BBYR Achieve
返回信息流
这是一条镜像帖。来源:北邮人论坛 / security / #12584同步于 2007/7/14
该镜像源已超过 30 天没有更新,可能在源站已被删除。
Security机器人发帖

Sensitive U.S. military files accessible on the Net

flyingkisser
2007/7/14镜像同步0 回复
Sensitive U.S. military files accessible on the Net Published: 2007-07-12 A lack of adequate protections on file servers run by government agencies and military subcontractors allowed reporters for the Associated Press to download sensitive military and technical files from computers that should not have allowed public access, the news service reported on Thursday. The files included information that could have allowed hackers access to Department of Defense computer systems, maps of military facilities in Iraq, descriptions of the security features at some of the facilities, and plans for infrastructure improvement at bases in the Middle East, the AP reported. The files were hosted on anonymous FTP (File Transfer Protocol) servers with no password protection or, in one case, with a password that was included in another file on the server. At least one subcontractor told the Associated Press that the files were secure because they were on servers not indexed by search engines. While cybersecurity has been an afterthought in much of the Beltway, following the loss of a laptop holding the personal information of 26.5 million veterans and the revelation that attacks from China and other countries have targeted government systems, lawmakers have begun to focus on the federal systems' poor security. In March, eight of 24 federal agencies got a failing grade for the security of their systems, according to a report required by the Federal Information Security Management Act (FISMA). Following the inquiry by the Associated Press, the Army Corps of Engineers requested that its contractors immediately protect the files with at least a password and other agencies have either removed their FTP sites from the Internet, added password protection or pledged to take steps to secure the documents, the AP reported. The Associated Press stated that its reporters deleted all the documents found during its investigation.
订阅后,新回复会通过你的通知中心匿名送达。
0 条回复
暂无回复 · 你可以订阅本帖等待新回复。