> From a friend who still does contract work for LANL and wishes to remain anonymous:
> This has been known for years in the nuclear arms community. I don't know why they're making such a big deal out of it. Basically, the password was zeros because the system never got out of field prototype testing and was never officially deployed. There is copious documentation of this in the public record going back to the 1960s. Alas, the press consistently interpreted PAL as a live system, rather than the dead one it was. In reality, there was no way given the technology of the time (pre
robust encryption) of implementing PALs, despite what this author says. Any implementation would pose an unacceptable risk of launch failure in a crisis.
>
> In the book "One Point Safe," the author (I forget who) makes the point repeatedly that the U.S. nuclear force depended solely on a trustworthy chain of command to control weapons release. Safeguards such as dual consent, "no lone" zones, and shoot-on-violation were controls that did actually work, so PAL wasn't necessary. Today we would implement that system with SSH ;)
>
> The real threat to weapons security was never inside jobs. The exhaustive random selection and personell testing ensured that sleepers can't be planted. The true threat was, and still is, brute-force takeovers of launch facilities. To this day you can still tour many of these sites (as I have) without any credentials beyond a social security card and driver's license. Terrorists could exploit this exposure to take over a facility before any military authority could respond.
>
> This issue was a major topic of party conversation at Los Alamos.
"After analyzing Diebold's software source code that had mistakenly been left on an open Internet site, Rubin wrote a scathing report, saying that anyone with a minimum of computer knowledge could manufacture "homebrew" Smartcards and outsmart the system. He excoriated Diebold's software designers, who had built passwords such as 1111 into the machines, and said he would have flunked them in basic computer security classes."Full Article
« Older All We Hear is Radio Gaza.... | The "Bilderbergs" meet today.... Newer »
This thread has been archived and is closed to new comments
posted by caddis at 8:48 PM on June 3, 2004