Monday, December 28, 2015

Day on the Grid(iron)

Scoreboard just went dark!

"US electrical grid vulnerable to foreign hackers" by Garance Burke and Jonathan Fahey Associated Press  December 21, 2015

SAN JOSE, Calif. — Security researcher Brian Wallace was on the trail of hackers who had snatched a California university’s housing files when he stumbled onto a larger nightmare: Cyberattackers had opened a pathway into networks running the United States power grid.

Digital clues pointed to Iranian hackers. 

More Zionist war slop and someone to blame when the neglected infrastructure fails (or is deliberately sabotaged)! 

Yes, it will be some foreign enemy that is responsible for your further decline of living, not the looting bankers, war machine, or the feckless politicians that serve them.

The drawings were so detailed that experts say skilled attackers could have used them, along with other tools and malicious code, to knock out electricity flowing to millions of homes.

Wallace was astonished. But this breach, the Associated Press has found, was not unique. About a dozen times in the last decade, sophisticated foreign hackers have gained enough remote access to control the operations networks that keep the lights on, according to top experts who spoke on condition of anonymity due to the sensitive nature of the subject matter.

That would be the heart of Silicon Valley, and who benefits? All the software $ecurity firms (often started by those who used to work in governmental security)!

The public almost never learns the details about these types of attacks — they’re rarer but also more intricate and potentially dangerous than data theft. Information about the government’s response to these hacks is often protected and sometimes classified; many are never even reported to the government.

Now I have to fear the lights going out, fear the weather, fear the terrorists, fear the food, I can't even keep track of all the things I'm supposed to be afraid of and am damn near exhausted of it all.

These intrusions have not caused the kind of cascading blackouts that are feared by the intelligence community. But so many attackers have stowed away in the systems that run the US electric grid that experts say they probably have the capability to strike at will. And that’s what worries Wallace and other analysts most.

You have been warned, America.

‘‘If the geopolitical situation changes and Iran wants to target these facilities, if they have this kind of information it will make it a lot easier,’’ said Robert M. Lee, a former Air Force cyberwarfare operations officer.

Neither US officials nor cybersecurity experts would or could say if the Islamic Republic of Iran was involved in the attack that Wallace discovered. Hamid Babaei, a spokesman for the Iranian UN Mission, did not return calls or address questions e-mailed by AP.

It's just one of those charges they throw out, you know. This government never needs prove. If it says it, it is so and don't you dare doubt it! 

As for the lack of Iranian response, I don't blame them one bit. Plenty of other media outlets to talk to other than the world jew$media.

In 2012 and 2013, in well-publicized attacks, Russian hackers successfully sent and received encrypted commands to US public utilities and power generators; some private firms concluded this was an effort to position interlopers to act in the event of a political crisis.

And the Department of Homeland Security announced about a year ago that a separate hacking campaign, believed by some private firms to have Russian origins, had injected software with malware that allowed the attackers to spy on US energy companies.

That would be a different crowd, and that whale is off limits.

The hackers have gained access to an aging, outdated power system. Many of the substations and equipment that move power across the United States are decrepit and were never built with network security in mind; hooking them up to the Internet over the last decade has given hackers new backdoors in.

Distant wind farms, home solar panels, smart meters, and other networked devices must be remotely monitored and controlled, which opens up the broader system to fresh points of attack. Interesting.

All this is in light of the constant push to Internet everything. No worries about hacking when it comes to pushing the shopping or other pay and banking apps on your phones. Some are even talking about getting rid of cash, but then how will drug deals and political bribery take place?

Hundreds of contractors sell software and equipment to energy companies, and attackers have successfully used those outside companies as a way to get inside networks tied to the grid.

Private firms have alleged other recent hacks of networks and machinery tied to the US power grid were carried out by teams from within Russia and China, some with governmental support.

 I haven't seen anything about offensive U.S. capabilities.

Even the Islamic State is trying to hack American power companies, a top Homeland Security official told industry executives in October.

They just jumped the shark.

The attack involving Calpine is particularly disturbing because the cyberspies grabbed so much, according to previously unreported documents and interviews. Cybersecurity experts say the breach began at least as far back as August 2013. 

Is that a Freudian slip? Spies not criminals?

Calpine spokesman Brett Kerr said the company’s information was stolen from a contractor that does business with Calpine. He said the stolen diagrams and passwords were old — some diagrams dated to 2002 — and presented no threat, though some outside analysts disagree.

Look at the momentum go back and forth, huh?

The hackers stole user names and passwords that could be used to connect remotely to Calpine’s networks, which were being maintained by a data security company....

I was going to say hope they were fired but the clock ran out.

--more--"

Related: Grid operators improve coordination between New York and New England

I will now be getting off the grid and hitting the hardwood in what is an unexpected yet welcome surprise.