<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Hacker Gets 3 Years For 911 Hoax</title>
	<atom:link href="http://www.liquidmatrix.org/blog/2008/03/28/hacker-gets-3-years-for-911-hoax/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.liquidmatrix.org/blog/2008/03/28/hacker-gets-3-years-for-911-hoax/</link>
	<description>Bringing Fire To The Village: Your Source For Computer, Network &#38; Information Security News from Dave Lewis, Security Blogger</description>
	<pubDate>Sat, 05 Jul 2008 03:42:30 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: CJ</title>
		<link>http://www.liquidmatrix.org/blog/2008/03/28/hacker-gets-3-years-for-911-hoax/#comment-68633</link>
		<dc:creator>CJ</dc:creator>
		<pubDate>Fri, 28 Mar 2008 13:53:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.liquidmatrix.org/blog/2008/03/28/hacker-gets-3-years-for-911-hoax/#comment-68633</guid>
		<description>"Wow...this could have cost someone their life."

Indeed.  Swatting is a particularly bad deal in that you are almost always anonymous (unless you mess up such as this kid did) and all 911 reports generally must be followed up on.

http://en.wikipedia.org/wiki/Swatting

I work for an organization that provides a variety of critical infrastructure services, including fielding first responders such as police and fire.  We practice incident response scenarios that include a flood of legitimate-sounding 911 traffic in order to understand how we might be able to triage the real reports that come in between the cruft.  If you DoS a 911 call center with fake reports and don't have a method to triage, people will indeed die.

An example of how difficult it is for ill-funded organizations (remember that most 911 call centers are run by City or County government that prioritizes fixing potholes before critical infrastructure protection) to track down callers:

http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/02/14/BATLV38B8.DTL</description>
		<content:encoded><![CDATA[<p>&#8220;Wow&#8230;this could have cost someone their life.&#8221;</p>
<p>Indeed.  Swatting is a particularly bad deal in that you are almost always anonymous (unless you mess up such as this kid did) and all 911 reports generally must be followed up on.</p>
<p><a href="http://en.wikipedia.org/wiki/Swatting" rel="nofollow">http://en.wikipedia.org/wiki/Swatting</a></p>
<p>I work for an organization that provides a variety of critical infrastructure services, including fielding first responders such as police and fire.  We practice incident response scenarios that include a flood of legitimate-sounding 911 traffic in order to understand how we might be able to triage the real reports that come in between the cruft.  If you DoS a 911 call center with fake reports and don&#8217;t have a method to triage, people will indeed die.</p>
<p>An example of how difficult it is for ill-funded organizations (remember that most 911 call centers are run by City or County government that prioritizes fixing potholes before critical infrastructure protection) to track down callers:</p>
<p><a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/02/14/BATLV38B8.DTL" rel="nofollow">http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/02/14/BATLV38B8.DTL</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>
