4 ms·
so what are we afraid of here? That a MiM attack would give us the wrong weather data?
by iveqy 6y ago
so what are we afraid of here? That a MiM attack would give us the wrong weather data?
- KnightHawk3 6y agohttps://www.abc.net.au/news/2016-10-12/bureau-of-meteorology-bom-cyber-hacked-by-foreign-spies/7923770 https://www.abc.net.au/news/2016-10-12/bureau-of-meteorology... "Bureau of Meteorology hacked by foreign spies in massive malware attack, report shows" Clearly someone has an interest in targeting it - who knows if HTTPS would actually mitigate the risks though. Doubt it would hurt and would not be that difficult. It shows the lack of maintaince in BOM that leads to events like this.
- oaiey 6y agoWhich again might be a reason why their upgrade from a old (hackable) OpenSSL to a newer version with limited budget might take a longer while. And the short term fix: Let us do only HTTP. Just an educated guess ;)
- umanwizard 6y agoMore realistically: inject shady/spammy ads, or malware.
- ratww 6y agoAlso cause DDoS on third-party websites, as seen here: https://arstechnica.com/information-technology/2015/04/ddos-attacks-that-crippled-github-linked-to-great-firewall-of-china/ https://arstechnica.com/information-technology/2015/04/ddos-...
- deleted 6y ago[deleted]
- imglorp 6y agoMaybe, given their thirst for domestic surveillance, the govt demands an mitm feed and they can't provide it as easily.
- KineticLensman 6y agoWell, it might be indicative of wider issues with keeping their systems / data up to date, or the wider govt IT infrastructures that support them. If they are getting this wrong, what other problems are there, in the Met Bureau or across Govt IT. I'm reminded of the COVID reporting fiasco we had in the UK in October [0] where Public Health England - an agency of the NHS - lost COVID data because they were using .xls files to log data rather than .xlsx - the former was silently truncating critical datasets because of a hard row limit. The .xlsx format first appeared in 2007, so the NHS have only had 13 years to get their act together. [0] https://www.theregister.com/2020/10/05/excel_england_coronavirus_contact_error/ https://www.theregister.com/2020/10/05/excel_england_coronav...
- spacemanmatt 6y agoI wish people would stop downplaying security, as if it took attention from an individual at a malicious agency to screw up your digital life.