Las Vegas's Seedy Technical Underbelly 72
An unsigned submission notes: "Kevin Poulsen's new article on cybercrime in Vegas features tons of cool stuff from pimps, prostitutes, and Gambino family mob hits to an explanation of Sprint's telephone infrastructure. Check it out at SecurityFocus ..." This stuff is worthy of a book.
Re: Las Vegas's Seedy Technical Underbelly (Score:1)
Step away from the computer. Take a deep breath. Look in the mirror. Realize the lunacy of asking that question.
Re:Tech in Las Vegas (Score:1)
Someone on the inside. (Score:2)
[OT] Re:Need...Help.... (Score:2)
1.) You'll fail the first time you take it because you don't know what you're doing.
2.) You'll fail the second time you take it because you think you know what you're doing.
3.) You pass the third time you take it because you know you don't know what you're doing, but you've seen it enough times to be comfortable accepting it.
It's older than that. (Score:2)
How about the *cool* tech stuff? (Score:5)
I'm not even going to go into the major stuff-- like the huge video billboards, the amazingly cool video poker games (looks like a ghost with gloves is dealing your cards, etc.), or what controls all those modern roller coasters and animatronics shows. Oh, no. I'm going into the seemingly mundane stuff that is STILL cool.
For one thing, consider the accounting methods. The State of Nevada has some *tough* requirements on pay-out, odds-tracking, etc. for slot machines and other games. Not only are we talking about ledgers, here, but also advanced statistical bookkeeping. So it isn't surprising that there's a booming mini-industry in accounting and statistical packages specifically targetting the casino business.
Not only that, but usage statistics become critical (hey, why does everybody play poker in the evening, slots in the morning?). If a game isn't playing well (nobody likes it), a casino will dump it in favor of a more popular game. So software to track usage is a big deal, too. And demographic information is used a lot, too(old people like slots, right?).
Then we can talk about the various shops and attractions. Ever visit the forum shops? Ever imagine how much goes in to making the lights all dim or brighten at the same time? How about turning the sky from day into night? And let's not forget the fountains and other novelties.
Vegas really has some cool tech under the hood. That's mainly because casino owners are smart folks-- they know how to use technology to their advantage, and don't mind paying for the privilege.
Pulling Strings (Score:1)
Re:Tech in Las Vegas (Score:1)
And re Sprint, I wouldn't be surprised if someone were mucking about with their lines, they are notorious out here for their lack of internal communication and being clueless about their own systems...
Re:Tech in Las Vegas (Score:1)
Oh yeah, Mpower isn't the shiniest penny in the stack either, but I went with them over Sprint last time I had a phone line installed. I never had any problems with them, but then again, I've never done business with em in a commercial setting. It's odd, in every industry aside from development and entertainment, Vegas really does seem to breed mediocrity.
In a nutshell (Score:5)
I'd like to place an order... (Score:1)
I got your email address from your paper. I'd like a hooker. Please send to 204 Greendale Drive. Thanks.
I sure hope this message doesn't get diverted somewhere...
--riney
Re:Is it my imagination.... (Score:3)
--
Re:Tech in Las Vegas (Score:5)
Huh? Last time I went to Vegas, I LOST almost all the money I made. They don't call it "Lost Wages" for nothing.
--
Talk about Ammo for +5 Funny (Score:2)
Seen this before... (Score:1)
This explains so much... (Score:3)
I got woken up by a guy with a vaguely New York accent wanting for me to change long distance plans, and implying that without that level of "protection," something terrible could happen during my next telephone call. Now it all makes sense.
Re: (Score:2)
Re:need...redesign....badly (Score:1)
Re:Its still so easy... (Score:1)
And now that I think about it, all of the ones I can name are 3Com gear.
Re:Tech in Las Vegas (Score:2)
My former boss loved not having to teach me to do things... show me a problem and tell me where I can find the manual.
Re:Someone on the inside. (Score:2)
It's an out-of-band signaling system (hence the "SS") for routing switching messages -- all the bits of call setup and teardown.
See also: http://www.iec.org/tutorials/ss7/index.html [iec.org]
Re:Tech in Las Vegas (Score:2)
---
Re:Tech in Las Vegas (Score:2)
Thorpe's legnedary book "beat the dealer" was based on trials of thousands of hands on a mainframe simulator. These guys today can run simulations of billions of hands. Card counting isn't THAT hard, and it's kind of fun that the casinos will kick you out for it (but IT IS NOT ILLEGAL), giving it a real "james bond" feel.
That being said, you have to have a huge bankroll and play a LOT to make any money. I do it strictly as a hobby (and don't even count all the time while in vegas).
bj21.com is a great place to start about the world of card counting. Cardcounter.com isn't bad either.
---
vegasgirls.com /.ed ? (Score:4)
HIS NAME WAS KEVIN PAULSON (Score:1)
Its still so easy... (Score:2)
One really wonders then what kind of other devices are so easily accessible, and what all they let you do. This case with the CALRS system really scares me. And the only level of security there is obscurity.
