5 ms·

The 'cyber-attack' threat to London's Olympic ceremony

19 points by arb99 13y ago

biomene 13y ago
> "And the first reaction to that is, 'Goodness, you know, let's make a strong cup of coffee.'" It was either that or tea.
- contingencies 13y ago
  The same stood out to me. Perhaps to the overburdeningly belaboured English aristocracy, who are of course dynastically engaged in ineffectually flippant finger-twiddling, promoting any potential dalliance of discourse toward a careful coffee from the everpresent 'English' tea is their way of implying the ... goodness! ... gravity of the situation.
zimpenfish 13y ago
GCHQ trying to get ahead of the backlash there.
- anon1385 13y ago
  It's pretty funny really, if this is the best PR story they could come up with. The awful threat to national security that GCHQ is saving us from? The lights going off at the Olympics.
  - andyhmltn 13y ago
    Oh dear, what will we ever do without powered lighting for 5 minutes? I'm so happy GCHQ saved the day!
  - smackay 13y ago
    Makes you wonder whether they can tell who the real enemy is. Dr. No or Dr. Evil ?
    - iuguy 13y ago
      Neither, it was Dr. Pepper!
iuguy 13y ago
This is being portrayed as an exciting story but lets take a step back shall we? A giant intelligence-industrial facility was set up for what is effectively a large sports-day type event. The opening ceremony was potentially at risk of having lights turned off due to an unspecified and as yet unqualified threat. The intelligence-industrial complex went into action to qualify the threat and it's clear from the butterflies in stomach moment that they didn't realise it was a false alarm until afterwards. This tells us a lot about the effectiveness of GCHQ's fibre-splicing 3 day archiving of all Internet traffic, and of the security services' abilities to monitor threats through other means in order to determine whether or not they exist. In conclusion, it appears that the olympics were chasing their own tails, supported by a giant security state apparatus and couldn't determine whether or not the threat was real, let alone any details about the threat until after the event.
nicholassmith 13y ago
It's like something out of an awful techno-thriller, 'evil hackers are going to switch off the power!'. It's a ridiculous, self-promoting fantasy to give the security services something to do, a waste of time and money. If hackers could switch the power off and disrupt this massive ceremony they'd be switching the national grid off at will for fun and profit on a significantly more regular basis. Unless GCHQ just keeps those incidents quiet.
ck2 13y ago
So don't put the lights on the internet? I really hope some general has not ordered nuclear missiles to be on the internet.
- pyre 13y ago
  But how else will a game of Thermonuclear War almost accidentally launch the missiles? It's not like there's anything in popular culture warning us against these possibilities...
- objclxt 13y ago
  I think they're talking about the power itself, rather than the lighting systems. Although modern lighting systems all run over ethernet I've never come across an installation that wasn't closed-loop (before moving into software engineering I used to work on lighting at live events). There's a lot of exaggeration in the story. It makes it sound as if the stadium would have been plunged into darkness, when in fact there's significant contingency planning at these type of events around power loss, and there is in nearly all cases a mechanical (rather than computerised) failover. A far more interesting (I think, anyway) would be an attack on the actual lighting control systems themselves. Like I said, they're running over ethernet on a variety of proprietary and not-so proprietary protocols that haven't had much attention on the security side of things. And yes, they're not connected to the internet, but it wouldn't be too difficult to compromise a lighting unit itself before it was shipped from the rental shop to the stadium.
mtgx 13y ago
Relevant post: http://www.theglobeandmail.com/commentary/cyberspace-is-not-a-combat-zone/article13035562/ http://www.theglobeandmail.com/commentary/cyberspace-is-not-...
rwmj 13y ago
If it was possible to turn off the electricity at arbitrary places, then we'd have DDoS-like attacks happening on companies all the time, with foreign attackers demanding cash to keep the lights on. We don't, so either: it's not that easy, or no one has worked out how to do it yet. What it doesn't indicate is that spying on everyone helps at all. What GCHQ should be doing is working with infrastructure providers to make sure all their security software is up to date, deploying things like SELinux (one good thing the NSA has done), doing free pen-testing, advising companies on how to architect critical networks and so on.
- xyzzy123 13y ago
  Not sure about the UK exactly, but in countries I'm familiar with there are specific government agencies and initiatives for assisting critical infrastructure providers. They're doing their best. The threat isn't entirely hype. Stuxnet basically proved that dropping a grid is do-able. Not sure how you'd do individual companies, but the power grid as a whole is a lot more fragile than you might think. The industry is taking things seriously, but there are a lot of problems to sort out. Fixing legacy network architectures takes time, and a lot of critical systems never get patched. That's before you factor in espionage or 0day.
