3 ms·
These issues are known in the control systems security space, and have been for a long time. Convincing the owners/operators of them is very, very hard. They al
by sophacles 12y ago
These issues are known in the control systems security space, and have been for a long time. Convincing the owners/operators of them is very, very hard. They all say the same things:
"But they are vlanned off!"
"Why would anyone know to attack it, we keep that info confidential?"
"They wouldn't target us, we're a small company"
"The probability of this is too small to worry about, the cost/benefit is just not realistic"
"Can this really be used to do anything bad, the attacker wouldn't even know what to do"
- jessaustin 12y agoI'm sure you're right, but the NSA is great at strong-arming executives into actions they wouldn't otherwise take. The typical dog-and-pony show runs like this: inform the CEO that she has a one-day top-secret clearance, and her attendance is expected at a "secret" meeting of industry executives. The morning portion of the meeting consists of going around the room and pointing out the gaping holes in each executive's company's network. The afternoon portion is "what you can do to help us help you". These recommendations come off as a bit more authoritative than that memo from the network engineer.
- phkahler 12y agoDoes that really happen? Because that would be awesome.
- jessaustin 12y agoSee pages 179 and 180 of @War by Shane Harris. Since these briefings are clearly more about NSA nest-feathering than actual security, I think it's not so awesome.