Live data from Hacker News

Poland's energy grid was targeted by never-before-seen wiper malware

arstechnica.com

91–100 of 158 posts

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#91
post #87

Earlier quoted context omitted.

Did you actually read all the posts pointing this and all the _other_ aggressive actions Russia is taking against the EU? Regardless, Russia is a bully and sticking your head in the sand won't make them go away.

[flagged]

Does NATO actually threaten Russia?

It threatens mobsters racket profits, but it will not start any actual fight.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#92
post #87

Earlier quoted context omitted.

Did you actually read all the posts pointing this and all the _other_ aggressive actions Russia is taking against the EU? Regardless, Russia is a bully and sticking your head in the sand won't make them go away.

[flagged]

Sort of.

It’s not a secret that Ukraine is vital for the ground defence of Russia, but the Ukrainian people are pro-EU, and not from propaganda. You might well remember that their government was essentially a puppet for Russia until they were ousted. So if Ukraine is radicalised it is odd to think that its because of European propaganda- more likely they got tired of their masters.

I fully accept that Putin thinks of NATO as a threat to Russia, and NATO is at the door.

Its also entirely true that the border countries (Estonia for example) have major anxiety regarding a Russian invasion, and actively seek NATO membership to avoid that.

However, flying aircraft into sovereign territory (as Russia often did and continues to do to Sweden) is not the behaviour of a threatened country, they are the ones making the threats, constantly testing.

Their expansions into territory under the guise of “going where there are native Russians” will necessarily conclude with border regions being even more hostile to any native Russians wanting to settle. Again, in Estonia, the city of Narva is almost entirely native Russian; but they don’t want to be under Putin. Putins actions make Estonians wary of this fact and makes the Estonian government wish to integrate these people more instead of letting them live their lives.

In the Ukraine this was true too, thats why there was such a push to get people speaking Ukrainian, but Putin saw that his claim to the territory gets weaker over time and decided to invade.

If you understand the incentives of all involved, it is plain to see that Putin is the architect of his own misery here.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#93
post #82

Will this be the time that EU grows a spine and comes together to oppose Russia? Naaa, better continue to have Germany and France continue to destroy the Union by looking only at their self interests while they pretend to talk tough on Trump and sabotage any real internal changes so that they can keep their crumbs. Just this week, France’s meddling halted a deal that was 30 years in the making: Mercosul while their p…

Yes, but how could that be solved? To solve this issue you'd have to significantly reduce the sovereignty of the EU member states, which some, especially Poland will oppose fiercely. But on the other had, without some coherent cooperation and responses, Europe will be chewed up country at a time by Russia, and maybe in the future by China.

https://eur-lex.europa.eu/EN/legal-content/glossary/mutual-d...

Any actual EU members are in principle protected by this, even if they aren't NATO members. Whether or not EU countries being in NATO diminishes their ability to act without US consent is debatable and I lean towards saying NATO's joint command essentially sets article 42 cooperation up to fail.

That's the difference between Ukraine and the other countries on Putin's list though: Ukraine wasn't in the EU or NATO, and for all intents and purposes had no allies.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#94

Earlier quoted context omitted.

Poland is a major logistical hub for everything going towards Ukraine. Thus targeting basic infrastructure like energy grid or railroad have to be expected. On the bright side, using these weapon grade malware is burning exploits and also showing current state and techniques of Russian cyberwarfare which defender can learn a lot from.

> On the bright side, using these weapon grade malware is burning exploits and also showing current state and techniques of Russian cyberwarfare which defender can learn a lot from. Or perhaps they used an already-known malware to measure defensive capabilities without showing any of their cards.

Cyber-defensive measures aren't very useful though. Once malware is known to exist, you don't "reveal a capability" by detecting it - it all boils down to basically signature analysis, or just good standard practice (air gaps, software supply chain accountability etc).

