government’s network,” Ted Bridis reports for The Associated Press.
Bridis reports, “In the first public account revealing details about the intrusion and the government’s hurried behind-the-scenes response, a senior State Department official described an elaborate ploy by sophisticated international hackers. They used a secret break-in technique that exploited a design flaw in Microsoft software.”
“Consumers using the same software remained vulnerable until months afterward,” Bridis reports. “Donald R. Reid, the senior security coordinator for the Bureau of Diplomatic Security, also confirmed that a limited amount of U.S. government data was stolen by the hackers until tripwires severed all the State Department’s Internet connections throughout eastern Asia. The shut-off left U.S. government offices without Internet access in the tense weeks preceding missile tests by North Korea.”
Bridis reports, “The mysterious State Department e-mail appeared to be legitimate and included a Microsoft Word document with material from a congressional speech related to Asian diplomacy, Reid said. By opening the document, the employee activated hidden software commands establishing what Reid described as backdoor communications with the hackers.”
“The technique exploited a previously unknown design flaw in Microsoft’s Office software, Reid said. State Department officials worked with the Homeland Security Department and even the FBI to urge Microsoft to develop quickly a protective software patch, but the company did not offer the patch until Aug. 8 – roughly eight weeks after the break-in,” Bridis reports. “Microsoft said it works as quickly as possible to provide customers with security updates.”
Full article here.
You’ve got morons in government and then you’ve got the true idiots who choose their software. Note to U.S. gov’t: Microsoft sucks. Sheesh.
To whomever thought up the brilliant idea to utilize Microsoft’s junk that isn’t even fit for Wal-Mart consumers’ use in the State Department: It’s amazing you can even breathe and blink and such, as even involuntary actions require a some brain cells. Is it painful to be so morbidly retarded? Or are you just blissfully unaware of everything and anything 24/7?
If the State Department used Macs instead, none of this would have happened – and that’s a fact.
Related articles (warning may contain some irony):
U.S. National Security Agency works with Apple, Microsoft, others on OS security – January 09, 2007
US Department of Homeland Security’s border screening system was crashed by Windows Zotob worm – November 03, 2006
US Department of Homeland Security: patch Microsoft Windows now or risk complete system compromise – August 10, 2006
Get a Mac: Viruses, spyware cost U.S. consumers $7.8 billion over last two years – August 08, 2006
Symantec details more security holes in Microsoft’s Windows Vista – July 26, 2006
Symantec researcher: At this time, there are no file-infecting viruses that can infect Mac OS X – July 13, 2006
FBI: Viruses, spyware, other computer-related crimes cost U.S. businesses $67.2 billion per year – February 01, 2006
U.S. Copyright Office: Use only the world’s most insecure browser to secure your copyright – August 17, 2005
Microsoft seeks to create ‘community of governments’ to battle Windows viruses, worms, etc. – February 04, 2005
80,000 UK government computers knocked out in Microsoft Windows crash – November 28, 2004
Axcess Business News: Is the U.S. government ‘too dependent on Microsoft?’ – September 26, 2003
Baltimore Sun columnist suggests adding Mac OS X to mix of government computers for safety – September 17, 2003
US Gov’t warns of Internet attacks after new Windows flaw revealed – September 11, 2003
CCIA wants U.S. Dept. of Homeland Security to reconsider buying ‘insecure Microsoft software’ – August 29, 2003
Apple’s Mac OS X added to U.S. government list of supported platforms – August 28, 2003
U.S. Department of Homeland Security says Windows vulnerable to attack – August 01, 2003
Department of Homeland Security chose Microsoft due to time and money limitations – July 21, 2003
U.S. Department of Homeland Security awards enterprise agreement to Microsoft – July 15, 2003
I blame Microsoft for the war in Iraq. There has to be a connection.
Stright from the pages of Atlas Shrugged
When will Microsoft be held accountable and liable for their shoddy software??? If an auto manufacturer builds a defective car, or an aerospace firm builds a flawed pain that harms individuals or their safety, then the government steps in (as well as the lawyers) and things get fixed. But for some reason, people’s IQs fall into the low teens when it comes to computers and their role in the safety of many, many people.
That’s supposed to be ‘flawed plane,’ not ‘flawed pain.’ Oops.
At some point in the future, we will have a true international incident caused by a Microsoft security flaw. It’s just a matter of when it’s going to happen, not if.
… and most of Homeland Security, the FBI and the White House run on Windows. Do we feel safe now?
Yeah – and no matter which two countries it actually affects, it will still be the fault of M$, and therefore, the US will be brought into it by association.
hey U.S. state department: GET A MAC
TAG: Ha ha
if they don’t get macs, they ought to at least get linux on those PCs. this shouldn’t be a matter of “we want them to switch to mac”, it should be “we want them to keep information SECURE, so we want them to switch to anything that isn’t windows-based”.
let’s send them our old commodore 64’s and apple ii’s. =)
… and most of Homeland Security, the FBI and the White House run on Windows. Do we feel safe now?