"We're the phone company..." (Score:2)
-- fencepost
Re:It's older than that. (Score:1)
Re:need...redesign....badly (Score:1)
Paul
Re:vegasgirls.com /.ed ? (Score:2)
Yeah, It isn't like /.ers like to look at hotties on the net or anything...
And Kevin Mitnick wasn't guilty? (Score:1)
But based on the exploits he's credited for bragging about in this article, the guy decieved, manipulated and tore his way into places where he didn't belong, posing as a technician, programmer, whatever. Perhaps the legal process he was put through was wrong, but if this article is right, Mitnick was no good kid who was wrongly framed.
--SC
Went to the website (Score:5)
It was close to being slashdotted. Still, I found a unique banner ad, which read:
Boy, those security focus people sure do take their security seriously!
Re:Occam's razor needed (Score:1)
I really doubt if any hotel has a DMS-x, to call a switch of that class overkill for a hotel would be an understatement. Mitel [mitel.com] dominates the hospitality industry anyways, with over 80% of installed hotel PBXs being Mitel. Hotels typically do not do any configuration or maintenance on their PBX in-house. With this in mind, perhaps a look at the companies doing the service on some of the hotel's PBXs would be in order.
maru
What to ask for (Score:4)
Data mining his caller ID info should tell him where in the network his calls are being diverted. And he should probably have an autodialer dialing his own numbers every 10 minutes or so as a check.
Re:Kevin Poulsen (sp?)... (Score:1)
Coders Union?? (Score:1)
And please, oh please, make the online mob NOT use 13373 SP34K!
PH33R M4 13373 M0B SK1LLZ D00DZ!!!!11
*Cringe*
Re:Slightly offtopic... (Score:1)
--
Slightly offtopic... (Score:4)
And, no, I'm not affiliated with them, YMMV, IANAL, IIRC, etc.
--
Re:Kevin Poulsen (sp?)... (Score:3)
~alisdair
Re: Las Vegas's Seedy Technical Underbelly (Score:1)
pimps and prostitutes? sounds like my idea of a fun weekend....
Fun weekend? I don't know which pimps and prostitutes you associate with.
.
need...redesign....badly (Score:5)
And you wonder why the dot.coms went down in flames??
Criminals (Score:1)
Or rerouting my calls to 1-800-BETS-OFF to a sports betting line...
Re:Coders Union?? (Score:1)
Enigma
Phone Piracy Wanted (Score:5)
Re:Occam's razor needed (Score:1)
If they have informants, then their informants are very, very, very good at what they do. If I'm scheduled to test a phone line I could show up early/late, do it from home, ask someone else to do it if I'm really busy. I could notice that someone had logged into a box that no one was supposed to be using. I could check activity logs(now we have to have informants/conspirators with high security/admin access to the switches). Any number of things could cause the informants info to be inaccurate and the conspiracy uncovered. And they also have to know when Joe Random reporter makes his own "test calls"(as someone affiliated with the article did) and have people inside AT&T as well(since they had similar issues/investigations).
Occam's razor seems to be eminently suited to this story.
Steven
Re:Occam's razor needed (Score:2)
Anyone who read the article and saw this and still believes it's a conspiracy instead of just plain crappy/overloaded service has got to be a serious paranoid.
Jeebus on a pogo stick! 23/205 failed? That's a crazy nuts percentage! And it's not just Sprint either. Now they may have vulnerabilities to people like Mitnick, but that's different than simple overload.
Steven
Is it my imagination.... (Score:5)
Steven
A synopsis of the article (Score:5)
Pimp: Some jerk is buying/threatening/hacking the telco so they'll redirect my calls to some other pimp! Wah!
Telco: We've spent time and resources on these complaints and we haven't found any foul play. Most test calls go through fine and the ones which don't look like ordinary errors.
Kevin Mitnick: The Telcos are so freaking stupid it's not funny. I blackmailed some poor schmoe into giving me some info that should have been protected, then called some other fool and pretended I was an employee to get more "secret" data. I cracked the system and used it to steal services from other people or to hide my real location.
The Mob: Yea, we tried to set up a phone-redirect-to-our-pimps scam. Our guys got busted and spent years in jail. The enforcer we sent to horn in on some local pimp's business got busted and died in jail.
My analysis? Pure sensationalism in it's style, but has some valid points.
Any large company is going to be vulnerable to these kinds of exploits. It's just impossible for the right hand to always know what the left hand is doing. What Mitnick says may well be true.
I have no doubt that prostitution is big business in Vegas, but just because one or two pimps aren't getting the kind of business they used to doesn't imply a conspiracy. Maybe jons got smarter and started using the net to look up hoes? [google.com]
As far as the conspiracy? I would be very suprised if they privy enough to Sprint's info to avoid detection. Not doing something illegal when the boss is looking is a lot harder if you don't know when the boss is looking. As we've already established, the right hand doesn't know what the left hand is doing, how is a third party supposed to be on top of test schedules and investigations?
