Computer Hack Expands
It's getting bigger with no end in sight:
- We had 8 additional computers in my unit go down today - that's on top of the others that were previously infected. Over half our computers are now infected. [...] The City is now admitting our computers have been compromised, but is still doing nothing to either notify or protect the officers. Please, urge all officers to check their credit reports regularly for a while, and invest in identity theft protection. There is absolutely no guidance on this from the Dept, and this is already Day 6 of a massive hack (it began overnight on Thursday). The Dept does NOT have your back, whether it's on the street or in your financial/identity security.
[...] Unisys was out to our location and advised there was nothing they could do on their end and that the department basically owns the problem. Unisys stopped supporting Windows XP in 2014, the Dept ignored their request to modernize, and Unizys no longer has the expertise to work with out antiquated systems.
The brilliant I.T. leadership of the Department, trying to get by on the cheap, just cost the city millions upon millions of dollars that don't exist. Well done!
Labels: info for the police
posted by SCC at 12:37 AM
66 Comments:
Can some coppers here with the expertise in this area please tell us if we purchased lifelock will the city reimburse us? Is this tax deductible? Any credit safeguards? Thanks
Unisys installed new antivirus software. Looks like problem solvef
This ship really is sinking .
Who would have thought that there would be a price to pay for promoting those who know people and blow people over those who are actually qualified ?
OT:
So what's with DNAinfo Chicago? Yesterday, they were not digging Chicago Police in their news alerts. They own Wrigley Field....what's up with them? And now's the time to dump the DePaul Stadium and the ugly Lucas thing at the Lakefront. Rham needs to get right with the people of this city to possibly save what legacy he might ultimately have...he's really been a huge disappointment. Does he think he can get elected then give away land deemed for its residents to his pals....POOH to him!!! What a stroke. And he desperately must get right with the Police...they are first responders in the best way.
Good luck.
Someone said their insurance company is offering identity theft protection policies for a reasonable price.
Check into life lock too.
Call up your credit card companies and get new card numbers. They can't steal if they don't have the current card numbers!
And just like you tell the gullible seniors, if it sounds to good to be true, it is!
Still on Windows XP???
Solution: FIRE your IT person, as he is NOT worth a quarter of what you are probably paying him.
Seriously, FIRE HIM and that is taking a GIANT step in the right direction.
I would say your "expert" is no expert. (FAR from it!!)
In a cloutocracy, the "best and the brightest" are never hired. This is a perfect example of that.
Maybe he had his superiors fooled, but anyone knowing systems and mission critical networks would tell you, get rid of him before something bad happens. (Too late)
Maybe he was trying to "look good" to the other clout-laden pseudo-experts and bosses and not spend the right amount of money to maintain and upgrade the technology. "OH, he was saving us money in the budget."
Unfortunately, it was the wrong move.
AND anyone defending him for "Staying with XP" should also be fired.
Wake UP!! Technology moves fast. Stay up with it.
Any errors on the ISR must have been caused by the hackers!
Called a unit today asking about a case and they couldn't pull it up because no computers in the unit work. Guy said they handle tens of thousands of cases a year and can't get any work done. But hey everyone at HQ got a new computer. WTF
I wonder if htey accessed the confidential informant files?
Maybe you can get Escalante to give the IT folks a pep talk and then he can gig them for dirty pocket protectors?
Is it just the CPD computers, or have the computer systems of other City agencies been hacked?
Okay this is odd and someone is full of bullshit. I talked to your IT guy and he said that Unisys is all over the XP upgrade. My company is ready to assist in that project and can get this done. WTF, if you have a multi million dollar contract with Unisys and they cannot finish the project,which is not that difficult,fire their fucking asses.
The sad thing is XP is more easily secured than 7 or 10.
Before connecting to the internet, put XP into Limited User Mode, not Admin Mode, use real passwords, guard the Admin password jealously, juice up the HOSTS file (lots of websites to help you with this, make sure it has 20k+ entries), use an old version of Firefox pre v39 with NoScript and AdBlock, toss in SpywareBlaster and SpybotSearch&Destroy. You'll have a system that'll work for years.