Actually the limited top brass in the White House and FBI run Mac OS X.
It’s just the rank and file “sh*tbirds” run ‘Doze and the reason is simple, so they can snoop on them.
Goggle it.
Oh, don’t overreact here. It is not a secret that MS software is buggy, but to be fair if a group of high-skiled hackers wants to break a system, they will. If SD had Macs and someone designed a clever tool they would break in too. Would it be harder? Yes. But they would break in anyways.
“Is it painful to be so morbidly retarded? Or are you just blissfully unaware of everything and anything 24/7?”
Eeeaaaasssssy big fella . . . no need to get upset . . . we’re all your friends here.
(Can someone dial 911, MDN is starting to sound like the nut from VA Tech!!)
Seriously MDN, you’re scaring me a bit. I agree, MS sucks and Apple rocks, but I can almost feel the spittle flying out of your mouth as you type this in a fit of rage. We can be justified about our OS choice, but I think you’re starting to take this all too personally.
The point is, it would be harder. Much harder, and the hole would be much easier to close. You’re arguing the security by obscurity myth, and that’s been disproven many times.
Have you heard about the Linux on iPod malware? Less than a thousand iPods out of the 100+ million sold have had Linux installed on them, and yet it’s the Linux version that gets the malware.
MDN Magic Word: put, as in: Put some thought into what you’re saying.
@In the shelter
Same thoughts here. That was little over the board. Just keep your cool MDN.
1. The Supreme Court puts Bush in the Presidency.
2. Bush orders the DoJ to settle the case with Microsoft for their illegal anti-competitive actions.
3. Microsoft agrees to take the DoJ settlement
4. A few months later the U.S. Government accounces that they are standarizing the entire government on Microsoft Windows
Amazing and Dispicable.
I wish someone out there could find and publish evidence that the Bush administration promised to give Microsoft the entire government account if they in turn would accept the slap on the wrist settlement rather than keep fighting it. Anyone?
I’m still fumming that all that stands between i.d. thevies and our personal information is a Windows-based Server.
“The point is, it would be harder. Much harder, and the hole would be much easier to close. You’re arguing the security by obscurity myth, and that’s been disproven many times.
Have you heard about the Linux on iPod malware? Less than a thousand iPods out of the 100+ million sold have had Linux installed on them, and yet it’s the Linux version that gets the malware.”
Did you even read my post?
“MDN Magic Word: put, as in: Put some thought into what you’re saying.”
I could say the same about you. What security by obscurity has to do with my post? I didn’t say anything about Windows being less secure because of market share, because I don’t believe it either. Do you claim that Mac OS X is a PERFECT OS? Because only then it would be unbreakable.
Yeah – and no matter which two countries it actually affects, it will still be the fault of M$, and therefore, the US will be brought into it by association.
lol u think?
You know….Why can’t these infiltrations go our way. Like all citizens’ tax debts have been wiped for 2007.
Just my $0.02
Who is John Galt????
Nobody suspects North Korea of planting the virus? Even the U.S. government? It probably never occurred to the government, because it’s stupid enough to use Windows.
Magic Word: Class. As in, Windows don’t got any.
@ Greg
You lost me at “1”
“I wish someone out there could find and publish evidence that the Bush administration promised to give Microsoft the entire government account if they in turn would accept the slap on the wrist settlement rather than keep fighting it.”
“find”??? Don’t you mean “invent”? (Tell the truth now)
My fellow Americans, I’m pleased to tell you today that I’ve signed legislation that will outlaw Microsoft forever. We begin bombing in five minutes.
That’s kind of scary that opening a Word document could install a back-door hacking tool on your PC…
I guess the pen IS mightier than the sword, especially if it runs VBA.
No. 1: Hmmm, these shit sandwiches taste funny.
No 2.: Nah, they’re the same shit sandwiches we had yesterday.
No 1: No, really, are you sure?
No 2: Sure, I’m sure. It’s an acquired taste.
This is just pure stupidity. The US government through its Department of Justice found Microsoft guilty of abusive monopoly, and yet mandates Microsoft softwares in its offices, in essence supporting Microsoft’s monopoly. Moreover, it’s been found during the trial that bundling softwares contributes greatly to security problems in Microsoft softwares, and yet the US government’s departments where security is paramount still use Microsoft softwares.
“I guess the pen IS mightier than the sword, especially if it runs VBA.”
And MUCH easier to write with – trust me, I know.
(Zorro doesn’t count.)
Speaking of OS X security….
Has any heard any news about the CanSec MacBook Pro Hacking Contest that started on April 18th?
They are giving away two MacBooK Pros if you can successfully break in to one of them before the end of the 3 day conference.
