funsec mailing list archives

The cyberterrorist sky *is* falling!


From: "Rob, grandpa of Ryan, Trevor, Devon & Hannah" <rMslade () shaw ca>
Date: Mon, 23 Mar 2009 11:15:20 -0800

http://www.computerworld.com/action/article.do?command=viewArticleBasic&tax
onomyName=security&articleId=9130080&taxonomyId=17&intsrc=kc_top  

"The networks powering industrial control systems have been breached more than 
125 times in the past decade, with one resulting in U.S. deaths, a control systems 
expert said on March 19."  

!

"The managing partner of control systems security 
consultancy Applied Control Solutions, did not detail the breach that caused deaths 
during his testimony before a U.S. Senate committee"

Oh?

"At other times, the managing partner has talked about a June 1999 gasoline 
pipeline rupture near Bellingham, Washington. That rupture spilled more than 
200,000 gallons of gasoline into two creeks, which ignited and killed three 
people."  

OK, that's dead.

"Investigators found several problems that contributed to the rupture, but the 
managing partner has identified a computer failure in the pipeline’s central 
control room as part of the problem."  

Ummm, and this is an "attack/breach" rather than a "foul up," why?

“If you penetration-test a legacy industrial control system, you will shut it down 
or kill it,” he said. “You will be your own hacker.”  

So, damned if you do, damned if you don't, and consultants get paid regardless?

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
      When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
http://victoria.tc.ca/techrev/rms.htm 
http://blog.isc2.org/isc2_blog/slade/index.html
http://blogs.securiteam.com/index.php/archives/author/p1/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: