Attacks/Breaches

12/14/2017
12:15 AM
50%
50%

2 Million Fake Net Neutrality Comments Stole American Identities

New York Attorney General Eric Schneiderman updates the investigation into fake content submitted during the net neutrality comment process.

The office of New York Attorney General Eric Schneiderman today released new details on the investigation into fraudulent content submitted during the net neutrality comment process. Updated analysis shows two million comments stole real Americans' identity. 

Those two million comments included more than 100,000 comments per state from New York, Florida, Texas, and California, which are the most heavily affected states. More than 5,000 people to date have filed reports on identities used to submit fake comments regarding the Federal Communications Commission's repeal of net neutrality. 

The FCC is scheduled to vote on the repeal today, December 14, and plans to move forward with the vote despite evidence the public comment process was compromised, the AG's office reports. AG Schneiderman says moving forward with the vote "would make a mockery of our public comment process" and the FCC "must postpone this vote."

Read more details here and check here to see if your identity was misused.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/18/2017 | 7:09:16 PM
Addresses of commenters
WTH?

I'm really concerned how much of these comments are a matter of public record. People's names and addresses are often enough to commit identity theft.

Of course, the same goes for most voting records.

It's a shame, really.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
12/15/2017 | 3:41:25 PM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
As a past resident of NY State, I have many reasons to hate ALBANY and all that goes on there.  BUT ONE WORD OF GREAT ADVICE ----- IF you have or had relatives in the state, checked UNCLAIMED FUNDS ---- We came away with a substantial chunk of unknown change in the XX,XXX.xx number range. 
gruntsters
50%
50%
gruntsters,
User Rank: Apprentice
12/15/2017 | 11:35:21 AM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
I agree. Which way did the 2 million accounts lean? Why hasn't the NY AG listed this information?
SchemaCzar
50%
50%
SchemaCzar,
User Rank: Strategist
12/15/2017 | 9:17:28 AM
Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
Schneiderman's office did a valuable service.  Now this is definitely one of the more useless ways of gauging public opinion - no real authenticated identity to canvass citizens?  

However, the question I have is what is the ratio pro/con of fake comments?  If we see one side or the other exerting money and effort to swing the decision, it may lead us to hidden consequences of rescinding or preserving net neutrality that would give us further information in this important debate.

It's sort of disappointing that Schneiderman did not reveal this ratio.
'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12716
PUBLISHED: 2018-06-25
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its l...
CVE-2018-12705
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
CVE-2018-12706
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
CVE-2018-12714
PUBLISHED: 2018-06-24
An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial o...
CVE-2018-12713
PUBLISHED: 2018-06-24
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was ...