LOGO: Truthdig: Drilling Beneath the Headlines. A Progressive Journal of News and Opinion. Editor, Robert Scheer. Publisher, Zuade Kaufman.Best Political Blog Winner, 2007 Webby Awards, People's Voice and Jury.   Exclusive Truthdig Merchandise - Gore Vidal signed first editions - Signed Mr. Fish prints
 
July 24, 2008
Log in / Register

 Choose a size
Text Size

Reports
Obama on the Brink
No Easy Out for Obama
 * NEW! * Refighting the Vietnam War

Ear to the Ground

A/V Booth

Arts & Culture

Digs
Inside the Data Mine

Truthdig Bazaar
Myra Breckinridge Cookbook book cover

Myra Breckinridge Cookbook

by Howard Austen and Beverly Pepper
Fine, Collector's Copy (Paperback) $100

more items

 
Ear to the Ground

IRS Workers Fall for Simulated Password Scam

Email this item Email    Print this item Print   
Posted on Aug 3, 2007
danmahony.com

According to a recent internal audit, 60 percent of IRS employees fell for the oldest trick in the book, allowing auditors posing as help-desk employees access to their digital identities, and by extension your personal and private information.

On the plus side, the report says the agency’s computers have never been violated, despite frequent attempts.

C|Net News:

Brace yourself for another fine example of the tech-savviness of federal bureaucrats (and yes, this sentence is dripping with sarcasm).

According to a report released Friday (PDF) by the Treasury Department’s inspector general, 60 percent of a sampling of 102 Internal Revenue Service employees, when contacted by government auditors posing as help-desk employees, were perfectly willing to reveal their usernames and change their passwords to ones suggested by the callers.

The auditors said they were particularly alarmed by this year’s findings against the backdrop of a similar test in 2004, when only 35 percent fell for the trick. In 2001, 71 percent succumbed to the requests, which led the IRS to take “corrective actions” designed to raise awareness about social-engineering attempts and password protection requirements.

Read more

Email Newsletter

Get truth delivered to your inbox every week.

Previous item: Civilians Caught in Afghan Airstrike

Next item: Holocaust Survivors Protest in Jerusalem

Jump to Comments

Advertisement


Elsewhere: .

Comments

Are you a Truthdig member yet? Login now, or register with Truthdig.

By penny pooh, August 6, 2007 at 7:50 am #
(Unregistered commenter)

“We not only CAN fix this technical issue, but need to get the arms of the LAW around this beast with the quickness. The way I see it, this lackadaisical employee malaise exuded through such deplorable negligence and carelessness is just as menacing a threat to American National Security as the outing of covert operatives or the treasonous betrayal of Government secrets. These idiots need to be made to mortally fear more than the potential loss of their crumby jobs. If America starts holding these inattentive knuckleheads justifiably accountable for prosecutable violations of National Security, punishable by hefty fines and/or some strenuous jail time, I promise you this crap will go away. Let’s start thinning these dullards from the herd.” -rage

I agree with Rage.

This is the result of people who just don’t care or aren’t paying attention.

These people need to be punished for this.

Report this

By GW=MCHammered, August 5, 2007 at 10:07 pm #
(Unregistered commenter)

America: From Freedom to Fascism (full DVD)
http://video.google.com/videoplay?docid=-1656880303867 390173

Info at IMDb
http://www.imdb.com/title/tt0772153/

Interview With Producer Aaron Russo
http://video.google.com/videoplay?docid=-3254488777215 293198

Report this

By KYJurisDoctor, August 5, 2007 at 3:57 pm #

{Sigh}. The Presidential candidate who promises to do away with the IRS and flatten the tax structure will most likely get my vote and support!

http://OsiSpeaks.com or http://OsiSpeaks.org

Report this

By Evan W., August 5, 2007 at 12:09 pm #

RAE, you are totally correct that confidetiality no longer exists. However, it isn’t just government agencies that have easy access to all our details. One of my family members was briefly involved in writing algorithms to create profiles based on the massive amounts of data that corporations have access to. Not only can they get free information from the government (for example, DMV records, etc.), but can also track purchases, credit history, and whatever else, then assemble detailed profiles about us, to be sold to other corporations. Of course, they mostly use this for advertisement and such, but it doesn’t take much imagination to see the FBI outsourcing this sort of thing in the near future.

Report this

By Evan W., August 5, 2007 at 12:09 pm #

RAE, you are totally correct that confidetiality no longer exists. However, it isn’t just government agencies that have easy access to all our details. One of my family members was briefly involved in writing algorithms to create profiles based on the massive amounts of data that corporations have access to. Not only can they get free information from the government (for example, DMV records, etc.), but can also track purchases, credit history, and whatever else, then assemble detailed profiles about us, to be sold to other corporations. Of course, they mostly use this for advertisement and such, but it doesn’t take much imagination to see the FBI outsourcing this sort of thing in the near future.

Report this

By cyrena, August 4, 2007 at 11:34 am #

#92138 by RAE
• And there’s not a damned thing you can do about it. Except, perhaps, live like a Sasquatch in the woods. No one seems to be able to find one of them!

On this Sasquatch, Rae. I bet they are as rare as the Lefthanded, Albino, Lesbian, Sanskirt Scholar that Non Credo recently described. smile (which I thought was pretty creative)

Meantime, you were sure right on the money about all the rest. Privacy is hardly an option in our society, though you have to admit, all of this data mining makes the assault that much harsher. It like…drastically ups the odds of being targeted as any sort of dissenting voice, and the punishment is hell.

