Security quotes of the week

Posted Mar 16, 2012 11:57 UTC (Fri) by jschrod (subscriber, #1646)
Parent article: Security quotes of the week

Even better, in Halderman et.al.'s paper:

The first SSH attack we observed came from an IP address located in Iran (80.191.180.102), belonging to Persian Gulf University. We realized that one of the default logins to the terminal server (user: admin, password: admin) would likely be guessed by the attacker in a short period of time, and therefore decided to protect the device from further compromise that might interfere with the voting system test. We used iptables to block the offending IP addresses and changed the admin password to something much more difficult to guess. We later blocked similar attacks from IP addresses in New Jersey, India, and China.

»This is our security test, US persons only. Stay away!«

DC Internet voting test

Posted Mar 17, 2012 19:44 UTC (Sat) by giraffedata (guest, #1954) [Link]

»This is our security test, US persons only. Stay away!«

I didn't see anything like that. 3 of the 4 hackers, who were plain old Internet password guessers, the researchers noticed were from other than the US, but they blocked every one they saw because they wanted to preserve as much of the test as possible. Note that the researchers themselves were careful not to disturb the system more than they had to.