funsec mailing list archives

Re: SCADA Watch: Hackers Penetrate Water System Computers


From: David Dagon <dagon () cc gatech edu>
Date: Tue, 31 Oct 2006 11:58:36 -0500

On Tue, Oct 31, 2006 at 09:39:35AM -0600, Gadi Evron wrote:

Hmm, one would ask why it is connected to the Internet or allowed to surf.

That's the 'SC' and 'DA' parts of SCADA.  Traditionally, controllers
would use uart to send data (often via a modem).  The trend in scada
gear is to use commodity IP-speaking hardware (even using embedded
windows clients for the controllers).

Until recently, the chlorination for the water I drink daily was
admin'd on a win95 machine, which needed frequent rebooting because of
viruses.  That's because the historic threat to the city's water
supply was chiefly the odd stray horse that would drown in one of the
reservoirs.  The new threat, of course, includes news outlets, with
their devastating ability to distort budget priorities.

-- 
David Dagon              /"\                          "When cryptography
dagon () cc gatech edu      \ /  ASCII RIBBON CAMPAIGN    is outlawed, bayl
Ph.D. Student             X     AGAINST HTML MAIL      bhgynjf jvyy unir
Georgia Inst. of Tech.   / \                           cevinpl."
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: