RE: east coast powergrid / SCADA [OT?]

[Joshua Thomas <JThomas () poweronemedia com>]

It wasn't. Say some luser with an unpatched/compromised laptop connected to
the network. *poof*

What I have more trouble believing is that a single
workstation/controlstation would allow a large enough change to a power
plant to cause an effect like this.

In an ideal world, doing something like shuting down the whole power station
would be like firing a nuke: You need two people with keys, they're too far
apart for one person to do it by themself, etc.

Just my $.02.

Joshua Thomas
Network Operations Engineer
PowerOne Media, Inc.
tel: 518-687-6143
jthomas () poweronemedia com 

-----Original Message-----
From: gml [mailto:gml () phrick net]
Sent: Friday, August 15, 2003 4:50 PM
To: RMcElroy () mbe com; scheidell () secnap net; tetsujin () comcast net
Cc: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] east coast powergrid / SCADA [OT?]


I can't image that anything really important would be connected to the
internet.  Then again who knows right.

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of
RMcElroy () mbe com
Sent: Friday, August 15, 2003 3:41 PM
To: scheidell () secnap net; tetsujin () comcast net
Cc: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] east coast powergrid / SCADA [OT?]

At least on the west coast they do not, I think the requirements of the
systems are way out of Microsoft's range. Lot's and Lot's of Unix

-----Original Message-----
From: Michael Scheidell [mailto:scheidell () secnap net] 
Sent: Friday, August 15, 2003 11:36 AM
To: tetsujin
Cc: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] east coast powergrid / SCADA [OT?]


> Paller said it is "highly unlikely" that the process control computers

> behind critical infrastructure like power in the United States would 
> run on the Windows operating system.

well, ONTARIO HYDRO does seem to have SOME windoes boxes.. at least here
is one that appears to have been infected with slammer:

http://www.hackertrap.net/LID.pl?IID=39335068

(Aug 9th through the 12th?)


-- 
Michael Scheidell, CEO
SECNAP Network Security, LLC 
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html