Vulnerabilities / Threats
2/18/2011
01:54 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

ICE Confirms Inadvertent Web Site Seizures

Authorities are reviewing what happened to prevent a similar misstep in the future.

Top 10 Government Stories Of 2010
(click image for larger view)
Slideshow: Top 10 Government Stories Of 2010

A child pornography investigation led to the unintentional temporary shutdown of thousands of lawfully operating Web sites last week, U.S. Immigration and Customs Enforcement has confirmed.

"During the course of a joint DHS and DOJ law enforcement operation targeting 10 Web sites providing explicit child pornographic content, a higher level domain name and linked sites were inadvertently seized for a period of time," an ICE spokepserson said in an e-mailed statement. "Those sites were restored as soon as possible to normal functionality."

The execution of seizure warrants against the 10 Web sites was lauded by Secretary of Homeland Security Janet Napolitano and other officials earlier this week.

News of the collateral damage arising from the domain seizure was first reported by TorrentFreak, an online news site focused on copyright issues. The report claims that 84,000 Web subdomains associated with mooo.com -- a shared domain operated by afraid.org -- were rendered inaccessible.

A spokesperson for afraid.org's Free DNS service did not immediately respond to a request for comment.

Affected sites were down for about three days, during which time visitors would have seen a notice stating that the Department of Justice and Department of Homeland Security had seized the domain and that advertising, distribution, possession, transportation, and receipt of child pornography is a federal crime.

The government-directed denial of service prevented about 1000 people in their attempts to view child pornography through these non-affiliated sites, according to a source familiar with the investigation.

The agencies involved are reviewing the circumstances of the seizure operation in an effort to prevent similar incidents in the future.

The Electronic Frontier Foundation, while careful to acknowledge the legitimacy of removing child porn sites, has condemned the collateral damage to Web sites that were operating lawfully. The cyber rights organization urged legislators mulling expanded copyright enforcement powers not to enact rules likely to result in similar harm when applied with insufficient precision.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0972
Published: 2014-08-01
The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write ...

CVE-2014-2627
Published: 2014-08-01
Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.

CVE-2014-3009
Published: 2014-08-01
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct ph...

CVE-2014-3302
Published: 2014-08-01
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

CVE-2014-3534
Published: 2014-08-01
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a c...

Best of the Web
Dark Reading Radio