Instead, you ran XP in Admin mode for convenience, used Internet Explorer because no one knew better. The box was whacked within 10 minutes of connecting to the internet. No point in upgrading with this attitude, 10 will be smashed in seconds.
Again....
E-mail sent....not from surfing...
Infected attachment.
Open door via front door not back
They'll need an overhall, not a antivirus app....
Prince Valium / Shellcoder @ Anonymous
And yet ANOTHER sign the City does not want you doing anything!
I predicted this would happen years ago.
Hmmmm are we surprised with this Dept? No because instead of hiring a IT company to upgrade our systems, they have the non computer CPD IT that can't fix our slow running computers in the district, the in car cameras or the pods on the street because the city purchased the cheapest out of date junk (that they don't make parts for bcus they are outdated). Thxs Rahm & Mr. Six... Great Shitleaders.
Where's the so called Union on this subject?
We weren't "hacked." It was malware likely introduced when someone opened an email attachment.
The government seems to have $$$ for everything BUT the basic, required, fundamental resources and equipment that is necessary to keep it functioning . Cook County does everything ass backwards. Windows XP? Really?
The Unisys IT people were probably laughing their asses off on the way back to their office. They knew this day was coming, was just a matter of when.
And still nobody fired?
Cost the City millions no big deal lets focus on contact cards!
It didn't get to my IBM that runs on Windows 3.1.
Sounds like Lewin is due for a promotion to Chief if he keeps it up. Anyone else would be fired.
Where is the Media on this matter?
CPD is allowing outside hackers to search criminal and secretary of state records without concern?
CPD members records are compromised?
If the media is listening to the command staff, you are going to be surprised they are same staff that covered up
Koschman, McDonald and many more
You must be drinking the same kool aid that Rham was when he stated he never saw any video!
The whole CPD computer system is fucking cringe. It's a bunch of vintage hardware and software poorly configured and maintained by the lowest bidder.
When you piece together a bunch of shitty dated incompatible systems and try to get them to play nice together you're gonna have gaping security flaws. There have been and probably still are systems the department uses that rely simply on security through obscurity.
Another thing is the human element, we all know most of the department is totally clueless when it comes to computers. Whether they do or install stupid shit on the computers, or fall victim to social engineering they're probably the weakest link in the system.
What the CPD should do is lease their computers. Dell does this. The terms of the lease include service and support. Best of all every so many years, typically 3 or 4 years, your computers are upgraded or replaced with new models. Dell handles the security and updates. Trying to save money on computer upgrades is going to cost the City of Chicago many 10's of millions of dollars to fix.
I use LifeLock for my ID security they are cost effective and very good at what they do.
Sign up at creditkarma.com - it's free and it alerted me when my identity was stolen. Nice website.
As an IT professional, enough cannot be said with respect to being current. When the support for XP (or any system) is withdrawn, support and updates for the associated software, including virus protection packages, will soon cease as well as there is little/no incentive to provide support costly resources and updates to systems and software that very few are still using. Plenty of warning is always provided. The XP footprint apparently still inexistence at CPD is frightening, and this incident was bound to happen sooner if not later as security updates are no longer provided.
FREEZE your credit reports ASAP!
Here is a link to Clark Howard that will assist in freezing credit reports.
http://www.clarkhoward.com/credit-freeze-and-thaw-guide
Please do this immediately. Credit monitoring agencies cannot stop abuses, only report them after the fact.
"Unisys stopped supporting Windows XP in 2014, the Dept ignored their request to modernize, and Unizys no longer has the expertise to work with out antiquated systems."
Actually, it was Microsoft itself that stopped supporting XP in 2014. It is not that Unisys doesn't have the expertise to support XP, no one does, as Microsoft is not releasing any more updates.
While it is sad that patrol officers have to drive delapidated cars, it is simply inexcusable to have this type of a lapse of maintenance and security for computers.
