Technology Review - Published By MIT
Advertisement

Simson Garfinkel's blog

A commonsense take on computer security, usability and why IT does matter.

View Complete Bio
Advertisement
Thursday, April 05, 2007

Rogue Programmer Sabotages Navy's Computers

A recent case highlights the unwarranted trust we put in programmers and sysadmins alike.

Richard F. Sylvestre, a former government contractor who had a top- secret clearance, pleaded guilty on Wednesday to sabotaging computers used to track U.S. Navy submarines.

This is an amazing story. According to this article in the Virginian-Pilot, Sylvestre planted a logic bomb in several navy computers after his company was passed over on a bid. He then fled to Italy.

Apparently, three of the five navy computers used to track submarines were shut down as a result of these actions. If all five had been shut down, the navy would have been blind.

Cases of programmers going rogue and planting logic bombs are widely known in the computer industry. It's easy to forget how much raw power is yielded by programmers and system administrators. We want to trust these people. We need to trust these people. But ultimately, if we wish to protect ourselves and build a truly robust information society, we must develop techniques to minimize the amount of trust required.

Comments

  • Trusting Computer People
    This is interesting because it can ripple in everyone's life. How much trust should you put in the hands of computer technologists (which include technicians, programmers, and scientists in the way it's used)? Being a computer programmer and scientist I run into situations that try my moral standing regularly. Should I program something to bypass security restrictions - should I inform a person about a problem that is a security flaw - should I remember user's passwords - etc. The last one can be especially dangerous because it only takes about one time of typing a password in for me to remember it, and the memory can stay with me for a long time (years). I can only assume it's similar for many other computer people.

    The difference is most computer technologists have an unspoken oath to not use other's passwords, to not care what's on their computers (if it's illegal then tell about it, but if not then pay no mind), and to not use their programming to harm computer systems. These guidelines, that I follow if not others, ensure that my programs are trustworthy and are not meant to intentionally cause harm.

    New computer science programs have computer ethics classes that are required, which raise questions like the one posed by this article - if you have the power to cause harm and the reason, is it the right thing to do? We can see that even though this person fled he was discovered and imprisoned, so doing these things is not the right thing to do in any circumstance.

    In the end I think the lesson should be that the world isn't like the movie "Hackers," it's more advanced and more connected than ever and it's only a matter of time before the rest of the world becomes annoyed with hackers (actually, crackers), spammers, and phishers.
    Rate this comment: 12345

    Buckwheat469
    04/10/2007
    Posts:34
    Avg Rating:
    4/5
Advertisement

Log In

Forgot your password?     Register »
Advertisement
Technology Review November/December 2009

Current Issue

Natural Gas Changes the Energy Map
The United States has vast supplies of this cleaner fossil fuel. But how should we use it?
•  Subscribe
Save 36%
•  Table of Contents
•  MIT News
» Gift Subscription
» Digital Subscription
» Reprints, Back Issues
» Subscribe
» Table of Contents
» MIT News

More Technology News from Forbes

Advertisement
MIT Massachusetts Institute of Technology © 2009 Technology Review. All Rights Reserved.