US military and intelligence computer networks (2015)
electrospaces.net
US military and intelligence computer networks (2015)
1–10 of 28 posts
Re: US military and intelligence computer networks (2015)
#2https://intelink.gov is a gateway to some of these.
Re: US military and intelligence computer networks (2015)
#3https://intelink.gov is a gateway to some of these.
Wow.
1. The non-www version doesn't seem to work.
2. If you try https://www.intelink.gov/, the browser immediately warns you that the site is not secure, because of certificate problems.
3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access, are provided only for authorized U.S. Government use. U.S. Government computer systems may be monitored for all lawful purposes, including ensuring that their use is authorized, for management of the system, to facilitate protection against unauthorized access, and to verify security procedures, survivability, and operational security. Monitoring includes authorized attacks by authorized U.S. Government entities to test or verify the security of this system. During monitoring, information may be examined, recorded, copied, and used for authorized purposes. All information including personal information, placed on or sent over this system may be monitored."
I am out of here :-)
Re: US military and intelligence computer networks (2015)
#4What a great rabbit hole! It's pretty interesting to see how some of these sites are "protected" (big HTML warning stating "DO NOT ACCESS THIS") and some oldschool-IT named domains such as https://itdashboard.gov/ .
Given the recent SolarWinds breach I wonder how these networks are impacted. Most of them look like from the early 90s.
Re: US military and intelligence computer networks (2015)
#5https://intelink.gov is a gateway to some of these.
Wow. 1. The non-www version doesn't seem to work. 2. If you try https://www.intelink.gov/ , the browser immediately warns you that the site is not secure, because of certificate problems. 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access,…
> 1. The non-www version doesn't seem to work.
Common for "internal" USG sites. I don't know if it's intentional.
> 2. If you try https://www.intelink.gov/, the browser immediately warns you that the site is not secure, because of certificate problems.
Internal USG sites use USG-generated root certificates and certificate chains. These need to be installed manually from USG sources.
> 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access, are provided only for authorized U.S. Government use. U.S. Government computer systems may be monitored for all lawful purposes, including ensuring that their use is authorized, for management of the system, to facilitate protection against unauthorized access, and to verify security procedures, survivability, and operational security. Monitoring includes authorized attacks by authorized U.S. Government entities to test or verify the security of this system. During monitoring, information may be examined, recorded, copied, and used for authorized purposes. All information including personal information, placed on or sent over this system may be monitored."
The standard disclaimer on all internal and classified systems. I'm glad I no longer have to click through that daily.
Re: US military and intelligence computer networks (2015)
#6What a great rabbit hole! It's pretty interesting to see how some of these sites are "protected" (big HTML warning stating "DO NOT ACCESS THIS") and some oldschool-IT named domains such as https://itdashboard.gov/ . Given the recent SolarWinds breach I wonder how these networks are impacted. Most of them look like from the early 90s.
PKI, not username/password
Re: US military and intelligence computer networks (2015)
#7https://intelink.gov is a gateway to some of these.
Wow. 1. The non-www version doesn't seem to work. 2. If you try https://www.intelink.gov/ , the browser immediately warns you that the site is not secure, because of certificate problems. 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access,…
> 3.
These banners are required on all government IT systems. The sole purpose of these banners is to prevent criminals from saying they were not aware of what they were doing, mistakenly accessed the site, etc. It is a legality.
Re: US military and intelligence computer networks (2015)
#8https://intelink.gov is a gateway to some of these.
Wow. 1. The non-www version doesn't seem to work. 2. If you try https://www.intelink.gov/ , the browser immediately warns you that the site is not secure, because of certificate problems. 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access,…
Then it's just as well you didn't scroll down to the comments section of tfa that links to a blog page called "Dangerous I.P. addresses that you should never ever scan" (https://dangerousip.blogspot.com/)
Re: US military and intelligence computer networks (2015)
#9Earlier quoted context omitted.
Wow. 1. The non-www version doesn't seem to work. 2. If you try https://www.intelink.gov/ , the browser immediately warns you that the site is not secure, because of certificate problems. 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access,…
Then it's just as well you didn't scroll down to the comments section of tfa that links to a blog page called "Dangerous I.P. addresses that you should never ever scan" ( https://dangerousip.blogspot.com/ )
> 207.60.36.176 - 207.60.36.183 Chris Pet Store
Peculiar on many levels...
Re: US military and intelligence computer networks (2015)
#10Earlier quoted context omitted.
Wow. 1. The non-www version doesn't seem to work. 2. If you try https://www.intelink.gov/ , the browser immediately warns you that the site is not secure, because of certificate problems. 3. If you still dare to venture ahead, you are greeted with this: "This is a United States Government computer system. This computer system, including all related equipment, networks, and network devices, including Internet access,…
Then it's just as well you didn't scroll down to the comments section of tfa that links to a blog page called "Dangerous I.P. addresses that you should never ever scan" ( https://dangerousip.blogspot.com/ )
In a previous life, I worked for a security company that made a "hacker in a box" - a security auditing tool that would scan a machine, or a range of addresses, to see what doors were open, and how they could be exploited, and if the exploits opened any new doors, and how they could be exploited, and so on until it ran out of things to try. Since this was a security auditing tool rather than an attack tool, it left some very big, obvious, deliberate footprints in the scanned machine's logs.
One day someone at our company decided that it would be a good idea to scan whitehouse.gov. We got told to never do that again...