{"id":51544,"date":"2015-06-21T13:32:04","date_gmt":"2015-06-21T19:32:04","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/2015\/06\/21\/why-hacking-is-often-so-easy.html"},"modified":"2015-06-22T15:07:01","modified_gmt":"2015-06-22T21:07:01","slug":"why-hacking-is-often-so-easy","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2015\/06\/21\/why-hacking-is-often-so-easy.html","title":{"rendered":"Why hacking is often so easy"},"content":{"rendered":"<p>The biggest problem with security is not the genius hacker, or the obscure exploit. It&#39;s people doing stupid thing &#8212; too often with encouragement of policy and procedures that allow (or even encourage) stupid things.<\/p>\n<p>(And, I&#39;ll note, this is one of the consequences of &quot;Hey, let&#39;s outsource as much of the federal government&#39;s work as possible, because public employees are bad and expensive and outsourcing and privatizing saves money! Woot!&quot;)<\/p>\n<p>(h\/t <span class=\"proflinkWrapper\"><span class=\"proflinkPrefix\">+<\/span><a class=\"proflink\" href=\"https:\/\/plus.google.com\/103389452828130864950\" oid=\"103389452828130864950\">Yonatan Zunger<\/a><\/span>)<\/p><\/blockquote>\n<blockquote class=\"sm2wp\"><p>\n<a style='display:inline;' href='http:\/\/www.businessinsider.com\/the-us-agency-plundered-by-chinese-hackers-made-one-of-the-dumbest-security-moves-possible-2015-6'><br \/>\n<img src='https:\/\/lh6.googleusercontent.com\/proxy\/7xG6yDqCYCdMbXF5_v-XRiE0pRhRmcyVJmHvQqGSJpeJki8JDb7vjGCHEsCoR_H9t4zGcxK0Xwngb1UqoHGQG9ieQqROiku-oe8nrkCCt0uHG4fWUmfoh-t5DrorJFJyrAzRGQ8kWe9gO3M_kjMK0P5BLuQRx5-tEoDCqBy-ENCrQRzB5XQfXvjljjfLPCNzAMKoVSdoN3Fr5luvnQzDoqKvyxIIOFnT0_iYHr29kPQi=w506-h303' border='0' style='max-width:650px;'\/><br \/>\n<\/a><br \/>\n<span style='font-size:large;'><a href='http:\/\/www.businessinsider.com\/the-us-agency-plundered-by-chinese-hackers-made-one-of-the-dumbest-security-moves-possible-2015-6'>The US agency plundered by Chinese hackers made one of the dumbest security moves possible<\/a><\/span><br \/>\nContractors in Argentina and China were given&#8230;\n<\/p><\/blockquote>\n<p><span style='font-size:small;'><a href='https:\/\/plus.google.com\/+DaveHill47\/posts\/SyUkxsNNSNj'>View on Google+<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The biggest problem with security is not the genius hacker, or the obscure exploit. It&#39;s people doing stupid thing &#8212; too often with encouragement of policy and procedures that allow (or even encourage) stupid things. (And, I&#39;ll note, this is one of the consequences of &quot;Hey, let&#39;s outsource as much of the federal government&#39;s work &hellip; <a href=\"https:\/\/hill-kleerup.org\/blog\/2015\/06\/21\/why-hacking-is-often-so-easy.html\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Why hacking is often so easy&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[106,375,376],"tags":[],"class_list":["post-51544","post","type-post","status-publish","format-standard","hentry","category-plusposts","category-computer-security","category-taxing-spending"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":31533,"url":"https:\/\/hill-kleerup.org\/blog\/2012\/11\/28\/stupid-security-tricks.html","url_meta":{"origin":51544,"position":0},"title":"Stupid Security Tricks","author":"***Dave","date":"Wed 28-Nov-12 1:37pm","format":false,"excerpt":"\u201cWe are talking about a computer that should not have left the building in the first place. The data would have been secure had the employee followed policy.\u201dSo NASA's\u00a0excuse for a major personnel data breach is that an employee didn't follow the policy properly? \u00a0Well, gosh, that sounds perfectly reasonable,\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":503,"url":"https:\/\/hill-kleerup.org\/blog\/2003\/04\/07\/guarded_pessimi.html","url_meta":{"origin":51544,"position":1},"title":"Guarded pessimism","author":"***Dave","date":"Mon 7-Apr-03 9:55am","format":false,"excerpt":"Here's are the entertaining results of Privacy International's The Stupid Security Competition They are broken down into short lists of Most Inexplicable, Most Intrusive, Most Counter-Productive, Most Annoying and Most...","rel":"","context":"In &quot;Homeland Security&quot;","block_context":{"text":"Homeland Security","link":"https:\/\/hill-kleerup.org\/blog\/category\/politics-law\/homeland-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":30300,"url":"https:\/\/hill-kleerup.org\/blog\/2012\/09\/22\/yes-people-try-to-bring-stupid-things-onto-the-plane-with-them.html","url_meta":{"origin":51544,"position":2},"title":"Yes, people try to bring stupid things onto the plane with them","author":"***Dave","date":"Sat 22-Sep-12 12:34pm","format":false,"excerpt":"The TSA regularly posts about all the zany (i.e., quite illegal) things that people try to bring on planes with them. Which, yes, perhaps demonstrates that some sort of inspection \/ security regime is needed, but which misses the point of most folks' complaints about airport security:1. What was the\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":38070,"url":"https:\/\/hill-kleerup.org\/blog\/2013\/07\/01\/make-a-stupid-comment-go-to-jail.html","url_meta":{"origin":51544,"position":3},"title":"Make a stupid comment, go to jail","author":"***Dave","date":"Mon 1-Jul-13 3:47pm","format":false,"excerpt":"Stupid? Absolutely? Deserving of some sort of official attention to make sure it's not a warning sign? \u00a0Sure. Charge an 18-yo with a third-degree felony of \"terroristic threats\" and throw him in jail for months while awaiting trial, all because of a sarcastic (if tasteless and unwise) comment? \u00a0Crikey.Your Zero\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3737,"url":"https:\/\/hill-kleerup.org\/blog\/2003\/04\/04\/sinister_police.html","url_meta":{"origin":51544,"position":4},"title":"Sinister police state tactics?","author":"***Dave","date":"Fri 4-Apr-03 8:05am","format":false,"excerpt":"Or a stupid April Fools prank? You decide. Police in Sturgis, MI, discovered a number of letters put up on \"various businesses, schools, banks and at the post office.\" At...","rel":"","context":"In &quot;Homeland Security&quot;","block_context":{"text":"Homeland Security","link":"https:\/\/hill-kleerup.org\/blog\/category\/politics-law\/homeland-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":740,"url":"https:\/\/hill-kleerup.org\/blog\/2001\/11\/17\/if_theres_a_sec.html","url_meta":{"origin":51544,"position":5},"title":"If there&#8217;s a security risk &#8212; then check it for God&#8217;s sake","author":"***Dave","date":"Sat 17-Nov-01 3:02pm","format":false,"excerpt":"First we have some brainless yahoo dodging past security guards who did nothing to stop him. Then we get a neuroscientist kicked off a plane, no questions asked, no security...","rel":"","context":"In &quot;Homeland Security&quot;","block_context":{"text":"Homeland Security","link":"https:\/\/hill-kleerup.org\/blog\/category\/politics-law\/homeland-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/51544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=51544"}],"version-history":[{"count":1,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/51544\/revisions"}],"predecessor-version":[{"id":51568,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/51544\/revisions\/51568"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=51544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=51544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=51544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}