Hackers, probing Clinton server, cite security lapses

OldRegular · Mar 12, 2015

Hackers, probing Clinton server, cite security lapses

By James Rosen, Published March 12, 2015FoxNews.com

Stirred by the controversy surrounding Hillary Clinton’s use of a private email server when she was secretary of state, a determined band of hackers, IT bloggers, and systems analysts have trained their specialized talents and state-of-the-art software on clintonemail.com, the domain under which Clinton established multiple private email accounts, and uncovered serious lapses in security, according to data shared with Fox News.

The findings call into question Clinton’s confident declaration, at a hastily arranged news conference in New York on Tuesday, that “there were no security breaches” in her use of a private server. One prominent figure in the hacker community, bolstered by long experience in the U.S. intelligence community, has undertaken to build a virtual “replica” of Clinton’s server configuration in a cyberlab, and has begun testing it with tools designed to probe security defenses. This individual has shared details of the Clinton system not disclosed publicly but legally obtainable.

Among other things, outside experts have managed to trace the most recent location of Clinton’s server – something she did not specify during her news conference and a subject of much speculation, as the server’s physical placement would provide early clues about whether the data stored on it was adequately secured against compromise by private-sector hackers and foreign intelligence services.

Fox News has previously reported that, with the aid of software named Maltego, experts had established that the server is up and running, receiving connectivity to the Internet through an Atlanta-based firm called Internap Network Services Corporation. Clinton’s stern insistence at her news conference that her server “will remain private” would appear to rest, then, at least in part, on the inviolability of Internap.

Now, working with publicly available tools that map network connectivity, experts have established that the last “hop” before the mail server’s Internet Protocol, or IP, address (listed as 64.94.172.146) is Internap’s aggregator in Manhattan (listed as 216.52.95.10).

“This is a very strong indication that the clintonemail.com server is in Manhattan,” the source told Fox News.

By entering the IP address for the Internap aggregator into existing databases, the experts obtained the exact geolocation coordinates for the aggregator – revealed to be on lower Broadway, at the intersection with Chambers Street, some two blocks north of City Hall. This in turn suggests that the Clinton server itself lies within close proximity – most likely former President Clinton’s Harlem office, and not as far away as the Clintons’ home in Chappaqua, N.Y.

That outside experts could so swiftly unearth such information left them convinced that the server remains, as presently configured, highly “vulnerable” to unauthorized intrusion – even if, as most observers suspect, the server, with so much publicity now attendant on it, is no longer in active use. The hackers further concluded that Clinton’s email operation was likely not much better secured when she was secretary of state.

To test that proposition, they took the relatively simple step of examining the source code on the front page of clintonemail.com. This yielded the discovery, sources told Fox News, that the Clintons have not been using the latest version of Microsoft Outlook Web Application (OWA) to send and receive emails. The most recent version of OWA is listed as 14.3.224.2, whereas tests show clintonemail.com to be using the older 14.2.390.1.

“[It’s] an indication they’re not keeping up with software upgrades,” one hacker told Fox News. “If I were a bad guy, I'd start looking for any vulnerabilities in that older version they're using.”

http://www.foxnews.com/politics/2015/03/12/hackers-probing-clinton-server-cite-security-lapses/
Click to expand...

OldRegular · Mar 12, 2015

Hillary claims there was never classified emails on her server. But! Since most State Dept. information is classified and that was the only server she used how is that possibly true?

Salty · Mar 12, 2015

OldRegular said: ↑

Hillary claims there was never classified emails on her server. But! Since most State Dept. information is classified and that was the only server she used how is that possibly true?
Click to expand...

Depends - what IS the definition of classified?

OldRegular · Mar 13, 2015

Salty said: ↑

Depends - what IS the definition of classified?
Click to expand...

To hear some ex State Dept officials define it, State Department information!

Hackers, probing Clinton server, cite security lapses

OldRegular Well-Known Member

OldRegular Well-Known Member

Salty 20,000 Posts Club
Administrator

OldRegular Well-Known Member

Useful Searches

Hackers, probing Clinton server, cite security lapses

OldRegular Well-Known Member

OldRegular Well-Known Member

Salty 20,000 Posts Club Administrator

OldRegular Well-Known Member

Salty 20,000 Posts Club
Administrator