White House orders gov't IT to straighten up.

This is a good place to drop general and weird news, entertainment, and general show prep material that might be interesting to air talent or producers. Hot dog threads ALWAYS welcome.

Moderators: The People's DJ, David Paleg

Post Reply
User avatar
cgarison
Member
Member
Posts: 2032
Joined: Sat Dec 15, 2001 11:28 pm
Location: The Encampment

White House orders gov't IT to straighten up.

Post by cgarison »

http://www.theregister.co.uk/2015/06/13 ... endations/

The part that is really sad is that most of these measures have been implemented by industry. Although updating PCs with the latest software still boggles my peers where I work and they periodically downgrade my browsers from IE11 and FireFox (whatever the latest number is) to IE8 and FireFox 3.0x which wrecks my laptop for about 4 hours until I can get all the software updated (again). But my peers in this case are (more than likely) Indian contractors sending out an over write image without paying attention to whose computer they "update" to obsolete software that won't run modern HTML.
US mega-hack: White House orders govt IT to do what it should have done in the first place
No, you're not reading The Onion

13 Jun 2015 at 01:58
Chris Williams

In response to this week's data breach at the US Office of Personnel Management, the White House has ordered federal agencies to immediately deploy state-of-the-art anti-hacker defenses – things like installing security patches, and not giving everyone the admin password.

This groundbreaking cyber-edict comes after dossiers packed with highly sensitive personal information on American intelligence and military staffers were reportedly stolen from a government database.

In a statement today, officials at the White House's Office of Management and Budget said federal agency sysadmins have been told to take steps including:

Install software patches for critical vulnerabilities "without delay."
Use antivirus and check log files for "indicators" of malware infection or intrusion.
Start using two-factor authentication.
Slash the number of people with administrator-level access and limit what they can do and for how long per-login-session, and "ensure that privileged user activities are logged and that such logs are reviewed regularly."
"Recent events underscore the need to accelerate the administration’s cyber strategy and confront aggressive, persistent malicious actors that continue to target our nation’s cyber infrastructure," the White House officials added.

It emerged on Friday that hackers with close ties to China are believed to have obtained extensive background information on CIA agents, NSA spies, military special ops, and other government employees who had applied for national security clearances.

It is feared that records on every federal employee were also swiped in the attack, which was launched a year ago against servers run by the OPM. That agency was found wanting in an audit of its network security in November 2014.

Whoever infiltrated the OPM data center, they exploited a zero-day vulnerability, the FBI claims. If the White House's top tips on cyber-security really are news to government IT admins, the hackers needn't have bothered burning such a precious tool. ®
The first step in a successful revolution is to defeat all competing revolutionaries.
User avatar
cgarison
Member
Member
Posts: 2032
Joined: Sat Dec 15, 2001 11:28 pm
Location: The Encampment

Re: White House orders gov't IT to straighten up.

Post by cgarison »

Well, there's your problem........

Navy re-ups with Microsoft for more Windows XP support
$9.1M contract extension includes support for Office and Exchange 2003 as well.

http://arstechnica.com/information-tech ... p-support/
The first step in a successful revolution is to defeat all competing revolutionaries.
User avatar
Dave Loudin
Member
Member
Posts: 600
Joined: Thu Dec 20, 2001 7:48 am
Location: King George, VA

Re: White House orders gov't IT to straighten up.

Post by Dave Loudin »

Note that it is shipboard systems as the worst offenders. A change in software or hardware in that context takes YEARS to get completely deployed.
Aircheck? You'd make a great board op.
Post Reply