This is vastly different to real world military systems, where there are a lot more variables and no guarantees - i.e. countries have limited numbers of air defense systems and missiles, the missiles have finite non-zero flight times, the physics of detection systems and sensors are not absolute etc.

The real world is just more complicated, so the value of buzzing someone's airspace reveals a lot more information then "huh, guess they didn't click on that email".

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#95
post #84
post #7

Earlier quoted context omitted.

before anyone jumps on the pedantry bandwagon, its worth noting that even though open war hasn’t been called: the attacks on infrastructure especially cyber warfare is extremely active and, crucially, direct. It is totally fair to say that in a digital context, Russia is absolutely at war with Europe. As far as I can tell, they don’t even try to hide it.

Europe is the main supplier of weapons to Ukraine which is in actual war with Russia. Of course Russia is at war with Europe, the only reason bombs are not falling in Poland and Germany is that Russia wouldn’t have the capability to defend itself against retaliation. Do people really believe their countries can openly take sides in a war and not be targeted??

This has been going on from well before the Ukraine war. It has just intensified. The real question is: should the affected states develop some counter-capability to deter this opportunistic behaviour?

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#96
post #32

Earlier quoted context omitted.

Then you're missing the point. If they succeed they may well not be reversible. The question is if this had succeeded would we have shrugged it off again or responded appropriately?

Can you give some examples of? I can imagine that under the right circumstances you might succeed in blowing up some transformers or even a turbine, but it seems like you’d be up to speed within a month or two on the outside? Or am I missing the gravity somehow?

Consider that if a cyberattack could destroy a major power grid transformer, for a marginal cost approaching zero, versus the low-end US$10 million a Kinzal ballistic missile would cost to do the same thing (presuming you only need 1 which is...unlikely), that that might be a significant military capability.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#97
post #60

The Jaguar hack cost the UK $2.5Bn and dropped production to levels you'd normally only see during open warfare. Recovery took many months, and the financial damage persists today. We still operate with a primitive homunculi where a gunshot is considered aggressive, but sabotaging infrastructure that can kill hundreds from cold is being waved at.

But hey, at least they saved a few million a year in developer salaries by offshoring

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#98
post #93
post #82

Earlier quoted context omitted.

Yes, but how could that be solved? To solve this issue you'd have to significantly reduce the sovereignty of the EU member states, which some, especially Poland will oppose fiercely. But on the other had, without some coherent cooperation and responses, Europe will be chewed up country at a time by Russia, and maybe in the future by China.

https://eur-lex.europa.eu/EN/legal-content/glossary/mutual-d... Any actual EU members are in principle protected by this, even if they aren't NATO members. Whether or not EU countries being in NATO diminishes their ability to act without US consent is debatable and I lean towards saying NATO's joint command essentially sets article 42 cooperation up to fail. That's the difference between Ukraine and the other countri…

Things like that don't protect countries. If a real threat arises, if there is no unified force, under the command of one central organ, they won't cooperate, it will always be inferior to the force that does have a single unified command center, like Russia for example or China. NATO or the EU cannot command, say Poland or Germany where to put their forces and what to do with them, but Russia and China can do that with their own. Although their military potential is on par (I mean NATO and Russia) My point is, although on paper NATO is great, it's still fragmented, and to some extent relies on who is in power politically, for example the tomorrow's president of an X country can say "Oh, we will leave NATO yata yata"

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#99

Curious to how these attacks work logistically. I assume these networks are air-gapped?

Another source says:

> It "involved an attempt to disrupt communication between generating installations and grid operators across a large area of Poland".

I doubt we will have all details, but I suspect this kind of communication occurred over the Internet (hopefully, at least a VPN).

Also, even completely airgapped networks are not 100% secure, if you can install a device or convince someone to do it by accident (social engineering).

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#100
This war will likely clean some old electronics providers from the market. You are either very good at security (and that does not mean "airgap" all the things- if your plc needs a special laptop to connect to, the malware just needs to go for those laptops) or you are out of buisness in regions under threat permanently.
Post reply on HN