Hackers Broke Into FAA Air Traffic Control Systems
PL/SQL Guy writes "Hackers have repeatedly broken into the air traffic control mission-support systems of the US Federal Aviation Administration, according to an Inspector General report sent to the FAA this week, and the FAA's increasing use of commercial software and Internet Protocol-based technologies as part of an effort to modernize the air traffic control systems poses a higher security risk to the systems than when they relied primarily on proprietary software, the report said. Intrusion detection systems (IDS) are deployed at only 11 of hundreds of air traffic control facilities. In 2008, more than 870 cyber incident alerts were issued to the organization responsible for air traffic control operations and by the end of the year 17 percent (more than 150 incidents) had not been remediated, 'including critical incidents in which hackers may have taken over control' of operations computers, the report said."
when 4chan goes down for a week. Seems that keeping that site running is a matter of national security!
They have the CIP device.
Why are critical systems not protected by a one inch air gap between the NIC and cable from remote exploit?
Seems like from TFA they're not:
A Human Right
Why my last 4 flights arrived on time.
Sig Follows: "Suppose you were an idiot. And suppose you were a member of Congress. But I repeat myself." -- Mark Twain
"Where do you want to go today?"
I'm not sure it gets much worse than this. I guess the local nuke plant could install a "whack-a-rod" live webcam game and secure it with DMCA technology...
"Not an actor, but he plays one on TV."
. . . it's proprietary, so no one, not even IBM, understands how it works.
The script kiddies will have to learn JCL. Have fun, you little rotten bastards!
And even if they manage to break into a machine, they will be confronted with z/OS ISPF . . . can they get their tn3270 sessions to work? Hee, hee! Find your PA1 key!
The best choice for a truly secure system, is to use some weird shit, that nobody else wants to use. And thus, there are not a lot of folks hacking about trying to poke holes in it.
Wait for a script kiddie post, on how to use nmap to probe for ports on LU6.2.
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!