CyberArmy University | Open Source Institute | CyberArmy Intelligence & Security

Urgent: Security Breach


[Replies] [Reply] [View by Thread] [Help]
[Back To CyberArmy Public Forum]

Posted by CinC snarkles On 2004-02-23 02:20:05

CinC
CinC snarkles


We regret to announce the theft of data from CA's database recently, and a probable breach of all members' privacy.

At approximately 11:00 GMT on the 18th of this month, logs record that Vice-CinC Wang copied and downloaded all cMSes stored in CA's database. We are unable to ascertain yet whether any other data was taken, but it is quite possible that other user information, including profile data and passwords, could have been compromised as well.

This activity is extremely suspicious, especially as it is one of his last actions before announcing RR's "split". Wang has been given over 29 hours now to comment, and while responding to other messages sent to him, has opted not to explain this behaviour.

For these reasons, we are advising that all members change their CA password as soon as conveniently possible, along with any passwords or authentication information for other resources that were exchanged over cMS (for example, brigade/sattelite site login information). We cannot guarantee the security of any data in the database at that time.

This can only remain to be seen as a total abuse of the trust granted to him by members of CA, and a reckless disregard for the protection of members' privacy - a policy that he, as RR's leader, claimed only recently was fundamental to his organization's mission.

Upon discovering this had happened, Wang's privileged access was revoked pending investigation. Since no explanation has been received, after further examination and discussion, and for the reasons contained within this announcement only, we have decided the only appropriate course of action is to demote Wang to Kernel and to impose a site ban for 1 year. We cannot ignore such gross misconduct.

We will be looking into possibilities to secure members' data further, but please understand that many safeguards are already in place; it is only due to his rank and position as a site maintainer that Wang had this access available. We deeply regret this situation, and apologise for the inconvenience this will inevitably cause.


Replies:


Guest:
Subject:
Message:
Signature:
Optional Image/Video Link:
http://

CyberArmy::Forum v0.6
Generated In 0.05004 seconds


About Us | Privacy Policy | Mission Statement | Help