Live data from Hacker News

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

nytimes.com

21–30 of 96 posts

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#21
post #6

Earlier quoted context omitted.

He knows he brought these attacks with his war, but he doesn’t take the blame for anything.

Either he knows and doesn't want to take the blame, or he doesn't know. I'm not sure which one is worse.

He stopped going to security briefings before, maybe he simply doesn't care to know.

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#23

They always point to a state actor to skirt liability for their own shitty IT work. Then the dim evil journalists swallow it whole, later regurgitating it for their eager little baby bird subscribers. If there were actual penalties for rawdogging a PLC (or any other control system) on the internet, shit like this wouldn’t happen.

The Trump plan in Iran is not working. Gotta make them look like the evil bogeyman to get people to support further action.

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#24
post #6

> “I think Minnesota is behind it,” Mr. Trump said on Friday in response to a reporter’s question about Iran’s possible involvement, What a coward and a traitor to the American people.

He knows he brought these attacks with his war, but he doesn’t take the blame for anything.

> he brought these attacks with his war

I'm no Trump supporter and this war was a big mistake, but justifying a nation poisoning another's civilian water supply is a bit upside down.

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#25

> “I think Minnesota is behind it,” Mr. Trump said on Friday in response to a reporter’s question about Iran’s possible involvement, What a coward and a traitor to the American people.

It was probably the same (imaginary) people who damaged the lining of the Reflecting Pool. I think we should think about making blatant lies by politicians a crime.

What's one more crime compared to all of the ones they've already committed?

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#26
post #3

The Federal Bureau of Investigation (FBI) and Environmental Protection Agency (EPA) are issuing this Public Service Announcement (PSA) to warn critical infrastructure asset owners and operators that malicious cyber actors (MCAs) are conducting cyber attacks targeting Operational Technology (OT) devices, including Rockwell Automation/Allen-Bradley Programmable Logic Controllers (PLCs), specifically MicroLogix 1100 and…

Did they literally just leave the water supply plant management software out available on the open internet? Hard to even call this a hack!

I mean

Some of these municipal water plants in the US are independently operated by municipalities of awfully few people and even fewer resources to spare, often serving relatively vast areas…

It’s probably not how you or I would set things up—especially after many years of warnings and slick best practices guides-but I can sympathize with “if it’s not broken…”-style maintenance, especially at the local level.

These things have lifespans measured in decades, and budgetary cycles to match… and for all of CISA’s good work (on limited budgets, and with power that’s more persuasive than fearsome) [0], it seems hard to get all 148,000 [1] system operators to afford to care, much less to afford to fix things—much less to check their work.

[0] https://www.cisa.gov/topics/industrial-control-systems , and https://www.gao.gov/assets/d24106576.pdf for an idea of the staffing they’re doing it with…

[1] https://www.epa.gov/dwreginfo/information-about-public-water...

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#27

They always point to a state actor to skirt liability for their own shitty IT work. Then the dim evil journalists swallow it whole, later regurgitating it for their eager little baby bird subscribers. If there were actual penalties for rawdogging a PLC (or any other control system) on the internet, shit like this wouldn’t happen.

The Trump plan in Iran is not working. Gotta make them look like the evil bogeyman to get people to support further action.

Iran is beside the point. There is always a convenient bogeyman: China, Russia, North Korea… They sow discord between peoples to cover-up the ineptitude of domestic institutional assholes.

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#28

They always point to a state actor to skirt liability for their own shitty IT work. Then the dim evil journalists swallow it whole, later regurgitating it for their eager little baby bird subscribers. If there were actual penalties for rawdogging a PLC (or any other control system) on the internet, shit like this wouldn’t happen.

The Trump plan in Iran is not working. Gotta make them look like the evil bogeyman to get people to support further action.

This conspiracy theory would make more sense if he wasn’t working so hard to divert blame away from Iran: https://www.politico.com/news/2026/07/31/trump-minnesota-wat...

> “I blame it on Minnesota because they are grossly incompetent,” Trump said at a cabinet meeting at Camp David on Friday, adding that Walz is “corrupt” and “Iran has bigger problems than worrying about Minnesota.” Asked later if he could rule out Iranian responsibility, Trump said, “ I don’t think there was an Iranian cyberattack. I think Minnesota ought to get its act together.”

Re: Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

#30
post #3

The Federal Bureau of Investigation (FBI) and Environmental Protection Agency (EPA) are issuing this Public Service Announcement (PSA) to warn critical infrastructure asset owners and operators that malicious cyber actors (MCAs) are conducting cyber attacks targeting Operational Technology (OT) devices, including Rockwell Automation/Allen-Bradley Programmable Logic Controllers (PLCs), specifically MicroLogix 1100 and…

Did they literally just leave the water supply plant management software out available on the open internet? Hard to even call this a hack!

Yes. The last federal administration attempted to use CISA to encourage better cyber outcomes for water supply systems, and the water industry and Republican states sued over it. There is no will to fix this, only to push the liability elsewhere.

https://news.ycombinator.com/item?id=39243560

https://web.archive.org/web/20240409155326/https://www.awwa....

(cybersecurity practitioner is a component of my professional persona)

Post reply on HN