Mysteries of the Las Vegas Telecom System 127
Reverend Raven writes "This is from Security Focus and deals with how some people believe a group of uber-hackers controls the Vegas telecom system. Interesting read, indeed." A follow-up to this old story. The case seems to be still winding its way through the bureaucracy.
Re:telecom security (Score:2, Interesting)
I do not understand why more people/corporations in the USA do not take legal action against their electric power suppliers. You guys suffer brown-outs, interupptions, and so on. Why, one slashdot poll was "how many surge protectors do you own?" or something like that.
It's about time that we had more _even_ rights to complain (compare class action against ciggy manufacturers with lack of people complaining about electric power delivery.
Re:telecom security (Score:3, Informative)
Re:telecom security (Score:2)
I'm glad to blame leftist kooks for all sorts of dumbness, but they are entirely innocent in California's power crisis.
California's celebrated (and really pretty minor) brownouts happened during the winter, the time of lowest electricity demand. The problem wasn't capacity, it was a poorly constructed market regulated by the naive and gamed by many of the major power companies, Enron prime among them.
Re:telecom security (Score:2)
Re:telecom security (Score:2)
You seem to be missing the point. The "shortage" was artificially created by manipulating the market. There was no shortage of electricity during the crisis, and the recently exposed Enron memos prove that.
You'd be hard pressed to find an economist who doesn't think there should be rules against market manipulation. Take our stock market: it's widely regarded as the world's most successful, so much so that foreign corporations will list themselves here. Is that because we don't regulate it? Hardly. The SEC is one of the toughest regulators in the world; CEOs fear them universally. The tight regulation creates the level playing field necessary for a liquid market.
This isn't to say that California doesn't have a NIMBY problem, and it may yet come to bite them. But it hasn't yet, and claiming that the power crisis is an example of too much regulation is missing the point entirely.
Re:telecom security (Score:3, Informative)
I'm not sure what media coverage of us is like over where you are, but don't get the wrong idea. I've never suffered through a brown out, or non-weather related blackout(Tornados and Thunderstorms destroying power lines really isn't their fault). Yes a certain section of the country did last year - mostly because they built no new capacity for years and compounded the problem with a regulatory cock up.
Anyway, as far as surge protectors go, they're nessecary. Really, it's not the power companie's fault that your electricity isn't 100% clean. Things are going to get a little messy when your neighbor fires up his arc welder for a little heavy duty car maintnance. Or for that matter, when the de-humidifier I have sitting in the corner kicks in and dims the light. Hence, we have surge protectors.
Re:telecom security (Score:1)
what a movie (Score:2, Funny)
Re:what a movie (Score:2, Funny)
Re:what a movie (Score:2)
Re:what a movie (Score:1)
From reading the article (Score:5, Interesting)
This sounds to me like systematic hacking of hotel telephone exchanges, so assuming Sprint isn't responsible for these (I don't see why it would be) I'm really not sure that this is Sprint's fault or problem.
Re:From reading the article (Score:3, Interesting)
I know it's illegal in the UK now under the RIP bill, but can anyone say for definite if it is in the US?
Re:From reading the article (Score:2)
The reason that this scam (assuming it is) works and your proposed pizza one would not, is that when someone looks up Dominos and calls Dominos, they notice when a Papa Johns guy comes to their door. When you're calling a bail bond agency or a hooker (let's call a hooker a hooker), you don't care who you get on the phone, as long as they provide the service you want. A vast majority of the people who were misrouted would have had no idea. And since at least half of the companies involved are quasi-legal at best, nobody complains to the cops.
-B
No - the switch has been hacked. (Score:5, Informative)
This is what the plaintiff in the story is alleging - that Sprint's switches are being reprogrammed by uberhackers in the employ of the Mob or some other competing organizations.
Re:No - the switch has been hacked. (Score:3, Insightful)
Without further evidence it's impossible to say, but either explanation could be correct.
Also, if it were the hotels that were compromised, it could be not a group of 'uber-hackers', but instead just an old-fashioned case of bribery and corruption, with hotels paid/forced to alter their exchanges by the mob.
