Security Concerns in Wiretapping Tech
Through a FOIA request, details of the FBI's wiretapping program have been released. The system, "called DCSNet," can tap "traditional land-line operators, internet-telephony providers and cellular companies," and the details in the article indicate this system is pretty awesomely powerful.
Of additional concern, though, are the security flaws:
...documents show that an internal 2003 audit uncovered numerous security vulnerabilities in DCSNet -- many of which mirror problems unearthed in the bureau's Carnivore application years earlier.
In particular, the DCS-3000 machines lacked adequate logging, had insufficient password management, were missing antivirus software, allowed unlimited numbers of incorrect passwords without locking the machine, and used shared logins rather than individual accounts.
The system also required that DCS-3000's user accounts have administrative privileges in Windows, which would allow a hacker who got into the machine to gain complete control.
Poorly-security software and hardware is pretty much on par for the government.
But, for a system of this magnitude, this all seems especially egregious. Knowing the government's poor record on security as well as the vendor's apparent lack of concern on these issues, there's little reason to believe the current system is properly configured and secured.




