Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

washingtonpost.com

Post reply on HN
Print view View original

201–210 of 218 posts

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#201

Post by bourgwaletariat »

mindslight wrote: post #193
bourgwaletariat wrote: post #190

Earlier quoted context omitted.

No it isn't. Arguing with people like this is just boring . Not interested.

What isn't? I'm earnestly trying to understand what you're actually advocating, as your perspective seems to be shifting with each comment. If I have characterized your previous comments incorrectly, it was done in good faith and please correct me.

I'm exactly advocating for the federal government to do its job and protect its citizens and their property from foreign enemies.

It's not my job to protect my house from a foreign military that might want to come into it and steal things from me.

Nor should I install radar systems to alert me to enemy aircraft. That's why the USA spends the better part of a trillion dollars on the military.

That's my government's job and they should do that job. That's what I'm saying.

If a foreign government sent boats full of marauders to our shores to steal from people's homes and stores, you think the government would look the other way?

I don't. I think they'd blow the boats up and kill the marauders.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#202

Post by Merrill »

detaro wrote: post #186
Merrill wrote: post #131

Why don't critical infrastructure networks use a different CRC-32 polynomial for their IP packets?

How would that help in any way?

Any IP packet that is valid on the Internet would be invalid and dropped on the critical infrastructure network. The only packets that could pass between the Internet and the critical infrastructure network would be those that are intentionally bridged by rewriting the CRC-32. This should not be done at the IP level, but only by application level bridges.

It would prevent inadvertent connections between the Internet and the critical infrastructure network.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#203

Post by perl4ever »

Spooky23 wrote: post #182
perl4ever wrote: post #164

Earlier quoted context omitted.

I'm not sure about these, but there are public limited partnerships that anyone can buy like a stock. If you don't realize what you are getting into, you may regret it because you will get a K-1 at tax time. I don't know if it's any more of a tax dodge than an REIT.

These structures characterize cash flows as return on capital, which defer taxation. There’s a bunch of games played.

I didn't think it deferred taxation; just the opposite.

That's what I was referring to about the K-1; you pay taxes on the income of the partnership even if you didn't sell any shares.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#204

Post by mindslight »

bourgwaletariat wrote: post #201
mindslight wrote: post #193

Earlier quoted context omitted.

What isn't? I'm earnestly trying to understand what you're actually advocating, as your perspective seems to be shifting with each comment. If I have characterized your previous comments incorrectly, it was done in good faith and please correct me.

I'm exactly advocating for the federal government to do its job and protect its citizens and their property from foreign enemies. It's not my job to protect my house from a foreign military that might want to come into it and steal things from me. Nor should I install radar systems to alert me to enemy aircraft. That's why the USA spends the better part of a trillion dollars on the military. That's my government's jo…

So you're not talking about digital security at all?

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#205

Post by vmception »

jtchang wrote: post #51

In a twisted sort of way I am happy to see these types of ransomware attacks making headlines. Before it was much harder to quantify how much a breach might cost but with ransomeware you get a fuzzy lower bound. Also the prevalence of these attacks might actually make us all safer in the long run.

Agreed. It also tells us where bug bounty rewards should be in value. As the structure of bug bounty programs are completely wrong and the rewards are undervalued.

The market is literally saying they are undervalued.

The flogging will continue until bug bounties improve.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#206

Post by TeMPOraL »

nradov wrote: post #191
no-s wrote: post #184

Earlier quoted context omitted.

> What is the other option? letters of marque for the nation-state actors. bounty hunters for the criminals. There's a lot of options, I suspect using the financial systems to stop bad guys is probably going to miss the mark and produce emergent unintended consequences. I.E. it's going to get bloody.

What a silly idea. The Chinese will conduct a false flag cyber attack to trick us into retaliating against the Russians.

Hell, your own government may conduct a false flag attack to fabricate a casus belli against anyone they wish. It's not like governments don't do such things.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#208

Post by Spooky23 »

perl4ever wrote: post #203
Spooky23 wrote: post #182

Earlier quoted context omitted.

These structures characterize cash flows as return on capital, which defer taxation. There’s a bunch of games played.

I didn't think it deferred taxation; just the opposite. That's what I was referring to about the K-1; you pay taxes on the income of the partnership even if you didn't sell any shares.

It depends on your situation.

For an smaller scale individual, the paperwork is a pain unless the entity is designed to be used by an individual.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#209

Post by BoorishBears »

dillondoyle wrote: post #195
BoorishBears wrote: post #103

Earlier quoted context omitted.

Human suffering and death are not binary things. War will always be a bad thing, but putting people on the ground in a foreign land with the mission to kill others has always amplified the horrors of war many many times over. Taking out power in half the US for a day would kill thousands, but it's the equivalent of an all out attack on the US. Compare that to if another country were to physically commit to an all out…

I agree the worst of humanity comes out in war. We'll see what happens with China vs. US. I doubt we'd see nuclear at least, but maybe the new tactical weapons make that more likely. I think the difference in our viewpoints might be that I don't think it would just be power our for a day. I think it would be far far worse. Explosions, power out for months. Exploding a pipeline much harder to repair. cutting off chip…

I don't see how any of that wouldn't be worse than conventional warfare.

At that point where we're being attacked with pipelines exploded we'd be getting bombed.

It's a lot easier to fix a contaminated water treatment facility than a pile of rubble. Same for every other form of technology.

It's almost tautological, the system controls malfunctioning at worst can only destroy the system, conventional warfare defaults to destroying the system.

Re: U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

#210

Post by detaro »

Merrill wrote: post #202
detaro wrote: post #186

Earlier quoted context omitted.

How would that help in any way?

Any IP packet that is valid on the Internet would be invalid and dropped on the critical infrastructure network. The only packets that could pass between the Internet and the critical infrastructure network would be those that are intentionally bridged by rewriting the CRC-32. This should not be done at the IP level, but only by application level bridges. It would prevent inadvertent connections between the Internet…

The usual problem are systems that are intentionally connected to both networks, and after compromise happily serve as points to enter the inner network.
Post reply on HN