Slashdot Mirror


Is Cyberwarfare Fiction?

An anonymous reader writes "In response to calls by Russia and the UN for a 'cyberwarfare arms limitation treaty,' this article explains that 'cyberwar' and 'cyberweapons' are fiction. The conflicts between nation states in cyberspace are nothing like warfare, and the tools hackers use are nothing like weapons. Putting 'cyber' in front of something is just a way for people to grasp technical concepts. The analogies quickly break down, and are useless when taken too far (such as a 'cyber disarmament treaty').'"

205 comments

  1. The only new thing is the UN by Anonymous Coward · · Score: 0

    We gotta do it before the cyberterrorists cybernuke our cybernets! Think of the children!

    I guess the news here is that this isn't just one or two US Senators saying this now.

    1. Re:The only new thing is the UN by happy_place · · Score: 4, Funny

      'Think of the cyberchildren.' that and the cybercitizens who elect cybersenators...

      --
      http://www.beanleafpress.com
    2. Re:The only new thing is the UN by Monkeedude1212 · · Score: 2, Insightful

      They are all FBI Agents.

    3. Re:The only new thing is the UN by jeffmeden · · Score: 1

      They ARE thinking of the children... didn't you read the summary? Russia wants to give out "cyberwarfare arms limitation treats" to all the good little girls and boys who do their homework, listen to their parents, and most importantly do *not* start DDOS attacks or run password guessers against random hosts in the .mil domain.

      What better way to make the world a peaceful place than to start with the children? Here's hoping they haven't fixed that typo by the time my comment hits!

    4. Re:The only new thing is the UN by Jazz-Masta · · Score: 1

      We gotta do it before the cyberterrorists cybernuke our cybernets!

      Think of the cyberfallout! Cybercancer, cyberbirthdefects...we better sink some cybermoney into our cyberdefences!

    5. Re:The only new thing is the UN by Anonymous Coward · · Score: 0

      They are all FBI Agents.

      What about the furries?

    6. Re:The only new thing is the UN by Opportunist · · Score: 3, Funny

      Hmm... an incoherent, constantly squabbling group of people who spend more time fighting amongst themselves than getting their act together and working for the common goal, self absorbed and hardly in touch with reality, dreaming up pipe dreams of greatness while at the same time accomplishing nothing...

      Call me a conspiration crackpot, but could it be that they're sitting in congress?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:The only new thing is the UN by bertoelcon · · Score: 2, Funny

      Think of the children!

      I really don't want a visit from a partyvan.

      --
      Anything can be found funny, from a certain point of view.
    8. Re:The only new thing is the UN by Anonymous Coward · · Score: 0

      All your internets are belong to us.

    9. Re:The only new thing is the UN by Runaway1956 · · Score: 0, Offtopic

      Alright, you're a constipated crackpot. Ex-lax will relieve that, I'm told. Oh - wait - you said conspiration? Hmmmm. Better see the doctor. I've heard that can be really bad . . .

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    10. Re:The only new thing is the UN by Anonymous Coward · · Score: 0

      I *wish* I was in congress, you insensitive clod!

    11. Re:The only new thing is the UN by Opportunist · · Score: 1

      Hey, you got my vote!

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  2. ... or Trick? by syntap · · Score: 2, Funny

    In response to calls by Russia and the UN for a "cyberwarfare arms limitation treat"

    And then we can all dress up as h4x0r3z, maybe call the event Geek-o-Ween.

    1. Re:... or Trick? by jbeaupre · · Score: 1

      No, they just want more Easter Eggs embedded in software.

      --
      The world is made by those who show up for the job.
  3. Cyber warfare: FUD for vendors. by AnonymousClown · · Score: 1, Insightful

    I can disable the national power grids of half the countries in the world using nothing more than an iPhone

    And you need a guy there to knock out the backup generator.

    Please, knocking out the power grid or making all the red lights turn green or whatever they're afraid of is nothing like having a bullet penetrate someone or a bomb going off - it's almost impossible, if not impossible to kill someone by hacking into a computer.

    Shut something life threatening down or screw it up by hacking into it? There's backup or work around.

    "Cyber warfare" is a small threat and not worth all the time and money spent on it. We should be spending the effort on ground surveillance and other means to reducing life threatening issues.

    --
    RIP America

    July 4, 1776 - September 11, 2001

    1. Re:Cyber warfare: FUD for vendors. by jofny · · Score: 4, Insightful

      Please, knocking out the power grid or making all the red lights turn green or whatever they're afraid of is nothing like having a bullet penetrate someone or a bomb going off - it's almost impossible, if not impossible to kill someone by hacking into a computer.

      You're flat out incorrect here. First, not only can the power be shut off, but generators can be made to explode. Second, if you mess with the supply chain electronically, it's possible to do some really interesting stuff with medical supplies, parts for just in time manufacturing, etc. Could go on - but the overall effect is direct, substantial life threatening consequences.

