Neil Hopcroft

A digital misfit

I’m in the room at the top corner of the 70s concrete building stood atop one of the few hills in Norwich – our view covers the city centre, giving us a perfect vista for spotting fires in the city. There are six of us there, my boss, Simon, and a co-worker, Teresa, have already shown something of an enthusiasm about firemen. We’re setting up a new system for the council, collecting data and importing into the new database. Very occasionally we’ll get a call, mostly they’re from database support people returning calls made by the team leader.

One day, I don’t even remember what day it was, I take a call from a guy with a heavy Irish accent – “Theres a bomb”, he said, “lots of people are going to lose their lives”. This is not something I’d ever been trained for, but I knew that you were supposed to keep them talking. I don’t know that you can ever really deal with these kinds of things well, even if you’re trained for it. Its not like its something you get to practice much.

So I try to keep him talking. And while I am doing that I write the word ‘bomb’ in big letters on the jotter pad next to the phone to show to someone else in the room. My mind isn’t enough on what he is saying to remember it all, those words above are all I can remember now. He hangs up.

I’m shaking, and I try to explain to Simon what just happened. He calls the police, who come and evacuate the building – we share it with Norwich Union (I think, since I used to take great pleasure in walking in with a Legal and General umbrella, its the small things that make life interesting).

Outside, once they’ve made sure the building is safe, I talk to the police who take a statement from me. Not that I’ve really got much to say. We file back in, life goes on.

The next day I find out that seven or eight other council and utility buildings in the city had similar calls, nothing suspicious was found in any of them.


7 comments

  1. Place I used to work for, part of the NHS, used to be part of the DSS and when it used to be part of the DSS they actually had a form to complete if you got a call of a dubious nature. As far as I remember, it had a list of specific details to list about the call you received, accent being one of them (and as this was around 1994 it listed Irish accent as one of the categories, due to the IRA still being a major threat). The form was never renewed when the NHS took over, but it always seemed a good idea to have one around if you ever had such a call (quick thinking isn’t one of my specialities and I’m sure such a guidance sheet would not only keep me right, but provide info for the police which I might forget later on).

    Now, I don’t work there anymore, but I heard through the grapevine (as you do) that recently someone was opening post there and one of the envelopes they opened contained a white powder. The building was immediately quarintined and after about half an hour they remembered to switch off the air circulation system (too cheap to have air-conditioning) to contain any contaminant to one floor. Luckily, the powder turned out to be harmless and they all lived happily ever after.

    Scary world we live in.

  2. I think you coped well emergency situations and contigency planning is so irrelevant accept on those few and far between occassions that you need them.

    • Not sure coped well, but did what seemed to be the right thing. Noone was hurt and noone was (openly) upset with the way I handled it. Its not something I want to have a chance to practice, though.

      The contingency planning kicks in at the next stage, once the report has come in it goes to management who then know what to do about it. Theres a plan of how to deal with the information, and one of how to deal with a bomb itself.

  3. Their permanent staff got training like that, but I was only a temp and shouldn’t really have been answering the phones anyway, but that was just part of the job.

  4. We figured it was just a guy with a grudge, it was reassuring (for me at least) that we weren’t the only office to recieve such a call – that meant there was no suspicion on me for making it up. Not much we could do to trace it, or, at least, I never heard any more about it.

  5. Theres not a great deal of point providing nice interfaces to these things – any attacker isn’t going to behave how you would, so it’ll be near impossible to figure out what you need from the logs until you’re in the investigation phase after the fact anyway. At which point you should know exactly the kinds of things you are looking for and don’t need to spend a lot of time nice-ifying it.

    These things always fall into the ‘rational enemy’ trap, you can always think about how and why you would go about an attack, and then assume that all attackers will behave the same way.

  6. Its not just funding, though, if you’re one of 100,000 users at an ISP they’re far less likely to notice you doing something strange ‘cos they’ve got thousands of customers doing strange things.

    Reduces the single-point-of-failure problems, too.

Leave a Reply

Your email address will not be published.