3 ms·
I once found a control panel for a power plant in the megawatt range in a neighbour country. I don't know exactly how powerful since no sane person would start
by bjoli 8y ago
I once found a control panel for a power plant in the megawatt range in a neighbour country. I don't know exactly how powerful since no sane person would start clicking around, but there was easy access to maintenance things.
I called the Swedish government agency responsible for the same thing in Sweden and was quickly escalated and ended up with someone who knew what they were talking about. Hours later the page was down.
I suspect this was the correct path since having a foreign national calling about "hacking" a mw power plant might have ended with me in trouble.
- davb 8y agoSimilarly I did come across some water treatment plant SCADA panels in another country because I didn't limit my Shodan query to my own country. Turns out my city's name exists in another country where there are a bunch of exposed SCADA systems with web interfaces... I didn't touch anything but it doesn't seem very safe. It does raise the issue of responsible disclosure. I've approached companies in the past after identifying security flaws and had the whole range of responses. Thanks for telling us, we'll take it from here. Let us reward you for telling us. Let us sue you for hacking us... Now it's safer, if less socially responsible, to stay quiet. ️