Report this

By Mudwollow, August 4, 2007 at 8:44 am #

ABOLISH THE INCOME TAX AND THE IRS

http://www.gravel2008.us/?q=fair_tax

The only person with the balls to utter this simple and obvious remedy to an otherwise completely unsolvable mutation of government.

Report this

By rage, August 4, 2007 at 7:36 am #
(Unregistered commenter)

“You may be surprised to find just how helpful people are willing to be given the right circumstances and you are just as vulnerable as they.  Don’t forget Sally at your credit card company, your school admin office, former employer, old girlfriend, mother …” Jomama on 03AUG07

The Nation is screwed! No wonder identity theft is on the rise, when digital terrorists can count on some oblivious scatter-brained tool seated at some vulnerable Win95/98 FEDERAL GOVERNMENT SYSTEM to grant them unlimited access to the very databases that generate social security numbers and have proprietary data on every tax paying citizen in the Nation. We’re not talking about credit card corporate crooks or the grade fixers at the university administration complex. We’re talking about the TAX SUPPORTED FEDERAL GOVERNMENT, most notably, THE INTERNAL REVENUE SERVICE. America wants any hamster who has fallen off that particular wheel that far to at least be PUBLICLY acknowledged expeditiously. Good Lord! The IRS is not only half-training these idiots. They’re planting them in front of obsolete antiquated systems with stone age security and kindergarten help desk deployment processes that are obviously not audited often enough to meet GOVERNMENT STANDARDS ESTABLISHED FOR DISASTER MANAGEMENT AND BUSINESS CONTINUITY!!!! America doesn’t want to hear that crap about there being no technical solution to this particular technical problem, having committed our social security numbers to memory already.

This should not be ignored, excused, or dismissed because it’s a common plague to the IT Security community. To date, the only information systems that receive the ample oversight needed across the board are the systems that reside in the Department of Defense. And, human error and incompetence has recently opened them up to scrutiny and ridicule for shoddy security and confidentiality breaches. We need to demand a more strenuous oversight and practical accountability of ALL Federal Offices for the comprehensive maintenance of all systems currently deployed. Right now America’s DIGITAL BORDERS are more open and vulnerable than our geographic borders. We not only CAN fix this technical issue, but need to get the arms of the LAW around this beast with the quickness. The way I see it, this lackadaisical employee malaise exuded through such deplorable negligence and carelessness is just as menacing a threat to American National Security as the outing of covert operatives or the treasonous betrayal of Government secrets. These idiots need to be made to mortally fear more than the potential loss of their crumby jobs. If America starts holding these inattentive knuckleheads justifiably accountable for prosecutable violations of National Security, punishable by hefty fines and/or some strenuous jail time, I promise you this crap will go away. Let’s start thinning these dullards from the herd.

Report this

By RAE, August 4, 2007 at 6:36 am #

Anyone who thinks, feels, hopes, assumes, wants or demands that their “personal” information remain private is, quite simply, a fool, or is at least fooling themselves. There is no such thing as “confidential” these days and there hasn’t been for decades.

This is especially true whenever government or financial agencies are involved. If they want to learn ANYTHING about you - financial, medical, psycho-social, sexual - they can and they will, and can usually do so within a few hours.

Oh, it might take them a bit longer if, for example, you happen to have been born to illegal aliens in a cabin not connected in any way to the outside world, have never been to a doctor, hospital, school, driven a car, made a phone call, had a bank account (or anything other than strictly cash dealings with anyone for any reason), or, frankly, in any other way interacted with almost anyone who is connected to “the outside world.”

And don’t think such niceties as a “confidential” stamp on documents or legalese mumbo-jumbo about protecting your privacy means a damn thing. And you’re really kidding yourself if you think any of these agencies gives a second thought as to whether its methods are legal or not. They all use whatever works, legal or illegal.

And there’s not a damned thing you can do about it. Except, perhaps, live like a Sasquatch in the woods. No one seems to be able to find one of them!

Report this

By Bukko in Australia, August 4, 2007 at 6:13 am #

Wait, you mean that the person who just called me at work and asked the same sort of thing WASN’T from the IT department?!?

Report this

By Outraged, August 4, 2007 at 1:48 am #

I call this “idiots in charge”.  But then that’s the way they like it, because then they know who’s really in charge, don’t they.

Report this

By rage, August 3, 2007 at 8:49 pm #
(Unregistered commenter)

Were they able to claim their bequeathed Nigerian millions? More importantly, did they pay their taxes on that income?

Report this

By Jomama, August 3, 2007 at 6:38 pm #
(Unregistered commenter)

I hope you are not so naïve to think this is only a problem with the irs.. are you?
First, I give them kudos for testing and being aware of the threat of social engineering. My company performs pen testing for fortune 500 and many still want to ignore this and provide very little training to their employees to avoid and report it. Many compromises we investigate can be sourced to this attack vector but many still focus on the “technical” solution. Well, no form of technology will help you here.
You may be surprised to find just how helpful people are willing to be given the right circumstances and you are just as vulnerable as they.  Don’t forget Sally at your credit card company, your school admin office, former employer, old girlfriend, mother …

Report this

Add Your Comment

Posts by unregistered readers are moderated. Posts by members
are published immediately. Why wait? Register today!






Notify you when others comment on this article?


Are you a human?
Retype the word you see here.


Please read and abide by our comment policy.
By submitting this comment, you agree to this site's terms and conditions.

Newsletter

Get Truthdig in your inbox

Privacy Policy

 
Click here to advertise with Truthdig
 

 
Join the Liberal Blog Advertising Network
 
 
 
 
 
 
 

A Progressive Journal of News and Opinion. Editor, Robert Scheer. Publisher, Zuade Kaufman.
Copyright © 2008 Truthdig, L.L.C. All rights reserved.