Full Disclosure mailing list archives

Re: east coast powergrid / SCADA [OT?]


From: "Geoff Shively" <gshively () pivx com>
Date: Fri, 15 Aug 2003 16:57:07 -0700

Good point.

It is hard to believe sometimes that such integral pieces of the systems
that operate our world are connected to the internet, or use the internet to
function. Hell, blocking 135 on some carrier may have caused a SCADA system
to become unable to send or receive data via RPC and lock down. Just an
example, but I think you get my point.

Cheers,

Geoff Shively, CHO
PivX Solutions, LLC

Are You Secure?
http://www.pivx.com

----- Original Message ----- 
From: "-SIMON-" <simon () snosoft com>
To: "gml" <gml () phrick net>
Cc: <RMcElroy () mbe com>; <scheidell () secnap net>; <tetsujin () comcast net>;
<full-disclosure () lists netsys com>
Sent: Friday, August 15, 2003 4:17 PM
Subject: Re: [Full-disclosure] east coast powergrid / SCADA [OT?]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gml,
    You might want to re-consider that statment.  There are many obvious
critical "things" connected to the internet that affect our lives.  The
lack of realization of that is why security is such a big issue.  "Ohh
that won't affect me"...  "where'd my bank account go?"

Ignorance is bliss until someone with knowledge takes advantage of you.


gml wrote:

I can't image that anything really important would be connected to the
internet.  Then again who knows right.

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of
RMcElroy () mbe com
Sent: Friday, August 15, 2003 3:41 PM
To: scheidell () secnap net; tetsujin () comcast net
Cc: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] east coast powergrid / SCADA [OT?]

At least on the west coast they do not, I think the requirements of the
systems are way out of Microsoft's range. Lot's and Lot's of Unix

-----Original Message-----
From: Michael Scheidell [mailto:scheidell () secnap net]
Sent: Friday, August 15, 2003 11:36 AM
To: tetsujin
Cc: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] east coast powergrid / SCADA [OT?]




Paller said it is "highly unlikely" that the process control computers





behind critical infrastructure like power in the United States would
run on the Windows operating system.



well, ONTARIO HYDRO does seem to have SOME windoes boxes.. at least here
is one that appears to have been infected with slammer:

http://www.hackertrap.net/LID.pl?IID=39335068

(Aug 9th through the 12th?)








-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/PWoMf3Elv1PhzXgRAu7pAJ0fsTPY9H0orgVKemAE9z3m8y1A9wCgzoL/
BVcSjwByR/UZg3YVV63uIWI=
=BK5l
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: