U.S.'s Biggest Gasoline Pipeline Halted After Cyberattack

Post by bourgwaletariat » Mon, May 10, 2021, 7:28 PM UTC

mindslight wrote: post #204

bourgwaletariat wrote: post #201

Earlier quoted context omitted.

I'm exactly advocating for the federal government to do its job and protect its citizens and their property from foreign enemies. It's not my job to protect my house from a foreign military that might want to come into it and steal things from me. Nor should I install radar systems to alert me to enemy aircraft. That's why the USA spends the better part of a trillion dollars on the military. That's my government's jo…

So you're not talking about digital security at all?

Post by crmd » Tue, May 11, 2021, 2:21 AM UTC

adolph wrote: post #136

crmd wrote: post #125

Earlier quoted context omitted.

You always know you’re dealing with one of these companies when IT reports up into the CFO.

Could be worse, I saw IT reporting through HR once upon a time.

Post by stanfordkid » Tue, May 11, 2021, 4:04 AM UTC

nimbius wrote: post #142

tidydata wrote: post #118

There’s nothing in this article indicating the operator has a recovery plan in place involving restoring backups to get these systems online. Seems grossly negligent on their behalf, and made almost satiric by the fact that Fireye can be mentioned without reference to their own massive security lapses. Too much focus always on the “hackers” and never the obvious security lapses solved by diverting executive pay to mo…

Its difficult to chastise a country that misses the forest for the trees, when that country has spent sixty years formenting a culture of blind consumption and wilful ignorance of anything STEM. instead of a flourishing culture of hacking and computing, the united states through DMCA and law relegated the notion to comic books and hollywood fiction. most of the public war drumming for 'hacking' (if it could be said t…

Post by Merrill » Wed, May 12, 2021, 11:42 PM UTC

detaro wrote: post #210

Merrill wrote: post #202

Earlier quoted context omitted.

Any IP packet that is valid on the Internet would be invalid and dropped on the critical infrastructure network. The only packets that could pass between the Internet and the critical infrastructure network would be those that are intentionally bridged by rewriting the CRC-32. This should not be done at the IP level, but only by application level bridges. It would prevent inadvertent connections between the Internet…

The usual problem are systems that are intentionally connected to both networks, and after compromise happily serve as points to enter the inner network.