Homeland Security Phones Hacked
Hacker Racks Up $12,000 In Calls To Middle East, Asia
-
Photo
(AP)
-
Interactive
America On Guard
The Homeland Security Department, the terror alert system, preparedness quiz and more.
-
Blog
Technology Blog
Blog postings on the latest technology news, tips and tidbits.
The hacker made more than 400 calls on a Federal Emergency Management Agency voicemail system in Emmitsburg, Md., on Saturday and Sunday, according to FEMA spokesman Tom Olshanski.
FEMA is part of Homeland Security, which in 2003 put out a warning about this very vulnerability.
The voicemail system is new and recently was installed. It is a Private Branch Exchange, or PBX, a traditional corporate phone network that is used in thousands of companies and government offices. Many companies are moving to a higher tech version, known as Voice Over Internet Telephony.
This type of hacking is very low-tech and "old school," said John Jackson, a St. Louis-based security consultant. It was popular 10 to 15 years ago. Telecommunications security administrators now know to configure security settings, such as having individual users create unique passwords and not continue to use the password assigned to users in the initial setup.
"In this case it's sort of embarrassing that it happened to FEMA themselves - FEMA being a child of DHS, with calls going to the Middle East," Johnson said.
Afghanistan, Saudi Arabia, India and Yemen are among the countries calls were made to, Olshanski said. Most of the calls were about three minutes long, but some were as long as 10 minutes.
Sprint caught the fraud over the weekend and halted all outgoing long-distance calls from FEMA's National Emergency Training Center in Emmitsburg.
FEMA's chief information officer is investigating who hacked into the system and where exactly the calls were placed to. At this point it appears a "hole" was left open by the contractor when the voicemail system was being upgraded, Olshanski said. Olshanski did not know who the contractor was or what hole specifically was left open, but he assured the hole has since been closed.
In 2003, Homeland Security and the FBI investigated multiple reports about private industry being breached by these types of hackers.
"This illegal activity enables unauthorized individuals anywhere in the world to communicate via compromised U.S. phone systems in a way that is difficult to trace," according to a department information bulletin from June 3, 2003.
© MMVIII The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed.



The TRUTH is, Homeland Security is Bush''s Baby. It''s HIS responsibility. And it is a total and completely MISERABLE FAILURE, just like Baby Doc Bush, himself!
This was the first kind of hacker - the phone freak. They didn''t even need a computer (and their best tool came from a cereal box!).
The TRUTH is, Homeland Security is Bush''''s Baby. It''''s HIS responsibility. And it is a total and completely MISERABLE FAILURE, just like Baby Doc Bush, himself!
Posted by IDNNSG at 10:36 PM : Aug 20, 2008"
THE REAL TRUTH:
The United States House Committee on Homeland Security, is a standing committee of the United States House of Representatives, responsible for reviewing all Government activities related to homeland security, including oversight of (and agency interaction with) the Department of Homeland Security. Its counterpart is the Senate Committee on Homeland Security and Government Affairs.
You want to point the finger, point it at Nancy Pelosi and Harry Reid.
---
This kind of security breach is a demonstration-- the most in-your-face kind of episode, clearly demonstrating how utterly incompetent security administration has been at Department of Homeland Security.
Over the past eight years, DHS has gotten dismal marks on a computer-security audit of federal agencies. DHS was one of the worst-performing agencies of all surveyed in the audit, mandated by the Federal Infomriaton Security Management Act of 2002. Only in 2007 did DHS seem to break the trend-- and now this.
The whole federal computer security apparatus is widely known to be a cosmic joke on American unpreparedness. A "What, Me Worry?" attitude best typified by Bush, himself, the noted incompetent and criminal ostensibly in charge of the whole mess.
Joining DHS in the back of the class over most of the past years of the audit are Defense, NASA, Commerce, State, Transportation, and Labor.
Missing, altogether, from the class are Interior, Treasury, Nuclear Regulatory Commission (!), Veterans Affairs and Department of Agriculture.
See the audit in PDF format at--
http://republicans.oversight.house.gov/media/PDFs/Reports/FY2007FISMAReportCard.pdf
So, to "get even" with Congress and the courts, they designed it to fail -- just like the Rethuglicans in Congress set Medicare and Medicaid up for failure back in the 1960s, when they were forced to accept a government-sponsored/administered healthcare arrangement.
It''s easy to game a system when there as many holes in it as a piece of swiss cheese, like DHS (and Medicare & Medicaid) is(are). So, there''s plenty of money in the budget for lavish office parties, but none for increased Customs and Border Patrol agents. Or more cargo inspectors at our ports of entry.
There''s money -- but just enuf -- to hire rent-a-cops like Wackeyhut to guard our NUCLEAR power facilities (even if they do spend most of the time sleeping on the job), but don''t expect too much effort out of the biggest beauracracy in the government.
It''s too busy planning for the department-wide Christmas party.
Heck of a job, Sec''y Chertoff
The United States House Committee on Homeland Security, is a standing committee of the United States House of Representatives, responsible for reviewing all Government activities related to homeland security, including oversight of (and agency interaction with) the Department of Homeland Security. Its counterpart is the Senate Committee on Homeland Security and Government Affairs.
You want to point the finger, point it at Nancy Pelosi and Harry Reid.
Posted by DemWatcher at 12:34 AM : Aug 21, 2008
______________________
WRONG!
FEMA warned in 2003 that this was a possibility. Sorry to remind you the GOP was in TOTAL CONTROLL at that time.
It would be better to install the most up to date than try to continually update the worn out.
Why install 1960s or 1970s technology in 2003? GOP got a good cut-rate on the purchase and probably a big kick-back ...ummm I mean political dontation to the RNC (must be politically correct here)... with the purchase.
Pathetic!!!!!!
Why not? Our military records were stolen from a LAP TOP !
--------------------------------------------
Just who do you think invented this garbage? Wliiy Wonka?
--------------------------------------------------------------------------------
Posted by hologram5 at 09:36 AM : Aug 21, 2008
~~~~~~~~~~~~~~~~~~~~~~~~~
Maybe homeland security should hire the hackers...They seem a lot smarter than the current employees....
I had a gut-feeling this would happen...
Ben Franklin
-
by kansas1946
August 21, 2008 7:50 PM PDT
- (AP) A hacker broke into a Homeland Security Department telephone system over the weekend and racked up about $12,000 in calls to the Middle East and Asia.
-
Reply to this comment
-
See all 26 Comments****************************
LOL. Probably Bin Laden and his buddies chatting about their love life. I guess Homeland "security..choke" is so busy trying to listen in on our phone calls they forgot to watch their own. he..he..gott love it.