Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

US passes emergency waiver over fuel pipeline cyber-attack

bbc.com

Post reply on HN
Print view View original

331–340 of 479 posts

Re: US passes emergency waiver over fuel pipeline cyber-attack

#331

Post by raister »

zucker42 wrote: post #194
tgsovlerkhgsel wrote: post #13

That gang may have bitten off more than they can chew. They've now gotten the US government involved officially, which means that beyond the sheer mass of resources that will go into tracking this gang, the government also has something to prove now. Being at the center of an international incident is probably not good for business.

Doesn't every cyberattack get attention from the U.S. government? After all, carrying out a cyberattack is a federal crime.

I'm going to link this here: https://attack.mitre.org/ Those are only the reported attacks. You could check groups as well, and their TTPs.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#332

Post by cracker_jacks »

magnusss wrote: post #278
DistressedDrone wrote: post #257

Earlier quoted context omitted.

I assume you're thinking of blockchain tech? How do you think the genie will be put back in the bottle?

The US and other government wills outlaw all cryptocurrencies but the ones that they control (“Govcoin,” as The Economist refers to them). Game over.

You're assuming the US and other government are not using cryptocurrencies for their own covert transactions.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#334

Post by westpfelia »

Enginerrrd wrote: post #7

Something doesn't quite add up. I feel like we don't have the full story: >After seizing the data, the hackers locked the data on some computers and servers, demanding a ransom on Friday. If it is not paid, they are threatening to leak it onto the internet. So... that constitutes a state of emergency? What data would they have that would be so sensitive? More likely they have hooks deep into the operation of the pipe…

The Fuel company in question apparently handles 40% of all the fuel in the NE sea board. So thats probably a problem.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#335

Post by 6nf »

hosteur wrote: post #327
6nf wrote: post #294

Earlier quoted context omitted.

> You could have an air-gapped system and still have remote access You're suggesting the gas company run their own network, and then you assume no employee will connect that network to the general internet for their own convenience? Not happening.

That would be a fireable offense. Even criminal.

Again, stuff like that just don't happen. It's too inconvenient. How many major utility companies run such airgapped networks?

https://gca.isa.org/blog/common-ics-cybersecurity-myth-1-the...

Re: US passes emergency waiver over fuel pipeline cyber-attack

#336

Post by speed_spread »

jay_kyburz wrote: post #82
vmception wrote: post #6

I like how they are charging 10% more if you pay with Bitcoin than with Monero. I think commerce would greatly improve if other networks had Tor clients, especially because of the stablecoin and private stablecoin availability as of this year. All EVMs as well as Tendermint networks have no out of the box solutions for Tor nodes and connectivity. But they both have ways for ERC20 tokens to have a great degree of priv…

Is it illegal to pay the ransom?

At least for public services in Canada, it is. Which serves as as a deterrent since attackers are guaranteed to _not_ get money. Also whips management into more than CYA-and-wait IT security.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#337

Post by londons_explore »

l33t2328 wrote: post #301
peteretep wrote: post #97

Earlier quoted context omitted.

"nation-state" is not just a fancy infosec word for country, and there's some debate as to whether the USA constitutes an actual nation state, rather than a state.

The USA is absolutely a nation state. Cocal-cola, mcdonalds, Christmas, enlgish, etc. are well dispersed throughout the entire population. We have a uniform culture, although not as uniform as much smaller countries, but uniform nonetheless.

Arguably the "nation" of the USA extends into England, Australia, Israel and a few other places which have taken a lot of the culture.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#339

Post by SavantIdiot »

david-cako wrote: post #27
xvector wrote: post #25

The government is incompetent, especially when it comes to cybersecurity. It will be interesting to see how this plays out.

Who was it again that has the most effective intelligence community and military in the world?

The effectiveness of the CIA (or government) depends on the narrative of the author. Like the immigrant paradox: are they lazy or are they taking your jobs? which is it?

Re: US passes emergency waiver over fuel pipeline cyber-attack

#340

Post by throwawayboise »

KMag wrote: post #325
mac01021 wrote: post #317

Earlier quoted context omitted.

I'm not super-knowledgable about cybersecurity, but shouldn't simply using TOR make it nearly impossible for the US government to track them down? If they want to go overkill, they can additionally use a public VPN account purchased using walmart giftcards bought on ebay using a stolen identity and then mailed overseas. They can also perform the hack using a brand new computer that they never use again afterward. It…

> I'm not super-knowledgable about cybersecurity, but shouldn't simply using TOR make it nearly impossible for the US government to track them down? PSA: There are known traffic correlation attacks against Tor. It's not magic security dust you can sprinkle on a system. If you're doing thoughtcrimes, assume any G10 intelligence service can track you down. (If you're into extortion, human trafficking/exploiting childre…

I don't know much about TOR but recall reading speculation that the NSA operates a majority of the exit nodes.
Post reply on HN