4 ms·
> No mention that this security hole has been kept secret by US government and leaked with devastating consequences around the world. This is irrelevant in thi
by dtech 9y ago
> No mention that this security hole has been kept secret by US government and leaked with devastating consequences around the world.
This is irrelevant in this case. The infection happened months after the security holes had been made public and patches had been released. The same could have happened if the US government had immediately reported the security holes instead of keeping them secret.
> Many setups require certification which is void after modifications which may include system updates so it's not "the easiest thing to do". It needs to go through the certification process again.
That's seems like an utterly useless certification process then. Any certification worth its salt should refuse to certify a networked Windows computer that doesn't automatically install security updates, since things like this WILL happen.
- cube00 9y agoIn this case it wasn't networked, operators infected the cameras using USB sneaker-net.
- kavok 9y agoI don't see any mention of USB in the article. Can you link a source?
- DanBC 9y agohttps://www.theguardian.com/australia-news/2017/jun/22/traffic-cameras-in-victoria-infected-by-wannacry-ransomware https://www.theguardian.com/australia-news/2017/jun/22/traff... > The department of justice said Victoria’s infection was not the result of a targeted attack, but was caused by a contractor mistakenly connecting infected hardware to cameras. Some sources are calling this a USB stick, the Guardian is being a bit more cautious.
- jaimex2 9y agoInteresting, I always assumed the cameras transmitted the photos and data back to a source over mobile networks. Technically this means if someone gets snapped and is desperate enough ( will lose job as a result of losing licence etc ) they can turn back and destroy the evidence.
- digi_owl 9y agoNow that you mention it, i recall reading about a local case where someone tried to take out a camera using dynamite. This revealed that the actual image storage was in a hardened cased buried in the ground some distance from the camera. I suspect though that these are older installs. And that newer ones, particularly those that issue tickets based on time between two cameras, are networked.
- snarfy 9y agoIt doesn't matter if it's utterly useless if it's legally required.