Re:No - the switch has been hacked. (Score:2)
Re:No - the switch has been hacked. (Score:2)
As a former adminstrator of hotel telephone switches, I suspect that either the hotel's switches are being hacked into (most hotels retain default passwords) or the hotel or someone at the hotel is being paid to change the hotel switch's call routing tables. This is a simpler explanation than the telco switches being hacked and is right in line with the plaintiff's "it only happened from hotels" statement.
maru
Re:No - the switch has been hacked. (Score:1)
Or someone at a company that installs/maintains PBXs for hotels.
I would expect that would be a fairly cost efficient way of affecting multiple hotel phone systems. The less people who need to get bribed/keept quiet, the better for the success of any scam.
Re:No - the switch has been hacked. (Score:1)
Yeah, excellent theory. I am surprised that the investigation has not focused more in this direction. Everything I have read about this issue seems to indicate that the investigation ignores the fact that the guy has said it only happens from hotels and the presence of the hotel PBX.
maru
Re:No - the switch has been hacked. (Score:1)
I'm sure additionally that when the PUC or Sprint went into the hotel to do tests, they likely broadcast their arrival, probably booking the test times in advance. It seems to me that the hotels would be the first place I'd check, and I'd presume them to be hostile "witnesses" so to speak and wouldn't let them in on the tests.
Re:No - the switch has been hacked. (Score:2)
Re:No - the switch has been hacked. (Score:1)
yeah, i hate that too... (Score:1, Interesting)
seriously, if they're that good, why don't they just hack into the FBI computer systems and invent a nice little file on him? why bother ruining his life by taking away his livelihood when they could just as easily be ruining it by sending him to jail for 20 years?
Re:yeah, i hate that too... (Score:1, Interesting)
After we milk these SOB's we'll fucking buy Las Vegas or start our own little joint and then cut them all out. . I'm so glad whats his name retired and those case files were burned. That was the only evidence on paper at all. . It's too late.. Do you hear me "Officials, Gov't etc" It's too FUCKING LATE!..
Kinda got carried away
On a diff but slightly similar note the hacking of exchanges is nothing new and if you look in the 80-90's you'll see similar cases where a 14 yr old and some time could own an exchange.
Re:yeah, i hate that too... (Score:2)
Hmm, a fanatical old cook eh? I think I know the one you're talking about, he's called the Swedish Chef. [almac.co.uk]
Re:yeah, i hate that too... (Score:1)
Its not hackers... its Vegas... (Score:3, Funny)
So lets get this straight, in a hotel in Vegas you may or may not get through when you dial out...
Next week "$5 on getting through on the 4th occasion at 3-2"
And "The Gamblers Suite, where even the phone has the element of chance, get through when the blue light is on and win a free meal for two at the Belagio"
Never... (Score:2, Funny)
Re:Never... (Score:2)
NO CARRIER
So lemme see... (Score:1)
And if this story is even true, then why are these guys in court/hearings? It's only going to get them a cash settlement at best. But to me, despite the fact the basis of this whole ordeal is money apparently, I wonder why, or if they tried, to hire own their own 'Uber Hackers' to help 'counter' the others. Granted that would just make this whole thing sound way more bizarre than it already does. But these people deal in Sleeze, and I wouldn't think Sleeze would run to the authorities right off the bat, I'd think they'd feel more comfortable about my wonderings (of countering as opposed to having hearings.). Then again, who knows, they could have tried it and failed so their next option was to call on the P.U.C. to help lynch Sprint of Nevada.
But I'll admit, I'm going to attempt to keep an eye on this story, curiousity, and I've got 8 lives to spare.
Lemme guess... (Score:3, Funny)
Lemme guess...no pun intended?
Re:Lemme guess... (Score:2)
No cum intended....
Re:So lemme see... (Score:1)
"Bardarson says he discovered what appears to be computer security weakness in Sprint's infrastructure. He's not the only one. As SecurityFocus Online reported last year, former hacker claims extensive penetrations into Sprint's Las Vegas systems from approximately 1992 until his February, 1995 arrest -- smack dab in the middle of the call diversion complaints. Mitnick's access gave him the power to monitor or reprogram any phone line in town. Following that story, Munoz retained Mitnick as a technical consultant in his case, only to give him up later. Munoz says Mitnick wanted to run too many pointless tests; Mitnick says Munoz stiffed him and a partner for thousands of dollars in fees and expenses.",
Re:So lemme see... (Score:2)
Given how often my DSL line at work goes down, Sprint deserves to be lynched. (At least we also have a cable-modem line that we can use as a backup...)