  - SideburnsOfDoom 13y ago
    > The threat isn't entirely hype. But the idea that someone was actually planning to do this to the Olympics opening ceremony probably was hype.
    - xyzzy123 13y ago
      Probably - and I don't think this justifies widespread spying either. The source of the info isn't stated, but it's more likely to be a case of "forensics panic" or on-site network sensors going off than anything else.
  - arethuza 13y ago
    "Stuxnet basically proved that dropping a grid is do-able." Didn't Stuxnet target very specific Siemens SCADA systems, unless our grids all run the same controllers and the same software (which they might well do, I have no idea) - surely an attack like that would be difficult to scale?
toyg 13y ago
I'm not a small-State supporter, but damn these stories could push me over the edge. First we paid for a massive sports event (the cost of which obviously ballooned shortly after winning the bid) which mainly benefited private corporations, then we spent god-knows-how-much to employ people to "defend" the event from a "cyber menace" that didn't even exist; and of course, we also had to put rocket launchers on houses in central London to defend from a "air menace" that also did not exist! And the day after, we woke up without NHS and schools "because we can't afford anything anymore", but god forbid we cut the military-spying complex -- in fact, the beast needs more money because it can "only" save three days of EVERYTHING. Moar data, MOAR! Disgusting.
- _mulder_ 13y ago
  Or, the event provided thousands of people with jobs, including many builders, civil engineers, rail engineers, software engineers (BBC iPlayer), broadcast engineers and the area around the park now has high-speed internet access, new accomodation, TV studios (that BT have bought cheap for their sports coverage, thus breaking Sky's stangle-hold on some UK sports coverage) and commercial space some are touting as the next Shoreditch (TechHub are looking to set up shop). As for the military presence, it's debatable about this. Do you deploy the defences and the Spies so you're able to react and protect, should anything occur? Or do you take a chance that something won't happen (like the Boston bombing, 9/11, 7/7, Munich Olympics, Manchester bombing occuring during Euro '96) but if anything does happen, accept that the damage is likely to be much higher (potential many people dying in the worlds spotlight)? Personally, I'm happy to accept that the people making these decisions are (hopefully) privy to a lot more information than I am and, generally, I'm happy to trust them with my personal safety allowing me to enjoy the worlds greatest sporting event. Also, general point regarding military spending; Military things are generally so expensive because of all the clever work that goes into designing, testing and building them. Again, think of how many people the 'military machine' employs, all that expertise on rocketry, nuclear physics, cyber skills, communications, etc. As an added bonus, Military organisations, especially spooks, employ a high percentage of natives, so you're effectively giving jobs and money to your direct neighbours, friends and relatives and not some foreign Chinese industrial Goliath.
femto 13y ago
> ... with close to a billion people watching, the impact would have been enormous. So what? A billion people might get bored for five minutes and go on a planet destroying rampage? More a reflection of the myopic TV world, where a black screen is a cardinal sin, than any real problem. There would have been no safety issue, since the stadium would certainly have had battery backed emergency lights and exit signs, so the people inside would not have been in pitch black. It's worth noting that the moving cauldron got jammed for several minutes in Sydney's opening ceremony, in 2000, and the world didn't end. In fact, it was one of the best bits of the telecast, watching the guys underneath furiously belting it with sledge hammers, in an effort to get it moving.
- d4nt 13y ago
  Agreed, the idea that whole teams of people were employed to basically prevent the government being embarrassed, and that they view their role as critically important, suggests that the state has grown way to big in the last 100 years or so.
SideburnsOfDoom 13y ago
I heard this non-story puff piece on the radio this morning. IMHO the Pirate party UK are completely right in thier 140 char summary: "GCHQ tries to win over public detailing how something didn't happen: http://ow.ly/mKqxw http://ow.ly/mKqxw #Olympics plan basically turn it off + on again" https://twitter.com/PiratePartyUK/status/354209267877822465 https://twitter.com/PiratePartyUK/status/354209267877822465
chrisphonk 13y ago
I'm not sure I fully understood this article. Was there a threat? And if there ways, they did nothing about it?
_k 13y ago
Didn't this happen during the last Superbowl ? Not sure whether they were able to find what caused the power to shut down.

