To: kathyh who wrote (52068 ) 7/1/1999 7:30:00 AM From: Jack Colton Respond to of 90042
From: Rob for the SANS NewsBites service Re: July 1 SANS NewsBites ************************************************************************ SANS NEWSBITES The SANS Weekly Security News Overview Volume 1, Number 14 July 1, 1999 Editorial Team: Kathy Bradford, Bill Murray, Alan Paller, Howard Schmidt, Eugene Schultz <sansro@sans.org> ************************************************************************* 29 June 1999 Sentence Handed Down in Hate Mail Case 28 June 1999 Army Website Defaced in Latest Round of Attacks 27 June 1999 Canadian "Hacktivists" 26 June 1999 FBI Proposes Spy Hunting Division 25 June 1999 U.K. Wants ISPs To Build In Interception 25 June 1999 Federal Computers Vulnerable 25 June 1999 Eavesdropping on Cellular Phone Conversations 25 June 1999 Net Fraud Crime Lab 25 June 1999 FTC's Two-Pronged Health Campaign 25 June 1999 DMV Info at Stake in Senate Legislation 25 June 1999 Hamming it Up for Internet Copyright 25 June 1999 Federal Site Pulls Privacy Seal 24 June 1999 Government Vulnerable To Hackers, Experts Warn 24 June 1999 ACLU Says Michigan Law Hinders Free Speech 24 June 1999 Canadian Government Employees Face Net Filtering 24 June 1999 A Busy Week for High-Tech Legislation 24 June 1999 Tech Exports Likely to be Loosened 24 June 1999 House Member Suggests Regular Network Security Reports 23 June 1999 Filtering Bill Approved in Senate Committee 23 June 1999 Digital Signature Bill Likely to Become Law 23 June 1999 Microsoft Privacy Plans 22 June 1999 UK Plans to Expand Communications Surveillance 22 June 1999 Pairgain Hoax Perpetrator Pleads Guilty - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Tidbit: SANS is seeking a BOF coordinator for the New Orleans NS99 conference in early October. Drop a line to kolstad@sans.org if you're interesting...RK - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 29 June 1999: Sentence Handed Down in Hate Mail Case A man who e-mailed death threats to Latinos all over the country will spend two years in federal prison. The defendant graduated from California State Polytechnic University in March while free on bail. wired.com 28 June 1999: Army Website Defaced in Latest Round of Attacks A group which calls itself Global Hell and has recently been the focus of FBI investigations into computer attacks defaced the Army's home page late Sunday night or early Monday morning. The site had been cleaned up by 6 a.m. Monday. Other sites were targeted, including NASA and some Navy sites. The group has threatened that they will be back.msnbc.com 27 June 1999: Canadian "Hacktivists" The Canadian Security Intelligence Service (CSIS), Canada's counterpart to the CIA, has declassified studies suggesting that many computer crackers attack because they have a political agenda, not just for fun.dailynews.yahoo.com 26 June 1999: FBI Proposes Spy Hunting Division After the Cold War, American intelligence agencies turned their attentions to terrorism and reduced their focus on espionage. In light of recent reports that suggest that espionage continues to be a problem, the FBI has proposed creating a special division devoted entirely to ferreting out spies. The Pentagon and the CIA are likely to reassess their systems as well.nytimes.com 25 June 1999: U.K. Wants ISPs To Build In Interception The British government has become the first in Europe to openly propose internationally agreed requirements for ISPs to build technology into networks that would allow for police surveillance. Under proposals for changes to the Interception of Communications Act announced by the Home Office this week, all communications service providers (CSPs) would be required to build interception software or hardware into their systems.techweb.com 25 June 1999: Federal Computers Vulnerable According to federal officials, federal websites and computer systems are particularly vulnerable to outside attacks because they lack two important elements: adherence to security plans and qualified personnel to maintain security measures.newspage.com 25 June 1999: Eavesdropping on Cellular Phone Conversations Someone in Canada is streaming intercepted cellular phone conversations over the Internet. Older cell phones do not use encryption and radio scanners can pick up conversations. The malicious eavesdropper, when caught, is likely to face jail time. AOL has removed the channel from its directory.wired.com 25 June 1999: Net Fraud Crime Lab Internet fraud is on the rise and the Federal Trade Commission (FTC) plans to develop a laboratory, which will continuously monitor ads on the Internet and will be able to capture material to use as evidence in fraud cases. computerworld.com 25 June 1999: FTC's Two-Pronged Health Campaign The Federal Trade Commission's (FTC) recently launched "Operation Cure All" not only cracks down on on-line quackery, but will also provide people with legitimate health care information