To view parent comment, click here.
To read all comments associated with this story, please click here.
Chances are pretty high that there are FBI agents out there ignoring security protocol and chances are pretty high some become victim of an non-patched system.
But I estimate chances rather low of having (1 FBI laptop, (2 non-patched system, (3 getting hacked, (4 a file containing 12 million UDIDs, (5 finding it, (6 downloading it.
Then again stranger things have happened, so I don't rule it out.
There is a huge half-patched Java exploit running around:
http://www.forbes.com/sites/andygreenberg/2012/09/04/beware-fake-mi...
and the FBI agent who has been hacked is not a nobody, he appeared in a FBI video ad calling for hackers to join the Bureau:
http://www.forbes.com/sites/parmyolson/2012/09/04/fbi-agents-laptop...
That reduces the "improbability" of point 1), 2) and 3) of your analysis. As for 4), 5) and 6), if this agent had this data on his personal computer, it should have been all too easy.





Member since:
2005-06-29
The way I understand it, FBI agents in the field are required to use a DoD-provided Linux-based liveCD whenever they connect to the public Internet. It allows for a secure VPN tunnel back to government datacenters. Even my lowly terminal at work goes through two separate encrypted VPNs and it's just a county law enforcement terminal.
As to whether they actually do it in practice, who knows? Some of my coworkers completely ignore their Security and Integrity training and use their mobile data terminals to look up license plate info on cute women. Those sorts of shenanigans go all the way to the top of the ladder too.