5 ms·
U.S. Navy Asked You to “Hack Our Ship,” Strengthens Cyber Defense
- wyldfire 10y agoI suppose it's interesting that the event was held. But what about an outcome? Surely a tally of exploits found can't be a secret, can it? Can someone at least disclose whether it was nonzero?
- vanattab 10y agoI am almost certain the details of the specific vulnerabilities would be classified. You probably had to sign some kind of NDA to even participate if I had to guess.
- excalibur 10y agoIs this the same ship they purchased the super-extended Windows XP support for?
- solotronics 10y agocringe I hope this is a joke and that they are running something like OpenBSD.
- DKnoll 10y agoIt's not a joke.
- droithomme 10y ago"a simulated system built ... to resemble fleet systems" Is hacking against a simulated system that merely "resembles" the original rather than exactly duplicates it the same as hacking against the actual real system? Probably not, and if so, is there much real value to such an exercise.
- vanattab 10y agoIt's probably the real software control system for the ship they probably just don't have an actual rail gun at the end of the FireRailGun() function. At least I hope they don't.
- JamilD 10y agoThe way they phrase it is suspect though. It's not "the system deployed in a test environment", it's "a simulated system built ... to resemble fleet systems""
- semi-extrinsic 10y agoYou're talking about the same Navy that ran Millenium Challenge 2002, where after the Blue team had their collective asses handed to them on a plate by the "Middle Eastern Rogue State (coughIrancough)" Red team using WW2 equipment and asymmetric tactics (literally tens of thousands of simulated US casualties), they refloated all the lost Blue team ships, and ordered the Red team to follow predescribed plans written to ensure Blue team success, including turning on their AA radars so they could be found and shot, and not shooting at Blue team landing craft. https://en.wikipedia.org/wiki/Millennium_Challenge_2002#Exercise_action https://en.wikipedia.org/wiki/Millennium_Challenge_2002#Exer...
- DKnoll 10y agoIt's definitely not... but I'm sure there is still something to be gained from it. I assume this will leave out the most vulnerable element of any system, which is humans.
- johngalt 10y agoI can beat anyone at chess. Just agree to play on my chessboard, with my rules, and only the pieces I allow you to have. These sorts of contests are often more about generating marketing material for the developer than they are about actual pen-testing.