Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

US passes emergency waiver over fuel pipeline cyber-attack

bbc.com

Post reply on HN
Print view View original

161–170 of 479 posts

Re: US passes emergency waiver over fuel pipeline cyber-attack

#161

Post by fennecfoxen »

ignoramous wrote: post #146
JumpCrisscross wrote: post #128

Earlier quoted context omitted.

> US Gov should make it clear, if you are a critical service and if your service drops due to items being on the internet, for each occurances 10% of your total revenue (including your parent companies) are forfeited This sounds good in theory but suffers from the cobra effect [1]; you think you’re incentivising security. You’re actually pushing obscurity. Colonial preëmptively shut down its pipe to prevent physical…

I reckon air-gapped networks are a valid defense. If something needn't be connected, why let it? It mitigates so many threats.

Pipelines run for thousands of miles and operate 24/7. What do you imagine? Keeping a fleet of helicopters on standby to pick up a technician at home, and drop him wherever the equipment is, in case something needs to be adjusted at night?

Re: US passes emergency waiver over fuel pipeline cyber-attack

#162

Post by fennecfoxen »

arcticbull wrote: post #158
ignoramous wrote: post #146

Earlier quoted context omitted.

I reckon air-gapped networks are a valid defense. If something needn't be connected, why let it? It mitigates so many threats.

Can an individual not accidentally or intentionally infect a computer not connected to the internet?

It's called Stuxnet, and it ruined 20% of Iran's uranium centrifuges. Which were air-gapped.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#164

Post by zaroth »

arcticbull wrote: post #158
ignoramous wrote: post #146

Earlier quoted context omitted.

I reckon air-gapped networks are a valid defense. If something needn't be connected, why let it? It mitigates so many threats.

Can an individual not accidentally or intentionally infect a computer not connected to the internet?

Air gaps didn’t save Iran. Air gaps are just one layer in the onion.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#165

Post by dabbledash »

fennecfoxen wrote: post #161
ignoramous wrote: post #146

Earlier quoted context omitted.

I reckon air-gapped networks are a valid defense. If something needn't be connected, why let it? It mitigates so many threats.

Pipelines run for thousands of miles and operate 24/7. What do you imagine? Keeping a fleet of helicopters on standby to pick up a technician at home, and drop him wherever the equipment is, in case something needs to be adjusted at night?

Are pipelines something we invented after the internet? Have we lost the knowledge we used to support infrastructure before the 90s?

Re: US passes emergency waiver over fuel pipeline cyber-attack

#166

Post by throwaway67765 »

ridethebike wrote: post #29
oldgregg wrote: post #21

False flag in the run up to a severe regulatory clamp down. Won't be the first or the last.

Mind if I asked where did you get this info?

Here’s the WEF head warning about a “cyber pandemic” that would make COVID look like a minor disturbance: https://www.youtube.com/watch?v=uD6C63ZuDlQ

This is the same group advocating for The Great Reset, and predicting people will “own nothing and be happy”.

It does seem like there is a plan in place for the controlled demolition of industrial society to depopulate the planet and solidify a neo-feudal order of rule by a breakaway elite.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#168

Post by world_peace42 »

kingsuper20 wrote: post #79
jmclnx wrote: post #4

It needs to be asked again, why are critical services on the Internet ? We all know why, companies are chasing profits at any cost, so hiring more people to monitor these systems as the did 40 years ago will lower the execs bonuses. The US Gov should make it clear, if you are a critical service and if your service drops due to items being on the internet, for each occurances 10% of your total revenue (including your…

> That will get them serious about security. My guess is that they only get serious about security after a breach occurs. You can view it all as strengthening an immune system. Without attacks, and the occasional successful ones, nobody is going to bother to harden anything.

I don’t think the analogy applies. We are humans, capable of observing the failures of others and making rational decisions to avoid those same failures. The immune system is programmed to react one specific way. For example, we can choose or choose not to go out of our way to get vaccinated. If someone doesn’t get vaccinated and infects a dozen other people and then get really sick themselves, it’s hard for me to have sympathy. Unfortunately here, when there’s an illness, millions of people have private information leaked. This should simply be an unacceptable.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#169

Post by User23 »

kmbfjr wrote: post #119
User23 wrote: post #20

Is this event going to give Americans a new appreciation of pipelines? One of Biden’s signature issues was killing Keystone after all.

What makes you think Keystone and this pipeline are the same in any way? They are not, and you should know the difference before dragging political nonsense totally irrelevant into the topic at hand. I know, some people just can’t help themselves but to color everything in a political binary.

I suppose I’m very naive, but I’m under the impression that they’re the same in the way that that they’re both meant to provide necessary fuel oils to local markets in an efficient way.

And that maybe it would be good to have redundancy, which requires allowing new pipelines to be built. It’s not my fault that that’s somehow a “political issue,” which as far as I can tell means something that your preferred propaganda sources have conditioned you to have an emotional response to that overwhelms any hope of reasoning.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#170

Post by WalterBright »

chiph wrote: post #117
refulgentis wrote: post #80

Earlier quoted context omitted.

I'm really confused: the pipeline is resilient to a hack: they just shut down the pipeline so it won't be 'affected' (hacked?)?

It was intended to be airgapped, but we're talking about a pipeline that is several thousand miles long, with many pumping stations and delivery terminals. All it would take is one of the SCADA systems at one of those locations to suddenly open a valve and dump petroleum out into the environment to cause a disaster. Or worse - rapidly open & close valves in rhythm, and the water hammer effect (the inertia of the petr…

In airplanes, this is dealt with by having an independent system monitoring things.

Think what would happen if the autopilot suddenly went berserk and did a hardover.

Post reply on HN