Live data from Hacker News

MGM is down, cybersecurity attack ongoing

casino.org

71–80 of 111 posts

Re: MGM is down, cybersecurity attack ongoing

#71

Earlier quoted context omitted.

If it's not MGM it's Caesar's. And both MGM and Caesar's are owned by VICI Properties.

https://en.wikipedia.org/wiki/Vici_Properties#Properties Insane. Who is competing with them on the Las Vegas Strip? Just Blackstone with Bellagio, Cosmo, and Aria? Those investors have the power to have practically all properties on the strip not compete with each other.

Wynn is still independent (I think). That's the only one I can think of, though.

Re: MGM is down, cybersecurity attack ongoing

#73
post #60

Earlier quoted context omitted.

If it's not MGM it's Caesar's. And both MGM and Caesar's are owned by VICI Properties.

The companies themselves are not owned by VICI, the land and properties are, and Caesars and MGM (and other casino operators) pay VICI rent.

The margins are amazing:

https://www.macrotrends.net/stocks/charts/VICI/vici-properti...

https://www.macrotrends.net/stocks/charts/VICI/vici-properti...

https://www.macrotrends.net/stocks/charts/VICI/vici-properti...

Wonder if VICI assets are protected from having underfunded pensions of casino employee unions.

Re: MGM is down, cybersecurity attack ongoing

#74
post #64

Earlier quoted context omitted.

We often make fun of IOT and unnecessary app stuff, but these features 1000% make sense.

The problem is it works badly. You have to open the app which has to load and then you can get access to your key. But if you’re on an elevator then you might not have service and the app won’t load and then you can’t get to your key to use the elevator. Or worse if you don’t have great service in the corridor. It needs to work in a way where the key is saved to your phone so it can be accessed quickly and offline.

I would have thought apple/google wallet already have an API for this.

Re: MGM is down, cybersecurity attack ongoing

#75
post #64

Earlier quoted context omitted.

We often make fun of IOT and unnecessary app stuff, but these features 1000% make sense.

The problem is it works badly. You have to open the app which has to load and then you can get access to your key. But if you’re on an elevator then you might not have service and the app won’t load and then you can’t get to your key to use the elevator. Or worse if you don’t have great service in the corridor. It needs to work in a way where the key is saved to your phone so it can be accessed quickly and offline.

Afaik the HID Global app saves a key in the OS key store (at least on Android) and uses the locally stored key with NFC so you just need network access to enroll a key. Not sure what vendor/app these things use (maybe it's all in house)

Re: MGM is down, cybersecurity attack ongoing

#76
post #40

Earlier quoted context omitted.

Fwiw you could probably build this in a way that it continues to operate without internet. This creates a new attack vector (disable the internet and you can't revoke access) but that's probably acceptable given the physical attacks possible.

Each key gets a revision number. When the first set of keys are created, they get revision number 0. The lock records a high water mark of the revision numbers it has seen. Only keys matching the water mark get to unlock the door. When you want to revoke a key, you re-issue a new set with a higher revision number. When the guest checks out, you issue the next revision number to the next guest, effectively disabling t…

Does this use something like asymmetric keys so door can verify a key came from the issuing system or is there still some online/network portion?

Assuming it does use asymmetric keys to prevent someone from creating counterfeit access cards, there would still be a window (if the network is unavailable) where the old key would continue to work until a new key is scanned the first time on the door lock?

Re: MGM is down, cybersecurity attack ongoing

#77
post #14

Earlier quoted context omitted.

How do those hotel door locks work? When I had an apartment with a tap keyfob, it was battery-operated and the fob seemed to be programmed for that specific lock, so I thought they could work offline.

These days the locks are online so that you can block a lost keycard from the front desk. Previously you had to open the lock with a never keycard than the lost one to make the lost one inoperable. That works kinda fine in a small hotel but not when you 48000 rooms with millionaires in them.

Same tech they use for staff in mental health hospitals and wards, but strangely noone hacks the mental health hospitals.

Re: MGM is down, cybersecurity attack ongoing

#78
post #7

Take w/ requisite salt, but per Daily Mail [1]: > Thousands of guests at MGM Resorts in the Las Vegas strip have been locked out of their hotel rooms after the company was hit with a cyber attack, according to reports. > MGM Resorts International has about 48,000 rooms on The Strip. The company's properties include Mandalay Bay, the Bellagio, Luxor and MGM Grand, among others. > The outage, first detected on Sunday n…

[deleted]

Re: MGM is down, cybersecurity attack ongoing

#79
post #6

I'm currently rewatching the Las Vegas (2003) NBC TV series (the one with James Caan, Josh Duhamel, James Lesure, Molly Sims, Nikki Cox, Vanessa Marcil etc). Feels on-brand; like every second ep is about some fantastic heist. It's worth rewatching as a guilty pleasure, IMO. Feels quite alien compared to current fare. It's dumb but well-crafted, fun and glitzy and never takes itself too seriously. I miss that kind of…

I don't know anything about this particular show, but lots of programs were shot on film, and could just be scanned at higher resolution once HD video standards existed.

Re: MGM is down, cybersecurity attack ongoing

#80
post #65
post #42

Earlier quoted context omitted.

Was just coming here to say it: And nothing of value was lost.

Your opinion is valid, however I'm currently on a plane heading there, likely a third of the passengers won't be able to check into their hotel. Same with dozens of planes. Kinda sucks for them.

I live in Vegas and it also sucks for all the local MGM employees that are getting called in to have to deal it. That said, I hope things get figured out and your trip goes well!
Post reply on HN