*Social Engineering* Posted By *Richard Fernandez* On June 17, 2015
Ars Technica <http://arstechnica.com/security/2015/06/encryption-would-not-have-helped-at-opm-says-dhs-official/> [1], describing how China “hacked” the OPM database, obtaining the records of millions of Federal Employees, notes that we should we should use the word “hack” advisedly. The attackers “had valid user credentials and run of network” which they obtained through “social engineering”. Department of Homeland Security Assistant Secretary for Cybersecurity Dr. Andy Ozment testified that encryption would “not have helped in this case” because the attackers had gained valid user credentials to the systems that they attacked—likely through social engineering. And because of the lack of multifactor authentication on these systems, the attackers would have been able to use those credentials at will to access systems from within and potentially even from outside the network. “Social engineering” for those that don’t know, is an IT security term for “someone gave them the password”. It’s not hard to see how the Chinese might have wheedled out a credential. Some of the contractors that have helped OPM with managing internal data have had security issues of their own—including potentially giving foreign governments direct access to data long before the recent reported breaches. A consultant who did some work with a company contracted by OPM to manage personnel records for a number of agencies told Ars that he found the Unix systems administrator for the project “was in Argentina and his co-worker was physically located in the [People's Republic of China]. Both had direct access to every row of data in every database: they were root. Another team that worked with these databases had at its head two team members with PRC passports. I know that because I challenged them personally and revoked their privileges. From my perspective, OPM compromised this information more than three years ago and my take on the current breach is ‘so what’s new?’” Katherine Achuleta, the director of OPM claims that at least she found the “hack” — note the use of scare quotes used to preserve the reputation of real, honest hacking. ”Archuleta told the committee that the breach was found only because she had been pushing forward with an aggressive plan to update OPM’s security, centralizing the oversight of IT security under the chief information officer and implementing ‘numerous tools and capabilities.’ She claimed that it was during the process of updating tools that the breach was discovered.” Admiral Kimmel should have used that line at Pearl Harbor. “I noticed the base was bombed and informed Washington immediately.” Katherine Achuleta, the person in charge of the Crown Jewels has had an interesting career path to her current position. Her biography at opm.gov <https://www.opm.gov/about-us/our-people-organization/senior-staff-bios/katherine-archuleta/> [2] reveals a person proud of her membership in an “inclusive workforce that reflects the diversity of America”. Nowhere, however does her biography indicate that she knows diddly squat about computers, computer networks or security. On May 23, 2013, President Obama appointed Director Archuleta to lead the U.S. Office of Personnel Management (OPM), the agency responsible for attracting and retaining an innovative, diverse and talented workforce to make the Federal government a model employer for the 21st century. On November 4th, Archuleta was sworn in to begin her tenure as the 10th Director of OPM, and the first Latina to head this federal agency. Director Archuleta began her career in public service as a teacher in the Denver public school system. She left teaching to work as an aide to Denver Mayor Federico Peña. When Mayor Peña became Secretary of Transportation during the Clinton Administration, Archuleta continued her public service as his Chief of Staff. Later, Peña was appointed to head the Department of Energy and Archuleta served as a Senior Policy Advisor in the Office of the Secretary. After the Clinton Administration, she went back to local government and became a Senior Policy Advisor to Denver Mayor John Hickenlooper. Archuleta spent the first two years of the Obama Administration serving as the Chief of Staff at the Department of Labor to Secretary Hilda Solis. As the Director of OPM, Archuleta is committed to building an innovative and inclusive workforce that reflects the diversity of America. As a long-time public servant, she is a champion of Federal employees. But OPM is right though. Encryption wouldn’t have helped. The problem was somewhere else. Modern Western society has its own definition of “social engineering”. It apparently means putting people in charge of things not because they know anything about it, but because they possess the highest symbolic value. Race, gender, inclination or identification — especially political identification — are so much more important these days then being able to tell a difference between a hashed key and corned beef hash. We’re in a race to the bottom. And this time, we’ll win. ------------------------------ Did you know that you can purchase some of these books and pamphlets by Richard Fernandez and share them with you friends? They will receive a link in their email and it will automatically give them access to a Kindle reader on their smartphone, computer or even as a web-readable document. *The War of the Words for $3.99* <http://www.amazon.com/exec/obidos/ASIN/B00DTRHXLA/wwwfallbackbe-20> [13], Understanding the crisis of the early 21st century in terms of information corruption in the financial, security and political spheres *Rebranding Christianity for $3.99* <http://www.amazon.com/exec/obidos/ASIN/B00DJUAPDK/wwwfallbackbe-20> [14], or why