19 points by arb99 13y ago

> "And the first reaction to that is, 'Goodness, you know, let's make a strong cup of coffee.'" It was either that or tea.

contingencies 13y ago
The same stood out to me. Perhaps to the overburdeningly belaboured English aristocracy, who are of course dynastically engaged in ineffectually flippant finger-twiddling, promoting any potential dalliance of discourse toward a careful coffee from the everpresent 'English' tea is their way of implying the ... goodness! ... gravity of the situation.

zimpenfish 13y ago

GCHQ trying to get ahead of the backlash there.

anon1385 13y ago
It's pretty funny really, if this is the best PR story they could come up with. The awful threat to national security that GCHQ is saving us from? The lights going off at the Olympics.
- andyhmltn 13y ago
  Oh dear, what will we ever do without powered lighting for 5 minutes? I'm so happy GCHQ saved the day!
- smackay 13y ago
  Makes you wonder whether they can tell who the real enemy is. Dr. No or Dr. Evil ?
  - iuguy 13y ago
    Neither, it was Dr. Pepper!

iuguy 13y ago

This is being portrayed as an exciting story but lets take a step back shall we? A giant intelligence-industrial facility was set up for what is effectively a large sports-day type event. The opening ceremony was potentially at risk of having lights turned off due to an unspecified and as yet unqualified threat. The intelligence-industrial complex went into action to qualify the threat and it's clear from the butterflies in stomach moment that they didn't realise it was a false alarm until afterwards. This tells us a lot about the effectiveness of GCHQ's fibre-splicing 3 day archiving of all Internet traffic, and of the security services' abilities to monitor threats through other means in order to determine whether or not they exist. In conclusion, it appears that the olympics were chasing their own tails, supported by a giant security state apparatus and couldn't determine whether or not the threat was real, let alone any details about the threat until after the event.

nicholassmith 13y ago

It's like something out of an awful techno-thriller, 'evil hackers are going to switch off the power!'. It's a ridiculous, self-promoting fantasy to give the security services something to do, a waste of time and money. If hackers could switch the power off and disrupt this massive ceremony they'd be switching the national grid off at will for fun and profit on a significantly more regular basis. Unless GCHQ just keeps those incidents quiet.

ck2 13y ago

So don't put the lights on the internet? I really hope some general has not ordered nuclear missiles to be on the internet.

pyre 13y ago
But how else will a game of Thermonuclear War almost accidentally launch the missiles? It's not like there's anything in popular culture warning us against these possibilities...
objclxt 13y ago
I think they're talking about the power itself, rather than the lighting systems. Although modern lighting systems all run over ethernet I've never come across an installation that wasn't closed-loop (before moving into software engineering I used to work on lighting at live events). There's a lot of exaggeration in the story. It makes it sound as if the stadium would have been plunged into darkness, when in fact there's significant contingency planning at these type of events around power loss, and there is in nearly all cases a mechanical (rather than computerised) failover. A far more interesting (I think, anyway) would be an attack on the actual lighting control systems themselves. Like I said, they're running over ethernet on a variety of proprietary and not-so proprietary protocols that haven't had much attention on the security side of things. And yes, they're not connected to the internet, but it wouldn't be too difficult to compromise a lighting unit itself before it was shipped from the rental shop to the stadium.

mtgx 13y ago

Relevant post: http://www.theglobeandmail.com/commentary/cyberspace-is-not-a-combat-zone/article13035562/ http://www.theglobeandmail.com/commentary/cyberspace-is-not-...

rwmj 13y ago

If it was possible to turn off the electricity at arbitrary places, then we'd have DDoS-like attacks happening on companies all the time, with foreign attackers demanding cash to keep the lights on. We don't, so either: it's not that easy, or no one has worked out how to do it yet. What it doesn't indicate is that spying on everyone helps at all. What GCHQ should be doing is working with infrastructure providers to make sure all their security software is up to date, deploying things like SELinux (one good thing the NSA has done), doing free pen-testing, advising companies on how to architect critical networks and so on.