Re:Kevin Free (Score:1, Funny)
Kevin is free as in beer, but not free as in speech?
Woohoo!! Free Kevin!!! (Limited time offer, limit one per customer)
Re:Kevin Free (Score:2)
sorry but i really wouldlike an explanation of this. I have bee reading
thanks
Re:Kevin Free (Score:1, Informative)
This expression refers to the product being available for free, but its receipe (source code) may be closed. You can download it and use. So long as the binary satisfies your needs you're gonna be happy.
From: http://ringlord.com/legal.html
Enjoy.
Re:Kevin Free (Score:1)
yup, you got a point there. same with music industry. of course file swapping is to blame that their revenues don't keep rising indefinitely, not the fact that they are producing crap.
maybe i'm just old-fashioned, but i liked it better back then when musicians were ugly but could play their guitars like the devil to the songs they wrote THEMSELVES. today, those show puppets sure may be pretty, but they're not musicians anymore, not by a long call.
ahem.. got a bit carried away there..
Uberhackers==police? (Score:5, Interesting)
Last time I went to Vegas, it was much cleaned up from several years ago. Almost no porn and fewer hooker adds. Used to be you couldnt see the sidewalk for them. I say the police did it by jamming the unsavory's phones.
Re:Uberhackers==police? or sprint employee? (Score:1)
Re:Uberhackers==police? (Score:1)
bureaucracy? (Score:1)
Re:Uberhackers==police? (Score:2)
apparently you haven't walked down the strip. see those mexican immigrants tapping pamphlets against their hands to get your attention? yes, that's a book full of hooker ads. No, you're not going to find them on casino property, and more and more of the walk really is casino property on the new strip, but you'll find them everywhere else.
Re:Uberhackers==police? (Score:3, Informative)
You have to go to other counties in the state to be where it is legal.
Old news... (Score:1)
hc
LV (Score:4, Interesting)
8. In a county whose population is 400,000 or more, the license board shall not grant any license to a petitioner for the purpose of operating a house of ill fame or repute or any other business employing any person for the purpose of prostitution.
Since Las Vegas is in Clark County, a county that has a population that is indeed over 400k, we can plainly see that prostitution is illegal in the area. Laws won't stop the average criminal from committing crimes, so we must assume that there is a fairly profitable business in LV selling flesh for pleasure.
As far as I know, police would derive a greater benefit from simply arresting people who were breaking the law, other than jumping through some serious hoops to stealthily put people who derive their livelihood, directly or indirectly, upon the sale or aiding in the sale of illegal activities.
It's far more likely that some people with money are paying people with some knowledge to put some technological legerdemain on their competition.
Is this is some type of surprise? Hell, if I were a cop, I'd let the small fish get eaten by all the big fish, so I could catch and mount the big ones later.
...much later, it would seem.
And someone named Escobar is in charge of the Utilities Cartel. Er, commission.
Re:LV (Score:1)
If I read that law correctly, then you can't get a brothel or 'rest-station' (somewhere for the prostitues to stay when they are oncall, but not attending a client). But if the pimp works out of an office, and calls the girls at home to go to out, does this need a license? Or for that matter, if the girl just works for herself, giving out a mobile (cell) phone's number, I can't see that needing a license.
Re:LV (Score:1)
MOM! you know it embarrasses me when you post on slash dot!
ARGH! wrong wrong wrong wrong!! (Score:2, Informative)
IT's PHREAKERS
Why can't anyone figure this out correctly?
Re:ARGH! wrong wrong wrong wrong!! (Score:1, Flamebait)
no unauthorised call forwarding.. (Score:4, Insightful)
so what was the 'authorised' call forwarding then?
Anyway as a previous poster says..
Sounds like the hotel's PABX's where hacked not Sprint's as it only effects calls from hotels not cell or other land lines..
Interesting testamony (Score:2, Insightful)
Is it just me, or is it not surprising, that an ex-cop with no technical skills, knows of no way to hack into his ex-employer's network?
