Greek Hackers Target CERN's LHC

Doomsayers Delight writes "The Telegraph reports that Greek hackers were able to gain momentary access to a CERN computer system of the Large Hadron Collider (LHC) while the first particles were zipping around the particle accelerator on September 10th. 'Scientists working at CERN, the organization that runs the vast smasher, were worried about what the hackers could do because they were "one step away" from the computer control system of one of the huge detectors of the machine, a vast magnet that weighs 12,500 tons, measuring around 21 meters in length and 15 meters wide/high. If they had hacked into a second computer network, they could have turned off parts of the vast detector and, said the insider, "it is hard enough to make these things work if no one is messing with it."'"

Comments

Why is that even possible?

[Reality Master 201]

Why can anyone get to the control systems for a piece of equipment like that from the internet?

Re:Why is that even possible?

[Anonymous Coward]

Hard to sneaker-net data to a > 1000 machine grid.

This system is a bit larger scale than you suspect.

Re:Why is that even possible?

[jd]

Open Source should have meant that a few thousand eyeballs scoured that code over the years between being written and being used. However, those few thousand eyeballs can't see code that nobody is told about. I discovered the source to the various projects by scouring CERN's network and digging deep through nests of links and obscure references. The Yahoo group for discussing grid computing has barely been used in the past year, and none of it for this. If there are any records for these projects on Freshmeat, it's because I added them. The project summaries are vague, where they're given at all. This simply isn't an acceptable way of distributing information. Their brief notices on minor pages away from the real information are about as useful as a house demolition order being posted in a basement with no stairs or lights.

Re:Why is that even possible?

[quanticle]

Unfortunately, it's not always that simple. Sure, there may be a few universities that have secure leased lines running to CERN, but, given the prominence of the LHC, there are sure to be researchers not from those universities who want to run LHC experiments. Cutting off those researchers simply because they're at the wrong institution doesn't seem fair.

Can't we all just get along?

[mpoulton]

Can't geeks just be happy for society's scientific accomplishments and not try to screw up a good thing just because it's possible? Like the guy says, it's hard enough to make these things work when everyone's working together. Assholes.

Re:The correct term

[zappepcs]

I'm with you on the nomenclature issue. Such an important experiment and mankind in general offers far too many whack jobs who want to shut it down.

The logic of the 'we're all gonna die' crowd eludes me. If nothing happens, all is good. If the world ends, doesn't matter anyway. All those that think they will go to meet their maker should be happy either way, right? WTF?

Um, for all you jokers out there...

[rickb928]

Wondering why the LHC is connected to the Internet 'at all'...

Why was the Web even developed? Why was HTTP even thought of? Why was a graphical browser of any interest?

CERN. Ask Mr. Berners-Lee. And then contemplate the irony of wondering this at all.

Sadly, it looks like CERN needs to work on the security more, but hey, that's in the spirit of the World-Wide Wild Web, eh?

Air gap and 15 Petabytes of data annually

[fejes]

Ok, I know you want to think that this can be done... but how exactly do you air gap a system that produces 15 Petabytes of data annually and share that data with 100's of labs around the world?

By manual entry, copying this data across the air gap (120wpm) would take:

15,000,000,000,000,000 characters /(120 words/minute * 6 characters/word) = 4*10^7 years.

Even passing that back and forth on hard drives means shutting about (15Pb/365/24 = ) 1.7 Terabytes per hour. (24 hours a day.)

At some point, you have to admit that just connecting this thing to the internet and securing it is the right thing to do.