4 ms·
Several power plants in the uk have their control systems entirely open on the net. No authentication or encryption, you just need to know the IP address
by ourlordcaffeine 6y ago
Several power plants in the uk have their control systems entirely open on the net. No authentication or encryption, you just need to know the IP address
- eli 6y agoI don’t believe it
- berkes 6y agoHaving worked at a power-plant and a pumping station, I can believe it. Such places will be left open now and again. Mistakes happen. Anything from "ABB needs the telemetry but cannot visit the site in person due to covid, can you open the firewall on port 1337 when they call you". Sure. (and then forgets). Some engineer left a dongle in a controller, during an emergency a laptop logs on on the network that is not properly secured etc. What I don't believe is that OP never reported it. Because such places will have protocols and will fix it the moment someone calls. And if they don't have protocols, they will have them by the end of the week. Edit: so what I also don't believe is that OP is certain they are still wide open.
- ourlordcaffeine 6y agoTold them ages ago, they haven't fixed it and don't seem to care. They want to be able to operate the turbines remotely and either don't care or don't understand the need for authentication. Should add that these plants aren't big enough to cause a blackout if they are hacked, the only losers will be the owners.
- hyper_reality 6y agoHow do you know these aren't honeypots?
- ourlordcaffeine 6y agoI work in the industry. I know what power plants they are
- mercora 6y agowhy wont you report them? is nobody interested in securing these?