4 ms·
The scale of this is baffling! And from what I've seen in the industrial side of things I doubt that everything will be patched anytime soon sadly.
by Arrezz 7y ago
The scale of this is baffling! And from what I've seen in the industrial side of things I doubt that everything will be patched anytime soon sadly.
- sp332 7y agoIf we gave them each an IP address, they'd use around half of the IPv4 address space.
- peterwwillis 7y agoAnd there are many medical devices running on VxWorks. Changes to medical devices can take months to years due to quality testing and recertification. (software changes aren't as bad as a physical change, but it still takes a while)
- raggles 7y agoespecially when many of the devices have to be returned to manufacturer for the update... including a whole bunch of RTUs that run electrical transmission/distribution systems.
- mc32 7y agoOn the industrial side all these devices are in completely segregated airgapped networks. Obviously someone could strike havoc via USB, etc., but it’s not as bad as it could be.
- Xylakant 7y agoI’d expect sonicwall firewalls and xerox printers at least to have network connectivity.
- koolba 7y agoA buck shot approach of mailing malicious USB devices would likely be devastating.
- mc32 7y agoMaybe. But it would have to be smart. These systems are regulated by tight SOPs which don’t allow for the plugging in random USB devices.
- dreamcompiler 7y agoDepends on the org. For some companies, you could drop a few USB devices in the parking lot and they'd be toast. Others fill the USB ports on their computers with epoxy.
- koolba 7y ago> Others fill the USB ports on their computers with epoxy. How do you plug in a mouse or keyboard?
- dreamcompiler 7y agoYou plug those in and epoxy them so they can never be removed.
- closeparen 7y agoInternal networks, yes. Airgapped, probably not.
- dreamcompiler 7y agoWhy do you believe this? Connections between industrial control networks and corporate internet-facing business networks are ubiquitous [0]. They happen because somebody needed a link for convenience and forgot to tell management, or somebody put a wifi router on the IC network just to get their job done. This stuff happens because people act like people, policy be damned. So yeah, this is really, really bad. [0] This is well-established infosec fact. It's not controversial. Latest case I know of was at JPL a few weeks ago. https://duckduckgo.com/?q=jpl+infosec https://duckduckgo.com/?q=jpl+infosec
- mc32 7y agoAgreed. Some orgs are better than others at practicing good security hygiene. The better ones have awareness of their network and have systems monitoring their networks, etc. There are afterall the equivalents of Qualys in the IA world.