MICROSOFT SECURITY FAILED BECAUSE OF HUMAN ERROR


Microsoft's corporate network was cracked. The bad guys
(to use police slang) got in, created couple dozen user
accounts on the network, and attempted to upgrade their
security access. Before Microsoft's network administrators
woke up to the intrusion, blueprints to one of Microsoft's
secret new products were snatched along with other
undisclosed files.

The network administrators dropped the ball on this one.

Reportedly, the admins thought the new accounts were set
up incorrectly by a new employee. It wasn't until security
access upgrades were attempted that any of the admins
thought to check the new accounts more closely. But it was
too late. The crackers had been in, had a look see,
downloaded a few (maybe thousands) files, and were gone
in the night.

That, according to sources familiar with the case, is when
Microsoft called in its computer security team.

Microsoft admits the crackers were in for at least 12 days,
maybe as long as five weeks.

Come on admins, you knew rogue accounts existed for
TWELVE DAYS and you didn't do anything!
That's inexcusable.

I'd offer retraining to an admin who didn't notice the new
accounts and then called in security as soon as they were
detected. But to let a known security problem fester for
two weeks before getting on it, is clear cause for dismissal.
And these admins names should be made public to protect
other employers from their stupidity.

I understand it's tough to detect cracks and even tougher
to plug the security hole and determine the extent of
damage. But knowing there's a problem and doing nothing
is unforgivable.

One last word, don't hire any network administrators
who've recently left Microsoft.

--
Eko Sulistiono
MIKRODATA & AntiVirus Media
Web: http://www.mikrodata.co.id/
WAP: http://www.mikrodata.co.id/wap/index.wml

This message contains no viruses. Guaranteed by AVP.


------------------------------------------------------------------------
Forum Komunikasi Penulis-Pembaca MIKRODATA (FKPPM)

Informasi : http:[EMAIL PROTECTED]
Arsip     : http://www.mail-archive.com/forum%40mikrodata.co.id/
WAP       : http://mikrodata.co.id/wap/index.wml

Milis ini menjadi kontribusi beberapa rubrik yang diasuh tim MIKRODATA.
Termasuk rubrik-rubrik yang ada di media lain.

Memakai, Menyebarluaskan, dan Memperbanyak software bajakan adalah 
tindakan kriminal.

Please check with the latest AVP update before you ask about virus:
ftp://mikrodata.co.id/avirus_&_security/AntiViral_Toolkit_Pro/avp30.zip

Kirim email ke