    2. Re:Cyber warfare: FUD for vendors. by qortra · · Score: 4, Insightful

      whatever they're afraid of is nothing like having a bullet penetrate someone or a bomb going off

      I'm not confident that you fully understand the perceived danger on the part of world leaders. The issue is that people with an inordinately high ability to compromise computer systems might have access to information. Consider information like troop movements, secret bomb/nuclear supply facilities, infrastructure weak points, and financial information (account balances, passwords, etc). While compromising a system with this information may not kill somebody directly, the information could most certainly be used to kill many people, or perhaps to temporarily stunt or even cripple entire economies.

    3. Re:Cyber warfare: FUD for vendors. by jeffmeden · · Score: 0

      Yes, direct and life-altering consequences for the 30 or so seconds it takes for them to figure out that aspirin bottles are being filled with Zoloft and generators are randomly exploding left and right. Then, they send a military team to kill you (in the name of antiterrorism) and they plug the holes at whatever price is necessary (in the name of antiterrorism) and then, if anyone outside the government HAD even noticed, they would be back to life as usual.

    4. Re:Cyber warfare: FUD for vendors. by Maximum+Prophet · · Score: 3, Interesting

      And yet, the CIA was able to explode a Soviet natural gas pipeline simply by inserting some code into the pipeline control software the Soviets were stealing from the Canadians. "The result was the most monumental non-nuclear explosion and fire ever seen from space,..."

      --
      All ideas^H^H^H^H^Hprocesses in this post are Patent Pending. (as well as the process of patenting all postings)
    5. Re:Cyber warfare: FUD for vendors. by Raven42rac · · Score: 1

      Those power plant generators have a ridiculously high cost and lead time, and if they do it right, you won't know who did it, so you'd be impotently waggling your spear at no one in particular.

      --
      I hate sigs.
    6. Re:Cyber warfare: FUD for vendors. by ubrgeek · · Score: 2, Funny

      > Shut something life threatening down or screw it up by hacking into it?

      I was really hoping you were going to end that sentence with, "There's an app for that."

      --
      Bark less. Wag more.
    7. Re:Cyber warfare: FUD for vendors. by Compholio · · Score: 2, Interesting

      Those power plant generators have a ridiculously high cost and lead time, and if they do it right, you won't know who did it, so you'd be impotently waggling your spear at no one in particular.

      They also run on their own closed-circuit network, so good luck causing trouble without physical access or making yourself pretty obvious digging up the cables.

    8. Re:Cyber warfare: FUD for vendors. by ThunderBird89 · · Score: 4, Insightful

      Cyber-warfare is not about killing people, it's about killing the country.

      Think: no mains power, the backup generators can only sustain so much equipment for so long. Since the fuel pumps don't function either, you can't hop down to the gas station to buy some more fuel, and it will eventually run out. Then what? Production grinds to a halt, administration is disabled, communication services non-functional.
      All you need then is one act of terrorism. No ambulances, no firefighters, as nobody can call for help. If someone does make it to the hospital, no X-ray, no life-support, no vital monitors, no defibrillator.

      And this is just one scenario. Use your imagination!

      --
      Hyperbole: I use it liberally!
    9. Re:Cyber warfare: FUD for vendors. by rickb928 · · Score: 3, Insightful

      "Please, knocking out the power grid or making all the red lights turn green or whatever they're afraid of is nothing like having a bullet penetrate someone or a bomb going off - it's almost impossible, if not impossible to kill someone by hacking into a computer."

      What the hell are you doing on Slashdot?

      Turn all the traffic lights green in even a small part of Los Angeles, and I think it's likely someone will die in an accident caused, proximately, by the hacking of the traffic control system. Simple enough.

      Crippling a cell system might result in the failure of any number of people to make contact and deliver critical information, resulting in accidents, mistakes, lack of care, and those could result in needless deaths.

      If your definition of 'warfare' must include deadly force, then much of what we think of as 'cyberwarfare' doesn't meet that definition. Emptying bank accounts, DDOS attacks, defacing websites, etc. probably don't quite rise to the definition of deadly force. But I have only the one example of traffic control. Oh, another one - disabling at least some of the electrical grid seems to be possible, and blackouts can easily result in deaths.

      There's plenty of hype around 'cyberwarfare'. Now to listen to the hype around 'smart grids', and how people will feel when their refirgerators get turned off during the day, or the furnace runs continuously on 103 days. Or any number of interesting nuisances that aren't fatal (except for your plants, pets, and bed-ridden grandmother) but are sure a pain.

      Oh yeah. Grandma. She might not think it's to hot until she's too faint to reach the phone.

      Food for thought. Go smart grids, go!

      --
      deleting the extra space after periods so i can stay relevant, yeah.
    10. Re:Cyber warfare: FUD for vendors. by Opportunist · · Score: 3, Funny

      But that was just possible because the Soviets were stupid enough to use something that was created in the western world. We'd never be so stupid to use electronics made in... oh... umm... well...

      Next question?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    11. Re:Cyber warfare: FUD for vendors. by AtomicJake · · Score: 2, Insightful

      Those power plant generators have a ridiculously high cost and lead time, and if they do it right, you won't know who did it, so you'd be impotently waggling your spear at no one in particular.

