Live data from Hacker News

U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

washingtonpost.com

191–200 of 218 posts

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#191
post #184
post #183

Earlier quoted context omitted.

What is the other option?

> What is the other option? letters of marque for the nation-state actors. bounty hunters for the criminals. There's a lot of options, I suspect using the financial systems to stop bad guys is probably going to miss the mark and produce emergent unintended consequences. I.E. it's going to get bloody.

What a silly idea. The Chinese will conduct a false flag cyber attack to trick us into retaliating against the Russians.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#192
post #183

Earlier quoted context omitted.

What is the other option?

You still think there's only one other option? There are probably at least dozens if you think about it.

Then let's hear some of your brilliant options based on your expensive experience in cyber security and international relations.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#193

Earlier quoted context omitted.

> That's not the society I want. I don't want stronger doors everywhere. Tougher locks everywhere. Onerous security everywhere > Digital borders exist all over the net. We use them every day to secure all sorts of things Erm, how do you square these two sentences? I took your first comment to be arguing against software security in general, presumably in favor of more post-facto enforcement when people violated autho…

No it isn't. Arguing with people like this is just boring . Not interested.

What isn't? I'm earnestly trying to understand what you're actually advocating, as your perspective seems to be shifting with each comment. If I have characterized your previous comments incorrectly, it was done in good faith and please correct me.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#194
post #140

All these attacks usually caused by two things, office macros and mimikatz.

Easier: Microsoft Windows

I re-call the Russians did a full featured malware for macOS called Proton. You may find videos of that in Youtube.

Of course, Macros works in macOS too if the user has installed Microsoft Office

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#195

Earlier quoted context omitted.

I'm not sure it wouldn't be as barbaric at least if that word means human suffering and death. But I agree it's the future of war.

Human suffering and death are not binary things. War will always be a bad thing, but putting people on the ground in a foreign land with the mission to kill others has always amplified the horrors of war many many times over. Taking out power in half the US for a day would kill thousands, but it's the equivalent of an all out attack on the US. Compare that to if another country were to physically commit to an all out…

I agree the worst of humanity comes out in war. We'll see what happens with China vs. US. I doubt we'd see nuclear at least, but maybe the new tactical weapons make that more likely.

I think the difference in our viewpoints might be that I don't think it would just be power our for a day.

I think it would be far far worse.

Explosions, power out for months. Exploding a pipeline much harder to repair.

cutting off chip supply with the precipitating attack on Taiwan so we can only access our onshore capacity, if there isn't a cleanroom breach taking weeks or months to recover. Or say an attack on ASML.

sewer services going out or changing the mix to make water not or less safe. Damns.

It's just such a huge amount of our day to day lives; even very simple out of date XP hacks take a while to patch, let alone something like the supply chain chip attack Bloomberg reported and never retracted - which is still weird in my mind and something I could totally see as a current reality on both sides with a long history of similar 3 letter behavior from US.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#196

Earlier quoted context omitted.

Not securing cyber and our infrastructure will kill and destroy things. What would be an example of a civil liberty violated by for instance standing up a large Brigade or service of tech soldiers who secure, patch, work to shore up our critical infra and services? + a lot of funding; we already prop up the lockheads of the country. I agree that it seems our Gov. can't be trusted not to intrude into our communication…

I completely agree that the infrastructure needs to be secured, and that it requires a lot of funding. I'm saying the military is the wrong organization for domestic operations. What happens when the military believes an attack is coming from a private citizen? Can they spy on or take action against that person? Can that alleged attacker's computer be seized? On what evidence? What if the military determines that eff…

There are also a ton of scary 'laws' like extra judicial 'border' areas which go wayyy into our country from agencies that are being militarized. Justice doesn't need swat teams...

I would be into a non-military branch. it baffles me we haven't funded this. Regulations are also a good first step, but don't seem enough alone. though HIPA and SOC seem fairly ok at least with low level stuff.

If we're going to spend $2T on infra throw at least $100 billion on this, some more to pay to onshore more critical chip & manufacturing. But Republicans are stuck on cars.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#197

Earlier quoted context omitted.

Do I want security cameras/metal detectors/metal doors and other police state security measures everywhere? No. Do I want to have all that in electrical plants/pipelines/nuclear reactors and other objects of critical infrastructure - yes. If that means employees there would need to spend more time for annoying security checks(additional password prompts, 2FA, metal detectors, etc) - sure, I did all of that when worki…

Those things already exist in electrical plants/pipelines/nuclear reactors and other objects of critical infrastructure. Eliminating the ability of people to casually enter and access/alter/destroy this infrastructure isn't the issue. And yeah... we exactly can say that. We do it all the time. We almost blew up the world because Russia sent some missiles to Cuba. There's no reason the digital war can't have physical…

>> drop a bomb on their electric plant

Not gonna happen. Because: a) that would almost surely mean all-out war (in case of Russia/China - with country that has nukes), started by US b) dropping a bomb on electric plant of country that has at least some air defense (and I think it's safe to assume Russia/China/Iran have plenty of that) is not simple

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#198

Earlier quoted context omitted.

No it isn't. Arguing with people like this is just boring . Not interested.

What isn't? I'm earnestly trying to understand what you're actually advocating, as your perspective seems to be shifting with each comment. If I have characterized your previous comments incorrectly, it was done in good faith and please correct me.

FWIW, I hadn't realized you were the one that started the whole thread. By "initial comment" I meant the first comment I responded to - https://news.ycombinator.com/item?id=27090800 .

You've got a good point about general fear and trust breakdown with your top level comment (although not your inference from someone wearing a mask alone outside, there are many good reasons for that such as the possibility of coming up on someone, not wanting to fiddle with it while going between places you need it, etc.)

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#199
post #192

Earlier quoted context omitted.

You still think there's only one other option? There are probably at least dozens if you think about it.

Then let's hear some of your brilliant options based on your expensive experience in cyber security and international relations.

I have no patience for bullies.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#200

Earlier quoted context omitted.

Those things already exist in electrical plants/pipelines/nuclear reactors and other objects of critical infrastructure. Eliminating the ability of people to casually enter and access/alter/destroy this infrastructure isn't the issue. And yeah... we exactly can say that. We do it all the time. We almost blew up the world because Russia sent some missiles to Cuba. There's no reason the digital war can't have physical…

>> drop a bomb on their electric plant Not gonna happen. Because: a) that would almost surely mean all-out war (in case of Russia/China - with country that has nukes), started by US b) dropping a bomb on electric plant of country that has at least some air defense (and I think it's safe to assume Russia/China/Iran have plenty of that) is not simple

As I said in the cousin post below, it has already happened.
Post reply on HN