Attacks/Breaches

12/14/2017
12:15 AM
50%
50%

2 Million Fake Net Neutrality Comments Stole American Identities

New York Attorney General Eric Schneiderman updates the investigation into fake content submitted during the net neutrality comment process.

The office of New York Attorney General Eric Schneiderman today released new details on the investigation into fraudulent content submitted during the net neutrality comment process. Updated analysis shows two million comments stole real Americans' identity. 

Those two million comments included more than 100,000 comments per state from New York, Florida, Texas, and California, which are the most heavily affected states. More than 5,000 people to date have filed reports on identities used to submit fake comments regarding the Federal Communications Commission's repeal of net neutrality. 

The FCC is scheduled to vote on the repeal today, December 14, and plans to move forward with the vote despite evidence the public comment process was compromised, the AG's office reports. AG Schneiderman says moving forward with the vote "would make a mockery of our public comment process" and the FCC "must postpone this vote."

Read more details here and check here to see if your identity was misused.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/18/2017 | 7:09:16 PM
Addresses of commenters
WTH?

I'm really concerned how much of these comments are a matter of public record. People's names and addresses are often enough to commit identity theft.

Of course, the same goes for most voting records.

It's a shame, really.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
12/15/2017 | 3:41:25 PM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
As a past resident of NY State, I have many reasons to hate ALBANY and all that goes on there.  BUT ONE WORD OF GREAT ADVICE ----- IF you have or had relatives in the state, checked UNCLAIMED FUNDS ---- We came away with a substantial chunk of unknown change in the XX,XXX.xx number range. 
gruntsters
50%
50%
gruntsters,
User Rank: Apprentice
12/15/2017 | 11:35:21 AM
Re: Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
I agree. Which way did the 2 million accounts lean? Why hasn't the NY AG listed this information?
SchemaCzar
50%
50%
SchemaCzar,
User Rank: Strategist
12/15/2017 | 9:17:28 AM
Ratio of "pro" to "con" fake posts could suggest unseen economic or political motives
Schneiderman's office did a valuable service.  Now this is definitely one of the more useless ways of gauging public opinion - no real authenticated identity to canvass citizens?  

However, the question I have is what is the ratio pro/con of fake comments?  If we see one side or the other exerting money and effort to swing the decision, it may lead us to hidden consequences of rescinding or preserving net neutrality that would give us further information in this important debate.

It's sort of disappointing that Schneiderman did not reveal this ratio.
White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
Mueller Probe Yields Hacking Indictments for 12 Russian Military Officers
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/13/2018
10 Ways to Protect Protocols That Aren't DNS
Curtis Franklin Jr., Senior Editor at Dark Reading,  7/16/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-10869
PUBLISHED: 2018-07-19
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.
CVE-2018-10870
PUBLISHED: 2018-07-19
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.
CVE-2018-12959
PUBLISHED: 2018-07-19
The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all contract balances into their account).
CVE-2018-14336
PUBLISHED: 2018-07-19
TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.
CVE-2018-10620
PUBLISHED: 2018-07-19
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code t...