'All Your Data ❝Я❞ Belong To Us' Thread

[chalsall]

Originally Posted by Dubslow

https://www.us-cert.gov/ncas/alerts/TA18-074A

For those who don't know about it, SCADA controls your world's infrastructure.

For those who do know about, be very afraid if any part of that network is connected to the Internet.

Even "air gaps" can be a problem....

[ewmayer]

Originally Posted by Dubslow

https://www.us-cert.gov/ncas/alerts/TA18-074A

I have three questions which I'd like to see the Intel agencies address:

[1] How reliable is the Russian-government attribution? IOW, was spoofing ruled out, and if so, how?

[2] Are the Deplorable Rooskies uniquely bad in this regard, or are other state-level actors doing similar probing?

[3] Are we to believe our own Intel complex is not engaged in similar activities?

[Dubslow]

Originally Posted by ewmayer

I have three questions which I'd like to see the Intel agencies address:

[1] How reliable is the Russian-government attribution? IOW, was spoofing ruled out, and if so, how?

[2] Are the Deplorable Rooskies uniquely bad in this regard, or are other state-level actors doing similar probing?

[3] Are we to believe our own Intel complex is not engaged in similar activities?

Although I can't speak to 1 and 2, I should think that 3 is a very obvious "no". In fact I would think we're supposed to think that "we" are doing it even better than this report states.

[Dr Sardonicus]

Originally Posted by ewmayer

I have three questions which I'd like to see the Intel agencies address:

[1] How reliable is the Russian-government attribution? IOW, was spoofing ruled out, and if so, how?

Dunno.

[2] Are the Deplorable Rooskies uniquely bad in this regard, or are other state-level actors doing similar probing?

Dunno, but my guess is, "No, yes -- and non-state-level actors, too."

[3] Are we to believe our own Intel complex is not engaged in similar activities?

No. Have been, for a long time. My vague recollections from the distant past conjured the parameters "malware russia gas line explosion" for a Google search. Among the hits was this 2004 William Safire column.

In my estimation, the real problem on the US end is, the folks running power plants -- like the folks running a lot of companies in the private sector -- aren't taking this sort of thing seriously.

[xilman]

Originally Posted by Dr Sardonicus

In my estimation, the real problem on the US end is, the folks running power plants -- like the folks running a lot of companies in the private sector -- aren't taking this sort of thing seriously.

Another real problem, and I wish I could remember the guy's name, is that a PhD student had his thesis classified because its first version contained the locations of about a dozen locations where about a dozen back-hoes could take out over 90% of the internet in the US. His university kicked up a fuss and a censored version was submitted to allow him to gain his doctorate.

Nothing I've learned since suggests that the situation is any more resilient to spetznaz activity. Perhaps no news really is good news in this respect.

[Nick]

Our credit card company is introducing two factor authentication for Internet purchases: in addition to the existing checks, they want to send a mobile text message (SMS) which you then type in as well to complete the online transaction
At the same time, we have the impression that our telco is busy replacing its expensive old telephony switches with VOIP technology (they have just announced an end date for two-channel ISDN, for example).

So apparently we shall be relying more and more on the independence of the phone network while the distinction between it and the Internet becomes less and less...

[Dr Sardonicus]

Originally Posted by xilman

Another real problem, and I wish I could remember the guy's name, is that a PhD student had his thesis classified because its first version contained the locations of about a dozen locations where about a dozen back-hoes could take out over 90% of the internet in the US. His university kicked up a fuss and a censored version was submitted to allow him to gain his doctorate.

Nothing I've learned since suggests that the situation is any more resilient to spetznaz activity. Perhaps no news really is good news in this respect.

As I like to say, "Today's fiber-optic network is no match for an idiot with a backhoe." But that's unfair to backhoe operators, because it seems to be more often the case, the problem is a bad job of locating underground utilities.

Speaking of digging, a few minutes' worth of Googling turned up a

2003 WAPO story

that may refresh your memory about that dissertation.

[Uncwilly]

Originally Posted by Dr Sardonicus

As I like to say, "Today's fiber-optic network is no match for an idiot with a backhoe." But that's unfair to backhoe operators, because it seems to be more often the case, the problem is a bad job of locating underground utilities.

Speaking from personal experience, sometimes it is not the location services fault either. I consulted on a breach of a high pressure gas line in the 15 cm diameter range. The backhoe hit it after the meter, which is past the utilities responsibility. Meter by like The utility reps had no idea about the line. The local fire brigade was called to the location. Lots of fun....

[chalsall]

Originally Posted by Uncwilly

I consulted on a breach of a high pressure gas line in the 15 cm diameter range. The backhoe hit it after the meter, which is past the utilities responsibility. Meter by like

Yeah. Known in the industries as the "demarcation point".

Originally Posted by Uncwilly

The utility reps had no idea about the line. The local fire brigade was called to the location. Lots of fun....

I bet!

Hopefully no one was stupid enough to try to light a ciggy during the incident!

[Dr Sardonicus]

Originally Posted by Uncwilly

Speaking from personal experience, sometimes it is not the location services fault either. I consulted on a breach of a high pressure gas line in the 15 cm diameter range. The backhoe hit it after the meter, which is past the utilities responsibility. Meter by like The utility reps had no idea about the line. The local fire brigade was called to the location. Lots of fun....

That's interesting -- having what amounts to an HP gas main on the user's side of a meter. I'm guessing the customer was a major industrial operation -- which would be good, in the sense that it would probably be well away from residential areas. But -- with a meter right there, surely utility reps would at least have been able to identify who the customer was.

[Uncwilly]

Originally Posted by chalsall

Hopefully no one was stupid enough to try to light a ciggy during the incident!

The backhoe operator shut off the machine as soon as they realised what happened.

Originally Posted by Dr Sardonicus

But -- with a meter right there, surely utility reps would at least have been able to identify who the customer was.

The incident happened about 1.5km (pipe distance) from the meter. Yes it was an industrial site. They had not used the line (much, to heat the office, etc.) in several years. The on-site personnel did not know about the line.