Attacks/Breaches

12/14/2017
12:15 AM
50%
50%

2 Million Fake Net Neutrality Comments Stole American Identities

New York Attorney General Eric Schneiderman updates the investigation into fake content submitted during the net neutrality comment process.

The office of New York Attorney General Eric Schneiderman today released new details on the investigation into fraudulent content submitted during the net neutrality comment process. Updated analysis shows two million comments stole real Americans' identity. 

Those two million comments included more than 100,000 comments per state from New York, Florida, Texas, and California, which are the most heavily affected states. More than 5,000 people to date have filed reports on identities used to submit fake comments regarding the Federal Communications Commission's repeal of net neutrality. 

The FCC is scheduled to vote on the repeal today, December 14, and plans to move forward with the vote despite evidence the public comment process was compromised, the AG's office reports. AG Schneiderman says moving forward with the vote "would make a mockery of our public comment process" and the FCC "must postpone this vote."

Read more details here and check here to see if your identity was misused.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/18/2017 | 7:09:16 PM
Addresses of commenters
WTH?

I'm really concerned how much of these comments are a matter of public record. People's names and addresses are often enough to commit identity theft.

Of course, the same goes for most voting records.

It's a shame, really.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
12/15/2017 | 3:41:25 PM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
As a past resident of NY State, I have many reasons to hate ALBANY and all that goes on there.  BUT ONE WORD OF GREAT ADVICE ----- IF you have or had relatives in the state, checked UNCLAIMED FUNDS ---- We came away with a substantial chunk of unknown change in the XX,XXX.xx number range. 
gruntsters
50%
50%
gruntsters,
User Rank: Strategist
12/15/2017 | 11:35:21 AM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
I agree. Which way did the 2 million accounts lean? Why hasn't the NY AG listed this information?
SchemaCzar
50%
50%
SchemaCzar,
User Rank: Strategist
12/15/2017 | 9:17:28 AM
Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
Schneiderman's office did a valuable service.  Now this is definitely one of the more useless ways of gauging public opinion - no real authenticated identity to canvass citizens?  

However, the question I have is what is the ratio pro/con of fake comments?  If we see one side or the other exerting money and effort to swing the decision, it may lead us to hidden consequences of rescinding or preserving net neutrality that would give us further information in this important debate.

It's sort of disappointing that Schneiderman did not reveal this ratio.
12 Free, Ready-to-Use Security Tools
Steve Zurier, Freelance Writer,  10/12/2018
Most IT Security Pros Want to Change Jobs
Dark Reading Staff 10/12/2018
Most Malware Arrives Via Email
Dark Reading Staff 10/11/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-1744
PUBLISHED: 2018-10-15
IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148423.
CVE-2018-1747
PUBLISHED: 2018-10-15
IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 148428.
CVE-2018-18324
PUBLISHED: 2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_fullstatus, service_restart, service_stop, or file (within the file_editor) parameter.
CVE-2018-18322
PUBLISHED: 2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
CVE-2018-18323
PUBLISHED: 2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.