We tested internet security at four Trump properties. Its not good.- Propublica

[octoberlib]

Any Half-Decent Hacker Could Break Into Mar-a-Lago

by Jeff Larson, ProPublica, Surya Mattu, Gizmodo, and Julia Angwin, ProPublica, May 17, 2017, 1 p.m.


Two weeks ago, on a sparkling spring morning, we went trawling along Florida’s coastal waterway. But not for fish.We parked a 17-foot motor boat in a lagoon about 800 feet from the back lawn of The Mar-a-Lago Club in Palm Beach and pointed a 2-foot wireless antenna that resembled a potato gun toward the club. Within a minute, we spotted three weakly encrypted Wi-Fi networks. We could have hacked them in less than five minutes, but we refrained.

A few days later, we drove through the grounds of the Trump National Golf Club in Bedminster, New Jersey, with the same antenna and aimed it at the clubhouse. We identified two open Wi-Fi networks that anyone could join without a password. We resisted the temptation.

We have also visited two of President Donald Trump’s other family-run retreats, the Trump International Hotel in Washington, D.C., and a golf club in Sterling, Virginia. Our inspections found weak and open Wi-Fi networks, wireless printers without passwords, servers with outdated and vulnerable software, and unencrypted login pages to back-end databases containing sensitive information.

The risks posed by the lax security, experts say, go well beyond simple digital snooping. Sophisticated attackers could take advantage of vulnerabilities in the Wi-Fi networks to take over devices like computers or smart phones and use them to record conversations involving anyone on the premises.“Those networks all have to be crawling with foreign intruders, not just ProPublica,” said Dave Aitel, chief executive officer of Immunity, Inc., a digital security company, when we told him what we found.

https://www.propublica.org/article/any-half-decent-hacker-could-break-into-mar-a-lago

[mnhtnbb]

1. Gee, what a surprise.