4 ms·

What is the real life risk to lack of GSM coverage? Is it really just millions of nerds without iphone (cell) access? Is any of the electric grid even publicl

by jawn 16y ago

What is the real life risk to lack of GSM coverage? Is it really just millions of nerds without iphone (cell) access? Is any of the electric grid even publicly accessible over the internet? Surely there isn't a big "off" button for the power grid, as its quite a distrubted system... Furthermore I really doubt the infrastructure for these is publicly accessible over the internet. Even so, it seems like physical security would go a much longer way than network in the case of utilities. As for markets, well there is a tiny agency called the SEC. Either way this security is a cost to be borne by industry...Not ran by state military agencies. Let's just call this for what it is, a power grab for defense/infosec contractors, and career officers. :) To that end I'm not surprised to see it so vehemently defended by infosec professionals.

tptacek 16y ago
No. The real-life risk to lack of GSM coverage is that people can't use the phones during emergencies, and that a huge variety of industrial and municipal control networks that piggyback on commercial GSM networks will be rendered inoperable. As for the markets, what does the SEC do when they get shut down by an electronic attack, other than hold a press conference? And yes. I'm pretty sure you should just take my word for it on the utilities stuff.
- jawn 16y ago
  From what I remember, during 9/11 the cell networks in NY were unusable due to capacity, should the DoD be implementing capacity guidlines as well, should we budget trillions so the DoD can buy more spectrum for cell carriers? Do CB radios suddenly stop working? As for the power companies, I'm sure thats why they hire security professionals like yourself :). The SEC provides regulations. Billions don't need to be sunk by defense agencies on what is essentially a regulation issue. A lot of these doomsday scenarios are bullshit. The world ran fine without cell phones and the internet, it'll run just as fine without it for a little while. Aside from a medical case here and there, noone is going to die and no country will dissolve as a result of being hacked on the internet or even being without power for a little while.
  - tptacek 16y ago
    All I can say is that you have strong opinions about telephony, the markets, and the utilities for someone who has clearly never spent time working with the backend systems of phone companies, exchanges, and power companies. But yes, regulations would be nice. That way, after a foreign power we've pissed off by parking aircraft carriers in their shipping lanes decides to inflict tens of billions of dollars of damage on us with a a few hours keyboarding, we can at least try to sue someone.
    - jawn 16y ago
      You touch on it with the carrier point; so let me get to the real core of my argument. Electronic or financial damage is nothing compared to the ability to level entire nations physically. Any financial/electronic threat has a suitable recourse physically.
      - jawn 16y ago
        Not sure what's with all the downvotes. I'm honestly not trolling. If there is a large problem with the argument I presented please respond so I can form better opinions.

by jawn 16y ago

tptacek 16y ago

No. The real-life risk to lack of GSM coverage is that people can't use the phones during emergencies, and that a huge variety of industrial and municipal control networks that piggyback on commercial GSM networks will be rendered inoperable. As for the markets, what does the SEC do when they get shut down by an electronic attack, other than hold a press conference? And yes. I'm pretty sure you should just take my word for it on the utilities stuff.

jawn 16y ago
From what I remember, during 9/11 the cell networks in NY were unusable due to capacity, should the DoD be implementing capacity guidlines as well, should we budget trillions so the DoD can buy more spectrum for cell carriers? Do CB radios suddenly stop working? As for the power companies, I'm sure thats why they hire security professionals like yourself :). The SEC provides regulations. Billions don't need to be sunk by defense agencies on what is essentially a regulation issue. A lot of these doomsday scenarios are bullshit. The world ran fine without cell phones and the internet, it'll run just as fine without it for a little while. Aside from a medical case here and there, noone is going to die and no country will dissolve as a result of being hacked on the internet or even being without power for a little while.
- tptacek 16y ago
  All I can say is that you have strong opinions about telephony, the markets, and the utilities for someone who has clearly never spent time working with the backend systems of phone companies, exchanges, and power companies. But yes, regulations would be nice. That way, after a foreign power we've pissed off by parking aircraft carriers in their shipping lanes decides to inflict tens of billions of dollars of damage on us with a a few hours keyboarding, we can at least try to sue someone.
  - jawn 16y ago
    You touch on it with the carrier point; so let me get to the real core of my argument. Electronic or financial damage is nothing compared to the ability to level entire nations physically. Any financial/electronic threat has a suitable recourse physically.
    - jawn 16y ago
      Not sure what's with all the downvotes. I'm honestly not trolling. If there is a large problem with the argument I presented please respond so I can form better opinions.