<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>From:</b> Dave Sill <sparge@gmail.com> <br><b>Subject:</b> Re: [ExI] ExI] are we publishing?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Tue, May 28, 2019 at 3:28 PM <<a href="mailto:spike@rainier66.com">spike@rainier66.com</a>> wrote:<o:p></o:p></p></div><div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>And yet… we still haven’t talked about an area in which plenty of people here have actual expertise: computer systems administration. SysAdmin hipsters please: what blame can reasonably fall on the guy who was in charge of that system that was penetrated with such astonishing consequences?<o:p></o:p></p></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>>…Who knows? Maybe the sysadmins complained about weak password policy/enforcement and were told not to do anything about it…<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The system already had weak passwords, which is why some yahoo set his password to Password and somebody got in. However… that would only compromise that account. If several users had weak passwords, that would only compromise their own. But apparently somebody got in at the SysAdmin level. Weak password requirements wouldn’t apply there.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> What happens when one is a SysAdmin and somehow the entire server is compromised?<o:p></o:p></p></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>>…It varies. They could be fired, either for not preventing the compromise or as a scapegoat. If the company is public and the damage is severe, the CIO/CTO/CISO could end up taking the hit. -Dave <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ja, that’s the weird part. An outsider, this Australian foreign national did this and that (why that scoundrel!) but seldom do we hear what I have long suspected: the outsider would have needed an insider in cahoots in order to get access to that server at the system level.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>With the State Department stuff we know who the insider was: Corporal Manning, but Manning got off with a slap on the wrist, and is free now. We don’t know who the insider was on the other business, but there would have to have been one, if the system had been set up correctly. Of the political stuff Julian published on WikiLeaks, nothing in there was classified, not a word of it.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>With all this focus on Julian, he did 1% of what Cpl Manning and the (unknown) DNC insider did, yet the focus is all on Julian. Julian was the one imprisoned for years in an embassy in London and was threatened with murder, while these others go free.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div></div></div><p class=MsoNormal>spike</p></div></body></html>