Steven
Telephone switches are breakable (Score:1)
Hmmm.. Odd (Score:3)
Vegas and Microsoft (Score:1)
Re:Tech in Las Vegas (Score:1)
Perhaps you should play the lottery.
After all the stupid tax can always tax you more if you want it!
The Lottery:
Soooo.... (Score:1)
Re:Kevin Poulsen's past (Score:1)
Kevin Poulsen's past (Score:4)
Tech in Las Vegas (Score:3)
Re:How about the *cool* tech stuff? (Score:4)
Absolutely!
I managed an R&D data center with oh maybe 600 servers or so - lots of small boxen with their own disks, etc plus a handufl of LARGE Auspex/Net Appliance/HPUX K&N-Class type boxes. Well, we decided to try and centralize storage for as many systems as possible to improve backups, get better utilization of RAID storage, ie what we paid for, etc
So we were dealing with a bunch of he big name SAN vendors (Clarion, EMC, etc) So durin gtheir roadshows with us - giving us technical info ont eh systems and how they scale - they each trootted out as one of their 'big' customers who proved multi site SAN was workable and a good idea: Las Vegas Casinos. The data networks and systems tracking everything there are IMMENSE and it was amazing to get even a high level glimpse of how it was all setup. Absolutely mind boggling.
--
Re:Occam's razor needed (Score:5)
Why is everyone concentrating on Sprint? All these hotels have monster PBXs - heck a few probably have DMS-100 class systems given the # of lines they require - a bit much for all but the beefiest PBXs.
It would be trivial for them to redirect the calls - either manually or even automagically with routing tables. Since they own it - they can easily do it and I honestly can't imagine it would fall under the jurisdiction of the PUC since it ain't a public utility! THey own the PBX, you use their phones, and as long as they meet various requirements (you can reach 911, etc) no problem. I honestly wonder if doing in on a PBX would be illegal! And eve nif it was - and they did - Sprint would still be out of the picture.
--
Seen it on the Register already... (Score:1)
Anyway I can resume the article by: "Crooks meet phreakers in Vegas and become life-long friends. Sprint denies."
In case of Slashdotting... (Score:5)
For the HREF paranoid:
http://www.theregister.co.uk/content/6/18950.html
Re:I'd like to place an order... (Score:1)
---
Great read, but... (Score:1)
it seems unlikely that this could be true.
I think that any investigator with a free weekend could find out if you can in fact call these people during certain times from motel rooms, jail, wherever.
Now whether Las Vegas itself is a scam is another story.
Re: Las Vegas's Seedy Technical Underbelly (Score:1)
There's probably an ad campaign in the works for a new calling plan. Now Sprint customers can keep in touch with their friends and relatives, and earn rewards points towards good for lap dancers sent direct to their home or office. The only downside is that their office must also subscribe to Sprint, or find themselves facing a sudden and inexplicable lack of phone-based business.
Re:Occam's razor needed (Score:2)
Second, should we expect anything less than a seedy underbelly to all in the 'City of Sin'?
Re:need...redesign....badly (Score:1)
Occam's razor needed (Score:3)
The population doubles on the weekends, so of course the phones start going intermittent every Friday evening. People who live there oughta know that.
Re:Monitoring PBX Logs for what? (Score:2)
Now imagine you're a poorly paid hotel PBX operator. "Knuckles" approaches you after work one night and offers you a few hundred bucks if you inform him of calls to escort services...
And if you don't? He'll find somebody else...or worse. Is it that hard to imagine now?
CTP
Re: Las Vegas's Seedy Technical Underbelly (Score:1)
Mitnick (Score:1)
Oh no! (Score:1)
Oh wait, I get it.
Re:Kevin Poulsen's past (Score:1)
Poulsen was involved in a scheme that blocked callers from a radio station contest line, except for lines belonging to him and two others. I believe they won a Porsche. Heck, I have the case around here somewhere (my lawyer cited it in my case.)
Here it is. It's an appeal ruling for another guy, Justin Peterson. But it metions Poulson and Ronald Austin winning at least two Porsches, $30,000 cash, and two trips to Hawaii. Sweet. I hope they got to enjoy it for a bit before their lives got completely fucked by the bust.
Re:Occam's razor needed (Score:1)
I know AT&T Canada Corp. is pushing Centrex more, in most cases it's less expensive to use, because the CLEC(us(AT&T Canada Corp.)) in this case looks after the equipment, making sure it has the latest software load, etc. The customer does not have to purchase the PBX equipment.
Small companies and apartment buildings seem to use PBX more, because the number of lines needed is usually very small.
I can't see a hotel using a DMS-x switch. For a DMS 100/200 the line size can grow to over 135,000 lines.
-------