5 ms·
A lot of the failure is just the basics, and it's not always technical incompetence. It can be managerial. For instance, most SCADA and IT vendors can do a lot
by ocdtrekkie 6y ago
A lot of the failure is just the basics, and it's not always technical incompetence. It can be managerial.
For instance, most SCADA and IT vendors can do a lot better than (probably not patched) Windows 7 with TeamViewer. However, there's two prevailing attitudes that interfere:
1. We're not big like Boston or New York, therefore we're not going to be targeted and are fine, nobody cares to harm us.
2. When you have a working SCADA system, nobody wants to run updates or make security policy changes when that might lead to not having a working SCADA system. Security vulnerability remains the constant invisible bogeyman, you never know if you did enough until it's too late.
- dylan604 6y ago> 1. We're not big like Boston or New York, therefore we're not going to be targeted and are fine, nobody cares to harm us. If enough events keep occurring (and why would we suspect they won't), this attitude will HAVE?? to change. Kids will learn about it, and do it for the lulz. The city of Dallas had its tornado sirens hacked, and at least in the local areas, it brought some attention to the subject. Eventually, the bored teenagers in the small towns are going to do it just because.
- ocdtrekkie 6y agoYeah, I think every time an incident like this occurs, it provides a new cautionary tale where people can see how mistaken that attitude is.
- TeMPOraL 6y ago> Eventually, the bored teenagers in the small towns are going to do it just because. Not just locally. If you're trying to mess up an industrial system to see it mentioned in the local newspaper few days later, you may just pick a random system from Shodan, note its location, and check their local newspaper.