Calif. Web Shutdown Could Have Been Avoided

By Ed Oswald | Published October 4, 2007, 3:59 PM

Security software firm Sunbelt said Thursday that it had attempted to warn California officials of a hack on one of its sites long before the state shut ca.gov down entirely.

In a post to the company Web log Wednesday, Sunbelt's Alex Eckelberry said the company had warned the state as early as September 11, but the government ignored its warnings,

According to an article in the Marin Independent Journal, the Marin County government -- whose site had been hacked -- didn't believe the e-mail warnings it was receiving from security firms, thinking they were phishing attacks.

However, the firm said it had also left voicemails with the government, which would have verified the reports they were receiving via e-mail.

The hack was directing people on the site to phishing sites filled with malware and pornography. Several of the e-mails also included examples, but they never reached those who could do anything about it.

On Wednesday, Gov. Arnold Schwarzenegger ordered a complete shutdown of the state's entire Web site as well as e-mail systems while the hack was fixed. Eckelberry said this was not necessary, considering it only affected one site.

However, he had a message for people who receive these warnings. "It's a wake up call: Keep your site clean," he wrote. "And for pete's sake, please heed the warnings of security researchers when they send you email."

Comments

View comments by with a score of at least

I wonder if after all this, Arnie himself went down to the IT department and said:

"You are TERMINATED!!"

Score: 0

|

Would one of these two goats just eat the other and get this over with??? I'm sick of waiting on the bridge.

Score: 0

|

weee. gotta love bad HTML coding. amazing what one little missed / can do

Score: 0

|

The Mafia ain't too happy about this....

Score: 0

|

Please close the italic tag :D

Score: 0

|

Ed, please start looking at your articles after you post them.

Please...

Score: 0

|

lol, even the right Headlines show in italic

Score: 0

|

I think the italic issue has overwhelmed the news itself haha!

Score: 0

|

Oh goody. The fool is back.

Huzzah!

Score: 0

|

PC_Tool has a point here... Proof check!

Score: 0

|

lol

Score: 0

|

you are a turd, a lifeless turd, go back to the cave where you came from. loser

Score: 0

|

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.