xyzzy123 13y ago
Not sure about the UK exactly, but in countries I'm familiar with there are specific government agencies and initiatives for assisting critical infrastructure providers. They're doing their best. The threat isn't entirely hype. Stuxnet basically proved that dropping a grid is do-able. Not sure how you'd do individual companies, but the power grid as a whole is a lot more fragile than you might think. The industry is taking things seriously, but there are a lot of problems to sort out. Fixing legacy network architectures takes time, and a lot of critical systems never get patched. That's before you factor in espionage or 0day.
- SideburnsOfDoom 13y ago
  > The threat isn't entirely hype. But the idea that someone was actually planning to do this to the Olympics opening ceremony probably was hype.
  - xyzzy123 13y ago
    Probably - and I don't think this justifies widespread spying either. The source of the info isn't stated, but it's more likely to be a case of "forensics panic" or on-site network sensors going off than anything else.
- arethuza 13y ago
  "Stuxnet basically proved that dropping a grid is do-able." Didn't Stuxnet target very specific Siemens SCADA systems, unless our grids all run the same controllers and the same software (which they might well do, I have no idea) - surely an attack like that would be difficult to scale?

toyg 13y ago

I'm not a small-State supporter, but damn these stories could push me over the edge. First we paid for a massive sports event (the cost of which obviously ballooned shortly after winning the bid) which mainly benefited private corporations, then we spent god-knows-how-much to employ people to "defend" the event from a "cyber menace" that didn't even exist; and of course, we also had to put rocket launchers on houses in central London to defend from a "air menace" that also did not exist! And the day after, we woke up without NHS and schools "because we can't afford anything anymore", but god forbid we cut the military-spying complex -- in fact, the beast needs more money because it can "only" save three days of EVERYTHING. Moar data, MOAR! Disgusting.

_mulder_ 13y ago
Or, the event provided thousands of people with jobs, including many builders, civil engineers, rail engineers, software engineers (BBC iPlayer), broadcast engineers and the area around the park now has high-speed internet access, new accomodation, TV studios (that BT have bought cheap for their sports coverage, thus breaking Sky's stangle-hold on some UK sports coverage) and commercial space some are touting as the next Shoreditch (TechHub are looking to set up shop). As for the military presence, it's debatable about this. Do you deploy the defences and the Spies so you're able to react and protect, should anything occur? Or do you take a chance that something won't happen (like the Boston bombing, 9/11, 7/7, Munich Olympics, Manchester bombing occuring during Euro '96) but if anything does happen, accept that the damage is likely to be much higher (potential many people dying in the worlds spotlight)? Personally, I'm happy to accept that the people making these decisions are (hopefully) privy to a lot more information than I am and, generally, I'm happy to trust them with my personal safety allowing me to enjoy the worlds greatest sporting event. Also, general point regarding military spending; Military things are generally so expensive because of all the clever work that goes into designing, testing and building them. Again, think of how many people the 'military machine' employs, all that expertise on rocketry, nuclear physics, cyber skills, communications, etc. As an added bonus, Military organisations, especially spooks, employ a high percentage of natives, so you're effectively giving jobs and money to your direct neighbours, friends and relatives and not some foreign Chinese industrial Goliath.

femto 13y ago

> ... with close to a billion people watching, the impact would have been enormous. So what? A billion people might get bored for five minutes and go on a planet destroying rampage? More a reflection of the myopic TV world, where a black screen is a cardinal sin, than any real problem. There would have been no safety issue, since the stadium would certainly have had battery backed emergency lights and exit signs, so the people inside would not have been in pitch black. It's worth noting that the moving cauldron got jammed for several minutes in Sydney's opening ceremony, in 2000, and the world didn't end. In fact, it was one of the best bits of the telecast, watching the guys underneath furiously belting it with sledge hammers, in an effort to get it moving.

d4nt 13y ago
Agreed, the idea that whole teams of people were employed to basically prevent the government being embarrassed, and that they view their role as critically important, suggests that the state has grown way to big in the last 100 years or so.

SideburnsOfDoom 13y ago

I heard this non-story puff piece on the radio this morning. IMHO the Pirate party UK are completely right in thier 140 char summary: "GCHQ tries to win over public detailing how something didn't happen: http://ow.ly/mKqxw http://ow.ly/mKqxw #Olympics plan basically turn it off + on again" https://twitter.com/PiratePartyUK/status/354209267877822465 https://twitter.com/PiratePartyUK/status/354209267877822465

chrisphonk 13y ago

I'm not sure I fully understood this article. Was there a threat? And if there ways, they did nothing about it?

_k 13y ago

Didn't this happen during the last Superbowl ? Not sure whether they were able to find what caused the power to shut down.