But we have a $55 MIL Maggie Daley Park, $100 Mil DePaul Stadium, and million-bucks-a-mile bike lines, so its all ok, right?
The only silver lining is that if CPD's computers have been compromised, you can bet Rahm's computers have been compromised as well.
This is exhibit #46,952 as to why Democratic politicians are fucking retarded.
Hey Rahm, GFY!
Call the next case. Not a cop.
This "fix" may cause more problems than the virus! From power on to available to use, a process that previously took 2-3 minutes now takes ten. All the software on our computers are running at an excruciatingly slow pace. Let's promote Lewin (sp) again!
Not to worry, guys. Rahm is on it.
Anonymous Anonymous said...
Good luck.
Someone said their insurance company is offering identity theft protection policies for a reasonable price.
Check into life lock too.
Call up your credit card companies and get new card numbers. They can't steal if they don't have the current card numbers!
And just like you tell the gullible seniors, if it sounds to good to be true, it is!
2/05/2016 01:07:00 AM
State Farm on homeowners policy $25.00 year very reasonable rate and they restore your identity using their lawyers and it professionals.
Again....
E-mail sent....not from surfing...
Infected attachment.
Open door via front door not back
They'll need an overhall, not a antivirus app....
Prince Valium / Shellcoder @ Anonymous
2/05/2016 03:17:00 AM
^^^Looks like this is the guy to contact
Speaking of Rahm, who the hell is running the school system here in Shitcage. Is it the CPS board or the unions. Inquiring minds want to know. Rahm Emanual looks like a capon to everyone.
Can Huberman come back? Maybe reinstall ICAM? Lol
You talk to a IT person they say dealing with know it all politicians is a horror. You tell them over and over again there is a disaster in the works. They blow you off over and over again but when things hit the fan these same shacks of dog crap blame everything on these same IT people. Katherine Archuleta the turd director of the Office of Personal Management did just this. Her IT people told her over and over again there was a big problem. These IT people finally was able to get a company with security software. This company was demonstrating this software and during they demonstration they discovered the hack. Archuleta at first tried to conceal it, and then tried to blame her IT people. Finally she had to resign. But mine and millions of other government employee's records where hacked by the Chinese who where looking for people with security clearances in foreign service. Sparkelfarts is an expert hiring people who know what they are doing.
The bottom line is any good IT person will not have anything to do with the government and will get a much higher paying job in the corporate world where they will listen.
OK - We're going to pay Ramsey $350 @ hour for righting the wrongs. How about the wrongs that his accomplice, Barb McDonald, brought to the table? Ron Huberman - he brought half this hi-tech nonsense & Jjjjjooonnnaaattthhhaaannn Llllleeewwwiiiinnn is responsible for maintaining it. Then we'll pay attorney Jamie Gorelick1,200@hour to defend CPD to the DOJ. HEY RAHM - Do it right the first time before you give the ghetto rats free,Wi-Fi.
This "fix" may cause more problems than the virus! From power on to available to use, a process that previously took 2-3 minutes now takes ten. All the software on our computers are running at an excruciatingly slow pace. Let's promote Lewin (sp) again!
I second that !!!! PROMOTE LEWIN AGAIN !!!!!!!
Crap in = crap out. The winning equation of this city. I've never worked for a more messed up company.
Lewen says " nothing to see here... move along". " We've got everything under control"
Reality is it's really, really FUBAR'D
Anonymous said...
Called a unit today asking about a case and they couldn't pull it up because no computers in the unit work. Guy said they handle tens of thousands of cases a year and can't get any work done. But hey everyone at HQ got a new computer. WTF
2/05/2016 01:41:00 AM
Wrong. New PCs went to the districts/areas. Us at HQ are still waiting.
Blogger Transmaster said...
What the CPD should do is lease their computers. Dell does this. The terms of the lease include service and support. Best of all every so many years, typically 3 or 4 years, your computers are upgraded or replaced with new models. Dell handles the security and updates. Trying to save money on computer upgrades is going to cost the City of Chicago many 10's of millions of dollars to fix.
