Re: SCADA fun

[Robert Malmgren <rom () romab com>]

On 12/2/11 7:59 PM, Alex Scoble wrote:
> What's the word on this, is it legit or not? DHS continues to say that
> there was no hack...

No, DHS (Marty Edwards, he is the top guy,  who's blackberry goes off
for all things SCADA) latest comment yesterday is that they cannot
comment on Water Utility hack #2, since it is a ongoing criminal
investigation. NB, this is the Texas one, the pastebin one referred to
below. Not the Springfield, Illinois, one referred to in the Wired
article and elsewhere.

On the same subject, it seem to be very problematic when there are
several things going on at the same time, and that there are several
organisations involved. See

http://www.digitalbond.com/2011/12/02/friday-news-notes-14/

" Michael Welch, Deputy Assistant Director of FBI's Cyber Division,
stated, "We just had a circumstance where we had three cities, one of
them a major city within the US, where you had several hackers that had
made their way into SCADA systems within the city,". This occurred at a
presentation at Flemings Cyber Security conference in London according
to Information Age's Hal Hodson. This is odd since it was not mentioned
by the FBI at their recent ICSJWG presentation, which is where this
information would be most helpful. I assume the recent South Houston
proof of concept hack by pr0f is one. Hopefully the FBI will go on the
record and provide details or clear up a misstatement."



> Thanks,
>
> Alex
>
> On Sat, Nov 19, 2011 at 6:44 AM, Dave Aitel <dave.aitel () gmail com
> <mailto:dave.aitel () gmail com>> wrote:
>
>     As they say in the industry: fail at air gap?
>
>     http://pastebin.com/Wx90LLum
>
>     -dave
>
>
>     _______________________________________________
>     Dailydave mailing list
>     Dailydave () lists immunityinc com
>     <mailto:Dailydave () lists immunityinc com>
>     https://lists.immunityinc.com/mailman/listinfo/dailydave
>
>
>
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunityinc com
> https://lists.immunityinc.com/mailman/listinfo/dailydave


-- 
---
Robert Malmgren                 Encrypted e-mail preferred
E-mail: rom () romab com           PGP RSA 4096, id: 0x5B979EF5
Cellular: +46(0)708-330378      Fingerprint: DE59 D86C 4CAF 2E59 A64E 
Jabber: rom () romab com                        5476 2360 F1B4 5B97 9EF5

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave