21–30 of 37 posts
The article mentions that the hackers stole 500MB? The number seems small given the scale of storage in modern computers but I guess 500MB could account for a large number of documents that contain confidential info.
It would be nice to know what this specific "Raspberry Pi" vulnerability is, considering the software stack is almost entirely Debian.
There is no RPi vulnerability(in this article). The RPi was just used as a bastion into the internal network. It could have been any SBC. Once your already inside the internal network things get stupid lax. EG. I can't see your Windows shared folders from the internet, but the PC in the next room can. Someone sneaked an RPi into JPL to be that PC in the next room. See Also; Season 1 Mr Robot had this exact scenario a…
It would be nice to know what this specific "Raspberry Pi" vulnerability is, considering the software stack is almost entirely Debian.
> The comprehensive federal review of JPL’s systems stemmed from an April 2018 incident when someone at JPL attached the Raspberry Pi to the network there for an unknown purpose Basically, someone plugged in a computer to the corporate network that happened to be a Raspberry Pi. Might as well have been a Beaglebone, a Banana Pi or an Intel NUC for that matter.
> If, however, they represented an adversarial nation, the data could be extremely valuable. Yes, heaven knows that data on manned spaceflight shouldn't be shared with all of mankind, only america and it's allies.
Or you know, lobbing ballistic warheads at some other country you've been at war with for literally centuries.
Earlier quoted context omitted.
> The comprehensive federal review of JPL’s systems stemmed from an April 2018 incident when someone at JPL attached the Raspberry Pi to the network there for an unknown purpose Basically, someone plugged in a computer to the corporate network that happened to be a Raspberry Pi. Might as well have been a Beaglebone, a Banana Pi or an Intel NUC for that matter.
JPL builds robots and robots are made from SBCs.
Earlier quoted context omitted.
JPL builds robots and robots are made from SBCs.
If JPL is using a Pi off of Earth, they're doing it wrong. Stability in space requires a little more care (it's hot, cold, particle-y, etc).
Earlier quoted context omitted.
Recommendations suck, they just write couple of times that administrators should update "Information Technology Security Database" and that they failed to do that. That should be automated. They have all those "CISO", "SAISO", "OCIO" and "CIO" but there is no one who knows how to setup automated nmap scan for a network range? Then trigger someone and add it to some inventory like "hey there is some new raspberry pi i…
It's not like you can easily detect a rogue RPi with just nmap. It's trivial not to respond to anything sent to you. You have to start looking at ARP, but that's not iron-clad either.