the truth shall make you free *The Three Conjectures at Amazon Kindle for $1.99* <http://www.amazon.com/exec/obidos/ASIN/B006SOCAO6/wwwfallbackbe-20> [15], reflections on terrorism and the nuclear age *Storming the Castle at Amazon Kindle for $3.99* <http://www.amazon.com/exec/obidos/ASIN/B005MH19XI/wwwfallbackbe-20> [16], why government should get small *No Way In at Amazon Kindle $8.95, print $9.99* <http://www.amazon.com/exec/obidos/ASIN/1453892818/wwwfallbackbe-20> [17]. Fiction. A flight into peril, flashbacks to underground action. *Storm Over the South China Sea $0.99* <http://www.amazon.com/exec/obidos/ASIN/B00DUQVS98/wwwfallbackbe-20> [18], how China is restarting history in the Pacific *Tip Jar or Subscribe or Unsubscribe to the Belmont Club* <http://wretchard.com/tipjar.html>[19] ------------------------------ Article printed from Belmont Club: *http://pjmedia.com/richardfernandez <http://pjmedia.com/richardfernandez>* URL to article: *http://pjmedia.com/richardfernandez/2015/06/17/social-engineering/ <http://pjmedia.com/richardfernandez/2015/06/17/social-engineering/>* URLs in this post: [1] Ars Technica: *http://arstechnica.com/security/2015/06/encryption-would-not-have-helped-at-opm-says-dhs-official/ <http://arstechnica.com/security/2015/06/encryption-would-not-have-helped-at-opm-says-dhs-official/>* [2] biography at opm.gov: *https://www.opm.gov/about-us/our-people-organization/senior-staff-bios/katherine-archuleta/ <https://www.opm.gov/about-us/our-people-organization/senior-staff-bios/katherine-archuleta/>* [3] Cassandra Data Modeling and Analysis Paperback: *http://www.amazon.com/exec/obidos/ASIN/1783988886/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/1783988886/wwwfallbackbe-20>* [4] Conversations with a Rattlesnake: *http://www.amazon.com/exec/obidos/ASIN/177141071X/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/177141071X/wwwfallbackbe-20>* [5] Downfall: *http://www.amazon.com/exec/obidos/ASIN/067941424X/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/067941424X/wwwfallbackbe-20>* [6] Early Cold War Spies: *http://www.amazon.com/exec/obidos/ASIN/0521674077/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/0521674077/wwwfallbackbe-20>* [7] Making Mavericks: *http://www.amazon.com/exec/obidos/ASIN/1620878755/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/1620878755/wwwfallbackbe-20>* [8] Chemex 3-Cup Coffeemaker with Glass Handle: *http://www.amazon.com/exec/obidos/ASIN/B000LQI3RU/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B000LQI3RU/wwwfallbackbe-20>* [9] Retribution: *http://www.amazon.com/exec/obidos/ASIN/0307275361/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/0307275361/wwwfallbackbe-20>* [10] Building Cloud Apps with Microsoft Azure: *http://www.amazon.com/exec/obidos/ASIN/B002LGYIHW/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B002LGYIHW/wwwfallbackbe-20>* [11] War Plan Orange: *http://www.amazon.com/exec/obidos/ASIN/1591145007/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/1591145007/wwwfallbackbe-20>* [12] Bankrupting the Enemy: *http://www.amazon.com/exec/obidos/ASIN/1591145201/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/1591145201/wwwfallbackbe-20>* [13] *The War of the Words for $3.99*: *http://www.amazon.com/exec/obidos/ASIN/B00DTRHXLA/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B00DTRHXLA/wwwfallbackbe-20>* [14] *Rebranding Christianity for $3.99*: *http://www.amazon.com/exec/obidos/ASIN/B00DJUAPDK/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B00DJUAPDK/wwwfallbackbe-20>* [15] *The Three Conjectures at Amazon Kindle for $1.99*: *http://www.amazon.com/exec/obidos/ASIN/B006SOCAO6/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B006SOCAO6/wwwfallbackbe-20>* [16] *Storming the Castle at Amazon Kindle for $3.99*: *http://www.amazon.com/exec/obidos/ASIN/B005MH19XI/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B005MH19XI/wwwfallbackbe-20>* [17] *No Way In at Amazon Kindle $8.95, print $9.99*: *http://www.amazon.com/exec/obidos/ASIN/1453892818/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/1453892818/wwwfallbackbe-20>* [18] *Storm Over the South China Sea $0.99*: *http://www.amazon.com/exec/obidos/ASIN/B00DUQVS98/wwwfallbackbe-20 <http://www.amazon.com/exec/obidos/ASIN/B00DUQVS98/wwwfallbackbe-20>* [19] *Tip Jar or Subscribe or Unsubscribe to the Belmont Club* : *http://wretchard.com/tipjar.html <http://wretchard.com/tipjar.html>* __._,_.___ ------------------------------ Posted by: "Beowulf" <[email protected]> ------------------------------ Visit Your Group <https://groups.yahoo.com/neo/groups/grendelreport/info;_ylc=X3oDMTJmZmxkZXFiBF9TAzk3MzU5NzE0BGdycElkAzIwMTk0ODA2BGdycHNwSWQDMTcwNTMyMzY2NwRzZWMDdnRsBHNsawN2Z2hwBHN0aW1lAzE0MzQ2MzQ3Nzc-> - New Members <https://groups.yahoo.com/neo/groups/grendelreport/members/all;_ylc=X3oDMTJnbHFtYmRpBF9TAzk3MzU5NzE0BGdycElkAzIwMTk0ODA2BGdycHNwSWQDMTcwNTMyMzY2NwRzZWMDdnRsBHNsawN2bWJycwRzdGltZQMxNDM0NjM0Nzc3> 1 [image: Yahoo! Groups] <https://groups.yahoo.com/neo;_ylc=X3oDMTJldjVzcWE3BF9TAzk3NDc2NTkwBGdycElkAzIwMTk0ODA2BGdycHNwSWQDMTcwNTMyMzY2NwRzZWMDZnRyBHNsawNnZnAEc3RpbWUDMTQzNDYzNDc3Nw--> • Privacy <https://info.yahoo.com/privacy/us/yahoo/groups/details.html> • Unsubscribe <[email protected]?subject=Unsubscribe> • Terms of Use <https://info.yahoo.com/legal/us/yahoo/utos/terms/> __,_._,___ -- -- Thanks for being part of "PoliticalForum" at Google Groups. For options & help see http://groups.google.com/group/PoliticalForum * Visit our other community at http://www.PoliticalForum.com/ * It's active and moderated. Register and vote in our polls. * Read the latest breaking news, and more. --- You received this message because you are subscribed to the Google Groups "PoliticalForum" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
