The article never once uses the term "internet", and indeed many of these SCADA networks probably aren't connected to the internet. I've worked on a handful of

The article never once uses the term "internet", and indeed many of these SCADA networks probably aren't connected to the internet. I've worked on a handful of them (no power utilities though), and the state of security is pretty bad. -Physical security ranges from OK to non existent. A smile and a wave can get you lots of places. Many things that could be locked, aren't. -I've seen many, many alarmed doors and areas where there is a large "Enter 12345 to disable alarm" taped to the alarm panel -Default passwords are never changed on lots of equipment -When default passwords aren't used, often times the passwords are taped or written on equipment -Radio networks are often unsecured (authentication and encryption simply dont exist on lots of older radio equipment, a cheap SDR could let you discreetly access sensitive communications in some cases). Modern radio networks can be much better, though (this is my area of expertise). Still, you'd need a lot of domain specific knowledge to pull off a successful attack.