Bureau of Industry and Security Hacked
The BIS is the part of the U.S. Department of Commerce responsible for export control. If you have a dual-use technology that you need special approval in order to export outside the U.S., or to export it to specific countries, BIS is what you submit the paperwork to.
It's been hacked by "hackers working through Chinese servers," and has been shut down. This may very well have been a targeted attack.
Manufacturers of hardware crypto devices -- mass-market software is exempted -- must submit detailed design information to BIS in order to get an export license. There's a lot of detailed information on crypto products in the BIS computers.
Of course, I have no way of knowing if this information was breached or if that's what the hackers were after, but it is interesting. On the other hand, any crypto product that relied on this information being secret doesn't deserve to be on the market anyway.
Posted on October 11, 2006 at 7:16 AM • 22 Comments