@Transmaster
Not feasible. Homegrown apps don't get ported over fast enough to jump with the times. Blame Lewin for spending money on everything but what matters.
From the comments:
Anonymous said...
Not to worry, guys. Rahm is on it.
2/05/2016 10:57:00 AM
Deputy Chief Lewin is actually on it. He has solved the problem by bringing that internationally renowned computer expert Captain Marty Ryczek back to PSIT. TRUTH!
Keeping ahead of the cyber-criminals is a tough try. Some of the biggest companies in America have been hacked. The federal personnel system was compromised. That said by not using best practices and best personnel is a guarantee that the system will be compromised. It is only a matter of time before some utility is hit and that will be a bit more serious then a lost credit card number.
It's worse than you think.
As a detective (now retired) even two years ago, it was incredibly embarrassing to have to tell victims who tried to send me documents that they had to be converted on their end to XP....the minimal upgrade to be able to convert it on CPD's end was not available. Pathetic.
I've been retired almost 2 years. I was so excited when some IT people came through and installed something like Windows 7 or 10...then 2 days later they came and uninstalled it because the city didn't have the proper licenses. I think the city is actually stealing the Windows software--not paying for each individual license, or whatever is required--in essence, stealing.
See what happens when democrats touch things children. I cant even believe these people have degrees! I feel like kurdistan took over Chicago. This is laughable and incredibly dumb. (( I told you the WTF face would be on many Chicago PD.... see there the nice officer with WTF face :/ <----- there there officer let me get you a cup of reality... just answer your 911 calls and stay fetal... **sips coffee slurping loudly for affect**
Confidential Informant Files?
Was this expanded to da mayor, alderman, their his staff and so on
The sad thing is XP is more easily secured than 7 or 10.
Before connecting to the internet, put XP into Limited User Mode, not Admin Mode, use real passwords, guard the Admin password jealously, juice up the HOSTS file (lots of websites to help you with this, make sure it has 20k+ entries), use an old version of Firefox pre v39 with NoScript and AdBlock, toss in SpywareBlaster and SpybotSearch&Destroy. You'll have a system that'll work for years.
Instead, you ran XP in Admin mode for convenience, used Internet Explorer because no one knew better. The box was whacked within 10 minutes of connecting to the internet. No point in upgrading with this attitude, 10 will be smashed in seconds.
2/05/2016 02:55:00 AM
GREAT STUFF! $$$
Our home boxes are better secured than what the Dept. uses. Thanks for the suggestion about NoScript, simple and very effective freeware, ran it today under latest Mozilla Firefox and had to clear my bank site to get through, all the other "unresponsive script" crap that hangs you up for cumulative tens of hours is just locked out.
http://noscript.net/
Ghostery --
https://addons.mozilla.org/en-US/firefox/addon/ghostery/
Is a super anti-tracker-blocker. Blocks literally THOUSANDS of useless third-party follow-your-a_s-around trackers, unless you make a specific exception.
Set your Firefox to "never allow third-party cookies," and run Ghostery.
See? Us old guys don't know s__t about any of this...
>pfft< Stay safe, work safe, get home safe, my brother (or sister). Love ya.
Anonymous Anonymous said...
I've been retired almost 2 years. I was so excited when some IT people came through and installed something like Windows 7 or 10...then 2 days later they came and uninstalled it because the city didn't have the proper licenses. I think the city is actually stealing the Windows software--not paying for each individual license, or whatever is required--in essence, stealing.
2/05/2016 07:43:00 PM
You're correct.
Also, CHRIS was originally cobbled together with shareware. True.
The Unit I work in has a cancer spreading thru the computers. Each day I come in more people are without. Everyone is just kinda playing stupid.
This would be really awful if my ass wasn't in a fetal position!
Fuck Em! They'll Fuck U in a heart beat....
