4 ms·
The security is definitely better than in the 90s, for what I've heard. The impact of an attack is however greater. You can literally shut down an entire countr
by kickling 7y ago
The security is definitely better than in the 90s, for what I've heard. The impact of an attack is however greater. You can literally shut down an entire country today, something you could not do back then.
- tptacek 7y agoDocumented state-level kinetic computer security attacks go back a lot further than you think they do.
- math_and_stuff 7y agoIs there prior art before alleged sabotage leading to pipeline explosion in 1982? [1] Zetter's Countdown to Zero Day points to that with skepticism and also talks about Kosovo as one of earliest cases, as does Sandworm. Do you think this is roughly correct? [1] https://en.m.wikipedia.org/wiki/At_the_Abyss https://en.m.wikipedia.org/wiki/At_the_Abyss
- tptacek 7y agoI'm thinking about Kosovo.
- SahAssar 7y agoYeah, that's what I meant. The security might be better, but the attack surface and attack impact has grown a lot faster than than the overall security.
- GillBates666 7y agoI'm sorry, but how do you literally shut down a country? Hyperbole much?
- nitrogen 7y agoHack the power grid or core network/telecom infrastructure.
- blaser-waffle 7y agoSee also: suspected Russian attacks on Estonia related to the a statue being taken down https://en.wikipedia.org/wiki/2007_cyberattacks_on_Estonia https://en.wikipedia.org/wiki/2007_cyberattacks_on_Estonia
- jodrellblank 7y agoI suppose if I point out a government hit by ransomware and forced to run with pen and paper just last year[1], an attack on a nuclear power plant which could have been targetted at power generation[2], an attack taking down 1/5th of the world's ocean freight and a company with enough annual revenue to be in the top 100 countries by GDP[3], or a classic software bug taking out power to 45 million people in the USA for two weeks[4], you're just going to claim those aren't important because they didn't "literally" shut down every operation in an entire country, or weren't deliberate attacks trying to do that, and therefore they aren't evidence that it could happen? [1] https://nunatsiaq.com/stories/article/government-of-nunavut-returns-to-paper-records-and-phone-calls-following-ransomware-attack/ https://nunatsiaq.com/stories/article/government-of-nunavut-... [2] https://en.wikipedia.org/wiki/Stuxnet#Iran_as_a_target https://en.wikipedia.org/wiki/Stuxnet#Iran_as_a_target [3] https://www.forbes.com/sites/leemathews/2017/08/16/notpetya-ransomware-attack-cost-shipping-giant-maersk-over-200-million/ https://www.forbes.com/sites/leemathews/2017/08/16/notpetya-... [4] https://en.wikipedia.org/wiki/Northeast_blackout_of_2003 https://en.wikipedia.org/wiki/Northeast_blackout_of_2003