Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

US passes emergency waiver over fuel pipeline cyber-attack

bbc.com

Post reply on HN
Print view View original

411–420 of 479 posts

Re: US passes emergency waiver over fuel pipeline cyber-attack

#411

Post by pc86 »

vkou wrote: post #355
ackbar03 wrote: post #78

Earlier quoted context omitted.

Lol this was my first reaction as well, they now have a nation-state on their ass. But that being said its not impossible that this was just a cover for a Russian state-sponsored attempt on US infra

Yes, because the Russian state has nothing better to do then inconvenience the operation of a foreign fuel pipeline for a few days.

Believe it or not, massive governments that employ hundreds of thousands of people are capable of doing multiple things simultaneously.

I don't think there's any evidence this was state-sponsored, or even state-approved, but "oh there's better things to do" is not a good argument in the least.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#412

Post by christophilus »

raverbashing wrote: post #328
panarky wrote: post #323

Earlier quoted context omitted.

The reason cyberattacks are proliferating is because many enterprises refuse to learn from the mistakes of others. They continue to connect ancient, unpatched Windows and Exchange servers to the public internet, they don't segment their networks, they don't secure TeamViewer and RDP, they don't use FIDO U2F, they don't have an IDS, they don't monitor logs, they don't execute email links and attachments in a sandbox,…

Yes, but this is not new. Cryptocurrency is. Also blaming the victim can only go so far

My guess is that there are many factors.

- More infrastructure than ever has some exposure to the internet - Outsourcing at massive scale (probably) makes consistent security screening harder - There are more programmers in the world than ever and so (probably) there are more black hats, malicious hackers, etc - As time goes on, there are more and more aging computer systems, thus (probably) there are more and more vulnerabilities in the wild - As time goes on, systems accrete complexity, thus (probably) there are more and more vulnerabilities in the wild

But yes, I do think cryptocurrency is an important change. Cash is still king when it comes to crime, but crypto does make crossing borders much easier.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#413

Post by christophilus »

croes wrote: post #40

Seems like this company has more than just IT problems https://newrepublic.com/article/161498/huntersville-north-ca...

Amazing. I live in the Carolinas and hadn't heard of this. Sounds like maybe we should be thanking the hackers for shutting this thing down.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#414

Post by anticensor »

7952 wrote: post #393
ehnto wrote: post #354

Earlier quoted context omitted.

Now introducing, TypeLang! A strictly typed spoken language with core emotional concepts built into the standard library and immutablity as default. Easily transpiled into dozens of different languages, such as English, Japanese, JavaScript, and Smooth Jazz.

We really need SI units for emotions. Something that can be based on reproducible observations.

A megasophia of wisdom.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#415

Post by Arcturis »

ackbar03 wrote: post #78
tgsovlerkhgsel wrote: post #13

That gang may have bitten off more than they can chew. They've now gotten the US government involved officially, which means that beyond the sheer mass of resources that will go into tracking this gang, the government also has something to prove now. Being at the center of an international incident is probably not good for business.

Lol this was my first reaction as well, they now have a nation-state on their ass. But that being said its not impossible that this was just a cover for a Russian state-sponsored attempt on US infra

If I were running the Russian hacking center in charge of pwning US infrastructure, I'd be pissed as hell. This is like getting vaccinated -- all of a sudden we're going to take this seriously and patch a bunch of exploits that they've had ready to go.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#416

Post by Arcturis »

pm90 wrote: post #266
adventured wrote: post #211

Earlier quoted context omitted.

How could it? There are thousands of cyberattacks against US companies and infrastructure every day. There are cyberattacks and then there's going after the most important domestic energy line of a superpower. This is quite different from your run of the mill cyberattack, they're not all created equal.

This is exactly right. It all depends on the attention these attacks get. Now that they've had a tangible effect on the news cycle, creating concern about the safety of US energy infrastructure, there will be more incentives for the Government to hunt them down and get credit for doing so. I think I read somewhere that China based attackers have already penetrated networks of major US infrastructure systems but didn'…

I think it's 50/50 some real gang vs a branch of the NSA who sees how pwned the US infrastructure is and wants to make a (fairly harmless) splash so we take it more seriously and patch our shit.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#417

Post by boringg »

bob_theslob646 wrote: post #73
boringg wrote: post #53

Earlier quoted context omitted.

Pretty sure china doesn't have the oceans - might want to check up on your stats.

Not to be rude but I'm pretty sure you need to check up on your stats. The Chinese do have the oceans. >Citing the Office of Naval Intelligence, a Congressional Research Service report from March notes that the People’s Liberation Army Navy, or PLAN, was slated to have 360 battle force ships by the end of 2020, dwarfing the U.S. fleet of 297 ships. [1]( https://www.navytimes.com/news/your-navy/2021/04/12/chinas-n...…

I don't dispute the ability for China to produce more ships than the US or have more ships. By tonnage they are still less than half the size of the the US fleet and they aren't in control of the oceans. I'm not saying that won't change I am merely flagging OP statements as inaccurate.

Don't worry I don't take your comments as rude.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#418

Post by boringg »

bob_theslob646 wrote: post #152
edholland wrote: post #104

Earlier quoted context omitted.

without significant aircraft carrier fleet i'm not sure china has dominant control of any seas, despite best efforts in south china seas [1]( https://en.wikipedia.org/wiki/Chinese_aircraft_carrier_progr... )

https://www.cnn.com/2021/03/05/china/china-world-biggest-nav... I am not sure what your point is. By number of ships, they are the biggest. I have no idea how important aircraft carrier fleet is.

Biggest by number, not by capability or weight. There are significant differences as a result.

I.e. who cares if you have the most swordsmen on the planet, if you in a gunfight.

Re: US passes emergency waiver over fuel pipeline cyber-attack

#419

Post by jacksonkmarley »

logicchains wrote: post #391
magnusss wrote: post #278

Earlier quoted context omitted.

The US and other government wills outlaw all cryptocurrencies but the ones that they control (“Govcoin,” as The Economist refers to them). Game over.

>The US and other government wills outlaw all cryptocurrencies but the ones that they control (“Govcoin,” as The Economist refers to them). Game over. Just like how outlawing drugs ended the drug trade.

Outlawing a thing except for when the govt controls it is just another way of saying governement regulation. Which is both common and successful.

When was the last time you drank bootleg liquor? Answer: I don't know of course, but for most people in rich western countries I would think the answer is never.

Post reply on HN