Live data from Hacker News

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

csoonline.com

1–10 of 404 posts

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#7
post #5

There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.

It's believable when the industry has pivoted to pushing SaaS garbage in every place imaginable to the point that on-prem solutions don't exist anymore. Do you expect them to not use email either?

Remember, the industry told us we're in a 'zero trust' world now. The network perimeter is an anachronism.

OTOH you know damn well they keep the important stuff airgapped, in which case the title (and your predictable reaction) is just fanning the flames. It could very well be they 'breached' the receptionist's PC she uses to browse Facebook to pass the time.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#8
post #5

There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.

Wasn't the internet literally created by the military for military comms? The decentralized routing was in part to ensure that comms could survive some areas being taken out by nuclear weapons.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#9
post #5

There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.

While we're at it "and not use Microsoft products". Literally every time a story like this surfaces...

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#10
post #5

There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.

I mean there were also rules about non-sanctioned network connections in the pentagon, or using only sanctioned apps to discuss secrets, but thats not really been enforced recently.
Post reply on HN