◆ SpookStack

TUSSI LL INFIRMATIGN CONTAINE> bé -1, -2 bic -1, -2 02/26/2002 04:16 PM cc: Subject: second press query: NYT intranet exposure . . .. 5 . be -2 jet's talk more about pulling thi pic 2 bIUE -1 This reporter is fiting tonight too, and word gets around quickly in the hacker community. Don't want more folks hitting the sites. If it's not secure, and personal info is out there, we may want to err on the side of caution until we're sure, ~-- Forwarded by lon 02/26/2002 04:09 PM --—---—~ pee 2d lon 02/26/2002 03:57:28 PM ce: Subject NYT intranet exposure b6 -2 LC] bic -2 A source of mine tells me that the NYT Corporate Intranet was exposed via a rogue proxy on the company's netblock. He has sent me detailed screen shots and information. I'm writing to solicit any general comments the company is prepared to make on this development. I have also included some specific questions below, if you'd care to address them. Has the NYT disabled access to the sites in question, and had anyone there previously expressed concern that such an exposure might come to pass? How long has remote access been available through this network? Did the Times take any steps in particular to prevent the sort of high-profile defacement left in 1998 by the group “Hackers for Girlies"? Thanks in advance for your help. This is for a story I'm filing this afternoon. I'll call you as well. Sincerely, FBI(19-cv-1495)-96