3 ms·
The article says the ransomware message appeared on a computer in the control room. That seems strange, do the pipeline operators adjust fuel flow based on how
by rapjr9 5y ago
The article says the ransomware message appeared on a computer in the control room. That seems strange, do the pipeline operators adjust fuel flow based on how much cash is coming in? Is this a common practice? Or maybe it was not the billing system that was compromised? I guess it is possible billing would be used to predict required flow rate in some way, but that means any hack of the internet connected billing system has a direct route to controlling fuel flow in the pipeline, which seems rather dangerous. Post some fake orders and suddenly there are millions of gallons of fuel wherever you say they should be. Does the pipeline also run in reverse? If not it then that fuel could be stranded.
- cesarb 5y ago> The article says the ransomware message appeared on a computer in the control room. That seems strange That computer was probably their "office" computer, which they would use for things like email. From what I understood from the article ("[...] an employee in Colonial’s control room saw a ransom note demanding cryptocurrency appear on a computer just before 5 a.m. The employee notified an operations supervisor who immediately began to start the process of shutting down the pipeline, [...]. By 6:10 a.m., the entire pipeline had been shut down"), the supervisor made the sensible decision of immediately starting an orderly shutdown of the pipeline, before the thing propagated to their control computers; as can be seen by the timing, doing an orderly shutdown takes a while.