via the Department of Health and Human Services' website (www.healthfinder.gov).nytimes.com 25 June 1999: DMV Info at Stake in Senate Legislation A transportation-funding bill in the Senate contains a provision that state motor vehicle agencies may not sell their drivers license databases. Direct marketing firms are lobbying hard against the bill, while the ACLU and privacy advocates are offering their support.wired.com 25 June 1999: Hamming it Up for Internet Copyright A virtual talking ham sandwich is the centerpiece of a copyright scuffle.zdnet.com 25 June 1999: Federal Site Pulls Privacy Seal Access America for Students, a government website, removed a Truste privacy seal from its site this week because it realized that the terms of its privacy policy did not meet the requirements of the Privacy Act of 1974.wired.com 24 June 1999: Government Vulnerable To Hackers, Experts Warn Government web sites and computer networks are increasingly vulnerable to "cyber attacks'' because they lack trained personnel and don't follow security plans, federal officials warned the House Science Committee's subcommittee on technology.mercurycenter.com 24 June 1999: ACLU Says Michigan Law Hinders Free Speech A newly minted Michigan law aimed at protecting children makes it a felony to transmit "sexually explicit matter" on-line to people under the age of 18. In addition to violating first amendment rights, the ACLU says that the Michigan law is in violation of a constitutional law "which prohibits states from regulating activity outside of their borders."news.com 24 June 1999: Canadian Government Employees Face Net Filtering Employees of Ontario's provincial government will have their access to the Internet at work limited by filters which prevent them from looking at sites deemed obscene, violent, and those focused on drugs and hate propaganda. Law enforcement officials would have broader access. Canada already has a national Internet policy for its government employees and those found in violation face punishment.wired.com 24 June 1999: A Busy Week for High-Tech Legislation Washington legislators last week passed a flurry of cyber-legislation. The Senate passes a digital signature bill, and bills to ease encryption exports passed in both the House and the Senate.computerworld.com 24 June 1999: Tech Exports Likely to be Loosened A former Assistant Secretary of State has urged Congress to loosen technology export restrictions. Richard Perle said restrictions on computer exports do nothing to stop espionage, alluding to the recent situation at Los Alamos National Laboratory. wired.com 24 June 1999: House Member Suggests Regular Network Security Reports Rep. Connie Morella (R-Md.) said that in her revision of the Computer Security Act of 1987 she plans to include a requirement for agencies to report to Congress regularly the steps they are taking to secure their sites and systems. fcw.com 23 June 1999: Filtering Bill Approved in Senate Committee The Senate Commerce Committee has approved a bill requiring schools and libraries that receive federal subsidies for Internet connections to use filtering software in order to protect children from obscene and pornographic material. The ACLU and other free speech advocacy groups are say that teachers and parents, not a computer program, should monitor what children see on the Internet.news.com 23 June 1999: Digital Signature Bill Likely to Become Law The Senate Commerce Committee last week approved legislation, which would make digital signatures legal nationwide, and legislators are confident that the bill will meet with administrative approval. Federal agencies are already required to use digital signatures.news.com 23 June 1999: Microsoft Privacy Plans Microsoft has stepped up to the plate in the Internet privacy game announcing plans to advertise only on sites which post clear privacy policies and offering a "Passport" which will allow users to carry their privacy preferences from site to site.news.com 22 June 1999: UK Plans to Expand Communications Surveillance The UK government intends to extend its legal communication surveillance to include cellular phones and private networks. Suspected criminals would be required to relinquish encryption keys for captured data, and their refusal to cooperate could be interpreted as guilt.techweb.com 22 June 1999: Pairgain Hoax Perpetrator Pleads Guilty Gary Hoke has pleaded guilty to securities fraud and could face up to 10 years in prison and $5 million in fines, though his sentence is likely to be lighter. Hoke posted phony information about Pairgain on the Internet, which drove up the value of the company's stock.nytimes.com == End == Please feel free to share this with interested parties. For a free subscription, e-mail <sans@sans.org> with the subject: Subscribe NewsBites Email <sans@sans.org> with instructions and your SD number (from the headers) for subscribe, unsubscribe, change address, or with any other comments.