If on the other hand, they had purchased some white hat experience for a week or two and the hat said the same thing, I might just think the same statement carried some weight.
I wonder, if his car has never been stolen, does he belive that his car is un-stealable?
I for one, have never cut my legs off, but I still do believe that it is possible.
Biiig money (Score:1)
Say, 75% of the prostitutes' income, then another 90% of their money as they buy their drugs.
There are biiig money involved behind the scenes. Street violence, bodies of gang-members in the bushes etc, is only what "we" see of the underground world, but they surely have the resources to use technology as well for their purposes.
Getting a competitor out of business using non-violent methods might not be as "impressive" (or frigthening) among the other competitors, but surely doesn't attract the police and media as much.
Uber Phreaks (Score:2, Interesting)
Unfortunately, the phreakers make VERY little compared to the top guys in this, but that will be changing very soon...
Really? (Score:3, Funny)
And the Police aren't doing anything to stop it?
And a large company appears to be in the hands of mobsters?
Whatever next?
Before you know it, there will be stories about corporations buying influence in the US Government...but that could never happen...
Throw the Bullsh!t Flag! (Score:1)
Vega$ Phone$ (Score:1)
Yes, I know that any casino area (read: Atlantic City, Vegas, reservations) nickle-and-dime you every chance they get, but sometimes it is a bit ridiculous.
Even calling an 800 number costs money!
Re:Vega$ Phone$ (Score:2)
I can't remember the last time I stayed in a hotel that had "free" local calls. It might have been a Super 8 in Stumblefuck, Nebraska -- where are you going to call there?
I'm not a super world traveler (maybe 4-5 trips per year), but it seems that the biggest trend is the clampdown on toll-free calls. I'm sure the rationale is to (1) make a buck where they weren't before and (2) by charging, maybe limit the number of outbound trunks they need.
Re:Vega$ Phone$ (Score:1)
Re:Vega$ Phone$ (Score:2)
There's also the argument to be made that most people who stay in cheap motels don't make many phone calls, either because they're just sleeping or fucking there or because small motels are in the middle of nowhere and there's just no reason to call anybody.
Besides, Motel 6 and Super 8 have to advertise *something*..
Re:Vega$ Phone$ (Score:1)
-- The Riviera Beach Motor Inn (right on the ocean in S. Yarmouth, MA) doesn't, and it's hardly a small motel, or a cheap one (on season, $250 or so a night)
-- The Shearaton in Springfield, MA and the Hilton in Valley Forge, PA don't charge either.
I imagine that the possibility of charging is proportional to how much they believe they can ream you for. Hehe.
Re:Vega$ Phone$ (Score:1)
Re:Vega$ Phone$ (Score:2)
I will give Super 8s a lot of credit, especially in small towns. They're almost universally very clean and the people who work at them are usually pretty friendly. This particular one was actually "luxurious" and had won like the Super 8 of the year award or something.
We always bring our own towels when stay at them, though, as the towels provided are small and scratchy. Other than that, we stay at Super 8 almost exclusively when we travel on the road. We have one of their lodging directories and plan our driving around the Super 8 locations.
This is only news in a loose definition (Score:3, Interesting)
Back in the day, New York City had a privat phone network for the "mob", created with "idle" equipment and bribes to phone workers. Result, FBI taps were tapping the known phone numbers and the mob guys were using the "secret" network.
Also, as far as rerouting disconnected numbers for fun and profit, lookup Poulsen's antics, plus other fun stuff.
I will have to say that it is about time that a Telco is getting called on the carpet for their lack of security, rather than just grebbing another Kevin Mitnic or whomever and blaming every problem on them, then discovering the problem still exists after you take away his access to communications.
All your phone... (Score:2, Funny)
Standard Bureaucratic cover-up (Score:2)
This is a standard bureaucratic coverup. "There's no problem here, but we're taking steps to solve the problem that we're sure doesn't exist in spite of the evidence to the contrary".
To admit that Ruebel is correct, the commission would have to admit that they were asleep at the switch (excuse the pun). It's far more politically prudent for them to belittle pooh pooh, and nay-say him, while at the same time, responding (or appearing to respond) to the publicity around his complaints.