Yea they will
I'm sure johnny L. will get to the bottom of it. Ha ha! this joke has Been inside IT section entire career and continues to get promoted over and over . Zero street experience, Zero ,Must be nice to be from a wealthy suburban northshore community and get his fancy promotions over and over cause family has made hefty political donations because little johnny wanted to play police in the big city like his fellow north shore buddy Ronnie hub! Funny thing I spoke with someone who had big degree and huge expertise as a p.o. in the IT field and they even admitted johnny knows nada about technology! Got to love chicago police politics at its finest!
Had two yutes from IT come to office at Ohare and ask if our computers still get on the Internet. They clearly stated that they were there checking because our department had been hacked and has spreads to virtually every unit.
The brilliant I.T. leadership of the Department, trying to get by on the cheap, just cost the city millions upon millions of dollars that don't exist. Well done!
---------------------------------------------
Nothing is done cheap there. 90% of staff is outsourced to 4data/web site team who are there only to line their own pockets. System maintenance doesn't make them money and is only addressed when things don't turn on. Sworn staff is there to fill in the void where the contract doesn't cover. None are seriously trained, have access to overall systems to monitor what 4data does or doesn't do, or have authority to correct things that smell funny. Until that changes, it's a downward path.
Commander Lewin failed the department. His interests are his own, as this incident will bring to light. Investments seem to be only made in things that grab headlines, or promote HIS self interests. All the while, fully neglecting the systems that keep the lights on for the department, or those that keep officers safe, like reliable working technology in the cars.
Good thing we all had to do that bullshit "training" that told us not to share our passwords or open suspicious email attachments. Click on a bunch of horribly produced computer-animated videos about Internet security and you're trained. Worked perfectly. I'm wondering why we had to log on to some outside service to complete that "training." Seems like it would've been easier/safer to host the videos on our own system. It would be funny if that "training" actually caused this breach.
same non sense in the suburbs... different captain of our ship.
Deputy Lewin shouts from his office as if he has slaves waiting for his every wish. He expects officers sitting near his office to either call people or physically get them to come to his office. He's a lazy ass and everyone is tired of his poor ass management skills. Lewin needs to get a copy of the unit 125 phone list and call people himself. And what he did to the great LT. J.W. by bringing a Captain was a pussy ass move. Lewin knows nothing about I.T. And In short time everyone will see how incompetent he really is. This Computer disaster is just the begining of his great fall. Stay tuned in. Unisys and Clarity are sitting back watching the show in disbelief. You are a huge joke Deputy Lewin!
No big surprise...When Windows stopped supporting XP systems. Over a yearago...The entire CPD Intranet was left in Jeapordy due to the city's failure to upgrade. This left a wide open field for hackers. I'm surprised it didnt happen sooner.
I'm betting that this hack is worse than they are letting on...
We weren't "hacked." It was malware likely introduced when someone opened an email attachment.
Maybe it was McComstat checking his email on his last day. He sees one from Rahm entitled "I'm Sorry" with an attachment and he click on it.
Funny thing I spoke with someone who had big degree and huge expertise as a p.o. in the IT field and they even admitted johnny knows nada about technology! Got to love chicago police politics at its finest!
Remember.......this is the CPD where YOU ARE AUTHORIZED, NOT QUALIFIED!
Those who ignore the mountain of warnings and continue to use Windows XP do so at their own risk. Unfortunately, their risk is also our risk, because compromised systems end up in botnets, distributing spam, or hosting and distributing malware. Continuing to use Windows XP on the public internet is akin to going out in public with an active virus and coughing on people.
Do yourself and everyone else a favor. Either make a switch to a supported operating system... or move to China.
Called a unit today asking about a case and they couldn't pull it up because no computers in the unit work. Guy said they handle tens of thousands of cases a year and can't get any work done. But hey everyone at HQ got a new computer. WTF
----------------------------------------------------------------------------------
Bullshit.....people at HQ did not get new computers. All the districts did. Hq is working with some of the oldest computers on the department. get your shit straight instead of doing mindless bitching. Call ISD and vent your problems there.
Post a Comment
<< Home