NATO site hacked

NATO is warning subscribers to its e-Bookshop service that hackers have likely stolen its customer database. The site is run as a separate service for distributing NATO information and does not contain any classified or secret information. The bookshop has been closed and all members been warned by email to change their …

[Maikol]

Subject goes here

Great, so now that a bunch of 5 star-generals have had their IDs stolen whats the bet that those passwords have been used on the top-notch global nuclear ("nucular"?) launch platform web-interface with the drag & drop "Designate target" and pop-up "Are you sure you want to launch" button.

[Anonymous Coward]

Hope that was a joke

cos if it aint you clearly have no idea about how nukes are actually handled/controlled

[Danny 14]

oh lord

please tell me you are either german or have no plans on procreating?

[Anonymous Coward]

@ Hope that was a joke

You know how nukes are actually handled/controlled?

From what I read, there are people on stand by, in those missile silos, waiting for the president's orders.

[Thomas 4]

Oh sweet zombie Jesus

I'm thinking of running a sweepstake for the next big company/organisation to announce that they've been hacked. Place your bets below, here's a few to get you started:

1) WIkipedia

2) Facebook

3) Sony

4) Sony

5) Xbox Live Arcade

6) Potterless

[Anonymous Coward]

What title?

Shouldn't ou have put some more Sony entiries in there?

[Tom 13]

And how exactly would you tell

that Wikipedia had been hacked?

[Sam Therapy]

Thank you.

Put a smile on me face, that did.

[Anonymous Coward]

"Meanwhile LulzSec released a bunch of documents purloined from Arizona Police."

Actually, that might be the most scary part of that article. We've now come to the point where stolen police records barely get mentioned...

[Steve Evans]

Eh?

NATO e-books?

Best seller list

1: DIY IED defusal

2: How to make friends and influence people

2: How to survive a nuclear winter

[NomNomNom]

No

No not the NATO bookshop

[Scuby]

Ryan Cleary...

...clearly has an airtight alibi for this one!!!!

[Anonymous Coward]

"Does not contain any classified or secret information"

No such thing as Classified *or* Secret. Secret *is* Classified

Classification in order of increasing sensitivity:

Restricted

Confidential

Secret

Top Secret

Each can be further restricted with caveats such as codewords, country restrictions or distribution list etc.

Before anyone asks: yes, if you had a project called Bollocks, you could in theory be working on Top Secret Bollocks.

[Martin Ryan]

why store passwords

I don't understand why any website like this is designed to store passwords. Surely use of a salted hashed version by now is taught in kindergarten?

[Lance 3]

Illegal

Two problems with your thinking.

1) The FDA and the surgeon general both say too much salt is bad for you.

2) Hash is illegal.

[Robin Szemeti]

Passwords stolen?

I'm seriously hoping they mean "salted SHA1 hashes of the passwords, which will not allow the attackers to recover your actual password" rather than "Passwords" .... surely NASA will not have been dumb enough to actually store plain passwords?

Everyone know to only store hashes, I mean, its not rocket-science is it?

[Oninoshiko]

NASA?

This is about NATO, which is a completely different organization. Although I think the North Atlantic Treaty Organization probably has at least as many rockets as the National Aeronautics and Space Administration.

[Tchou]

NATO's website

is not necessarily made by NATO.

Like anyone else, they probably hired a web dev guy or team.

So, if the passwords were not encrypted, it's not like "NATO is a lamer in security" or recently "CIA has been hacked".

Average Joe do web sites, and he may have BigCos as clients when they don't want to annoy their programmers teams with a simple public interface.

[Martin Ryan]

NATO is a lamer in security

- it's not like "NATO is a lamer in security"

Well actually, yes it is like NATO is a lamer in security.

When you hire someone to do a job for you, you tell them the standards to apply to ensure it is adequate for your organisation. And then you test it afterwards. You outsource the work, not the accountability.

[Anonymous Coward]

Greetings, Professor Falken.

Let's play Global Thermonuclear War.

[Anonymous Coward]

Wouldn't you rather play

a nice game of chess?

[John Smith 19]

NATO has a book shop?

Who knew.

[Michael H.F. Wilkinson]

It was so top secret

even their ads were classified

mine's the one with the Dr Strangelove DVD in the pocket

[Wang N Staines]

More cash in books

How do you think they are currently funding all those wars?

Oils .. Nah

Arms sales ... Nah

Books are where the big margins are made.