6 ms·
> Chemical plants (and other such facilities) should not be Internet connected That merely hardens the target, but does not protect it. Stuxnet was delivered v
by everdev 9y ago
> Chemical plants (and other such facilities) should not be Internet connected
That merely hardens the target, but does not protect it. Stuxnet was delivered via USB to an Iran nuclear facility and had the exact same intent of triggering physical damage, which it apparently did successfully.
A decade ago, disconnecting from the Internet would have been considered security, but things have progresses and security needs to as well.
https://en.m.wikipedia.org/wiki/Stuxnet https://en.m.wikipedia.org/wiki/Stuxnet
- rsync 9y ago"Stuxnet was delivered via USB to an Iran nuclear facility and had the exact same intent of triggering physical damage, which it apparently did successfully." In my admonition against networked, general purpose computers, I purposely neglected to also mention that the plant engineers should not shoot themselves in the face, with an actual gun, upon starting their work shift. I neglected to mention this in the same way that I neglected to mention that you should not have a PC running Windows anywhere near your critical infrastructure. The failures that allowed stuxnet to occur were NOT "casualties on the battlefield of modern cyber warfare" - they were the clownish actions of idiots who got owned by autorun.inf[1] (among other things). [1] http://www.eweek.com/security/how-stuxnet-malware-used-autorun-trick-to-infect-pcs http://www.eweek.com/security/how-stuxnet-malware-used-autor...