I have seen or heard any updates so, either the Macs did not last 3 minutes or they are still holding their own.
http://cansecwest.com/post/2007-03-21.15:10:00.PWN_to_OWN
To Dion & J-
Rand is to thought as MS is to quality. Pull your heads out and buy a Mac. I mean that literally and figuratively, of course.
There has to be moles in the Federal government. They are probably the ones responsible for buying inferior, vulnerable Microsoft software.
The question is, are these moles from Beijing, Moscow, Havana, Tehran, Baghdad, Paris or Redmond?
I’d say Redmond or Paris, it’s too close to call.
“The question is, are these moles from Beijing, Moscow, Havana, Tehran, Baghdad, Paris or Redmond?”
Actually, Dvorak breeds them in a secret lab in New Jersey.
I was sorry to read your use of the term “retarded”. Contrary to what MDN staff members may think, many developmentally disabled people have a deep love and commitment to others that often puts us non-retards to shame. DD people may not have much common sense, but to compare them to Windoze advocates is insulting to all DD folks and the people who love them.
I tended to follow the US Justice vs. Microsoft anti-trust trial. I think I still have a copy of the judicial “findings”. It merely scratched the surface of the ongoing malfeasance, only because of the case’s limited focus. Yet even as Justice was pursuing Microsoft, they were standardizing on Windows NT and Office. Many law firms at the time were still on Word Perfect, but Justice chose to ride the Windows wave.
So while the attorneys had a *legal* cause against Microsoft, it was business as usual for the powers that be. Once Bush came in, his team’s desire not to punish a “successful” company won out, and a simple “don’t do it again” settlement with ongoing review was the result.
But I’d argue that standardizing on a known, vulnerable platform, while ignoring the associated risks, is negligence bordering on the criminal.
What do you people expect? These are bureaucrats, government employees. They, as well as our “elected representative” spend most of their time with lobbyists and dining on the public dole. They do not have the time to waste looking out for the Nations security. The last thing they are going to do is blow the whistle on their bosses.
MS put backdoors into their soft to allow the govt TLA’s access to everyone’s ‘puter in the name of security (ha ha
” width=”19″ height=”19″ alt=”grin” style=”border:0;” />). These backdoors are routinely found by researchers and occasionally by crackers.
No one is really surprised by this, PTB figure provided 98% goes how we want it 2% can go otherwise, manageable risk, plausible deniability. Every so often a backdoor is found but because it is don’t imagine they will close the rest, if they could, if they knew where they are.
BTW I sure am not saying all backdoors are deliberate, MS as a general entity can’t code for shit, of course that’s not to say they haven’t some skilled guys and gals there.
So negligence bordering upon the criminal? – it depends what side the govt are on rather doesn’t it? The govt we’ve ended up with is more mafia than ‘democracy’, they sure don’t act in the interests of real, ordinary folks. Ordinary folks can only contribute a few hundred at most to their re-election fund, big biz however can drop a few million without blinking.
Most ordinary folks get their info from an hour or two’s broadcast (TV) news per week, the rest of the time they are working too hard or dealing with crap they are buying/have bought – freedom of choice, you know the mantra. So PTB just need to spend money to influence those ‘news’ slots, cheap really, a very good investment. PTB = banks + MIC + pharma (search google video: “Aaron Russo freedom”)
So it’s most ironic that the software ‘flaw’ that USgovt has been using to infiltrate other good Americans’ ‘puters has been used on themselves. But it happens, there is even a word to describe the situation, ‘blowback’.
Who cares provided that the PTB are safe in their walled estates? Really, WTF.
@RJ
i would have said Rand is to philosophy as MS is to quality….. but i think that is a pretty minor quibble.
still, the reason i didn’t say it, was that even against MS that is a low blow.
To whomever thought up the brilliant idea to utilize Microsoft’s junk that isn’t even fit for Wal-Mart consumers’ use in the State Department: It’s amazing you can even breathe and blink and such, as even involuntary actions require a some brain cells.
Remember, the US Government is operated by the kind of people who wouldn’t survive within the ranks of Wal-Mart.
Kinda scary when you think about it: a multi-trillion dollar organization with worldwide influence, an entity with the power to forcibly collect taxes and mete out death, filled with incompetency…
There is no limit to the stupitidy of people…. just no limit!
That level of stupidity in the US State Department, wow… scary!
These people actually use Micro$hit software…. must hand it to them they got balls!
I really believe that it isn’t as much that M$ can’t make a secure OS as much as it is they don’t want to. To secure the OS would mean locking themselves out not to mention selling security software. Did you ever get the feeling you don’t really OWN the Windows OS on your machine? You pay for it, they let you use it but it is never really yours. Like a one time pay for rent deal. Windows has never felt like MY operating system, like going to someone else’s house to work. That’s because they never cut the cord, they are always connected (WGA).
…The technique exploited a previously unknown design flaw in Microsoft’s Office software…
The whole thing is flawed for chrissakes. Never mind, it’s the as-yet undiscovered unknown exploits of the OS that should worry ’em.