In the meantime, Ruebel spends years of his life proving that Organized Crime (of some sort) is messing with the LA phone system but gets no compensation for his work, or his lost 'business' (I have a bit less sympathy for the latter).
I was in Vegas last month (Score:4, Funny)
Why hackers? (Score:2, Troll)
They're called Sprint engineers. Anyone who thinks that every single one of these folks is incorruptable is nuts- an extra $10k here and there and I bet you could get 20% to come to the dark side.
Re:Why hackers? (Score:3, Insightful)
This smacks of an inside job.... How in the world could they know that test calls were being carried out for several days, and make sure those test calls went through fine? Well, gee... if you're one of the employees, you'd know about it, wouldn't you?
It's pretty smart on the part of the Sprint employees involved, too. If you pit these shady businesses against each other, ultimately, who is going to care enough to get you in trouble for it? They're probably counting on the majority of people saying "My heart bleeds for you... You can't make millions off of your porn anymore because someone's keeping some of your calls from going through. Cry me a river...." Meanwhile, they're getting a nice kick-back off the top of all those big profits - plus keeping a respectable day job.
How does this guy know Mitnick? (Score:1)
What i want to know is how does this guy know mitnick? If he knows one hacker(and a prominent one at that) doesn't it stand to reason that he knows other hackers? I mean you can't just hire mitnick off of hire-a-teleco-hacker.com.
"As SecurityFocus Online reported last year, former hacker Kevin Mitnick claims extensive penetrations into Sprint's Las Vegas systems from approximately 1992 until his February, 1995 arrest -- smack dab in the middle of the call diversion complaints. Mitnick's access gave him the power to monitor or reprogram any phone line in town. Following that story, Munoz retained Mitnick as a technical consultant in his case, only to give him up later. Munoz says Mitnick wanted to run too many pointless tests; Mitnick says Munoz stiffed him and a partner for thousands of dollars in fees and expenses."
Who's to say he didn't step on one of his "associates" toes. And a disgrntled hacker decides he's gonna wreck the guys business.
At the very least his problems wouldn't have ended after he stiffed mitnick for money. it only would have gotten worse. Heck a few phonecall's by mitnick and...BAM...his problem get's worse. I think this guy is full of crap. That's why he didn't want mitnick "to run too many pointless tests". Not to mention who is this guy to know what tests are pointless or not?
Something is smells Fishy....and it's not just this guys employees....;) LOL
Contrast (Score:3, Funny)
In Monte Carlo, you can make the connection immediately, but you might get a spurrious busy signal a certain percent of the time.
At the risk of repeating myself... (Score:1)
huh Sprint claims no hacks in LasVegas? (Score:1)
Didn't Kevin Poulsen orginally get charged with hacking into teleco switches in LasVegas and breakins to telco centers searching for phone manuals?
and Didn't also several other teleco phone hackers breakin over the past ten years , so much so that every defcon conf in Lasvegas always has teleco cops, fbi, cai, and treausury officials in attendance?
uber-hackers? (Score:3, Interesting)
sometimes they dont even hijack the call they just tap it - then when the call girl shows up its too late and the "john" is already being serviced....
when the people who were losing out in this deal bitched to the fcc? the investigation showed that not a single call was lost. (basically the staff in the phone co were alerted to the investigation and stopped their hijacking while it was going on)
the thing was that the FCC gave the telco a WEEKS notice that they were going to investigate this... so the word got out and the mob held back.
this is BS and pisses me off. I would like to take a base-ball bat to the kneecaps of the idiots that gave the telco "notice of impending investigation"
Old, old news (Score:2, Interesting)
point 1 - Everyone in the outcall/adult business lies. A lot. About everything. The guy (don't know him) probably snorted all his cash, flaked out, and now wants to blame someone else.
point 2 - They systems guys at Sprint could easily redirect calls. They have access, and the office people / management don't know the difference. Nobody is paying attention.
point 3 - uberhackers? get real.
Could someone have phreaked the phones? -- Of course.
Did they? -- Who cares?
CALEA (Score:1)
CALEA - www.calea.org - is a federal mandate
that allows law enforcement to tap phone lines
remotely. Big Brother is listening in Vagas!!!
were they hacked? check the article author (Score:1)
David
Stolen 5ESS Switch (Score:1)