      They also run on their own closed-circuit network, so good luck causing trouble without physical access or making yourself pretty obvious digging up the cables.

      Or find out that the closed-circuit network was not that close as you thought...

    12. Re:Cyber warfare: FUD for vendors. by Anonymous Coward · · Score: 0

      Stop parroting that hoax.

    13. Re:Cyber warfare: FUD for vendors. by PeterBrett · · Score: 2, Insightful

      They also run on their own closed-circuit network, so good luck causing trouble without physical access or making yourself pretty obvious digging up the cables.

      They also have fixed electromechanical failsafes. I think that most electrical engineers are sufficiently aware of the fact that computers go wrong not to put protection solely in the hands of software.

    14. Re:Cyber warfare: FUD for vendors. by coaxial · · Score: 1

      You're flat out incorrect here. First, not only can the power be shut off, but generators can be made to explode.

      Not if they're designed correctly.

      Second, if you mess with the supply chain electronically, it's possible to do some really interesting stuff with medical supplies, parts for just in time manufacturing, etc. Could go on - but the overall effect is direct, substantial life threatening consequences.

      And you know what? People are resilient, and it's people not machines that make the system. You place a few calls, and everything is fixed. This is just the Military-Industrual Complex getting its y2k on. The tried to scare us by saying bills would go unpaid, people would be charged exorbitant amounts of interest, computers would turn into steam engines, and dogs and cats would live together. Well one, it didn't happen. And two, it hinges on people not paying attention to the obvious. For as much as people want to say that everyone else is stupid except them, we live in a world where grocery stores continue to make sales when the cash registers are broken. As long as we have waitresses that say, "$4000 for a cheeseburger? That's not right," we'll be just fine.

    15. Re:Cyber warfare: FUD for vendors. by Lumpy · · Score: 1

      Yup.

      So remember that the day they charge some 16 year old from Kentucky with high treason for having and deploying a Weapon Of Mass Destruction because his toy virus got loose and deleted every *.doc and *.xls file on windows computers across most of the globe.

      --
      Do not look at laser with remaining good eye.
    16. Re:Cyber warfare: FUD for vendors. by Lumpy · · Score: 1

      Disable the safetys and feed line power to a generator out of sync. It will blow up quite spectacularly. I saw this happen to a old Civil Defense 2000KW generator.... the safety systems failed and the generator kept drifting away from the line because the motor was trying like hell to turn at more than 60 cycles. the boom was heard for nearly 1/4 mile in every direction and is ripped open the Semi trailer like it was tinfoil.

      --
      Do not look at laser with remaining good eye.
    17. Re:Cyber warfare: FUD for vendors. by Lumpy · · Score: 1

      No they dont. Most of these idiots put the SCADA systems on the internet.

      I know of two water filtration plants that the SCADA system is protected by "PC anywhere" they have a PC that bridges both the private network and the internet.. and it's a FRICKING WINDOWS PC running PC anywhere.

      This is not uncommon. and usually due to complete idiots that make up the management of the operation wanting to dial in and monitor employees.

      --
      Do not look at laser with remaining good eye.
    18. Re:Cyber warfare: FUD for vendors. by Culture20 · · Score: 1

      You're flat out incorrect here. First, not only can the power be shut off, but generators can be made to explode.

      Not if they're designed correctly.

      Which is why you need to buy latest, greatest, cyber-warfare-proof generator from Safe-Generators, Inc. Seek out your nearest vendor.

    19. Re:Cyber warfare: FUD for vendors. by Lumpy · · Score: 1

      dont need them to all go green. just turn them off. 99% of the population has no clue as to what to do when approaching a dead traffic light.

      --
      Do not look at laser with remaining good eye.
    20. Re:Cyber warfare: FUD for vendors. by corbettw · · Score: 4, Informative
      --
      God invented whiskey so the Irish would not rule the world.
    21. Re:Cyber warfare: FUD for vendors. by johnlcallaway · · Score: 1

      The author of the article doesn't understand what warfare is about. It's about making your opponent hurt in any way so they will reconsider whatever it is that the war is about. Wars are not ended by the military, they are ended by diplomats and politicians who work to convince the other side that it's just not worth it to keep fighting.

      War affects everyone, even when rules are put in place to limit it to uniformed combatants. Civilians back home lose loved ones, and suffer from redirection of resources.

      War sucks .. but in almost all conflicts, both parties feel they are the one that is right. Until one or both sides are willing to concede, they continue on. Both sides will use all tools at their disposal to impact the ability of the other side to continue fighting effectively. THAT is warfare. The American Revolutionary war was not won by George Washington, it was won by people like Ben Franklin who were able to find allies. George Washington gave Ben Franklin and others the time they needed to find the resources that would convince England that it just wasn't worth it.

      --
      I rarely read replies, it's my opinion and if you thought about your opinion a little more, I'm OK with that.
    22. Re:Cyber warfare: FUD for vendors. by jofny · · Score: 1

      Not all parts are easily or quickly replaceable and most things aren't designed correctly.

    23. Re:Cyber warfare: FUD for vendors. by Nidi62 · · Score: 1

      Please, knocking out the power grid or making all the red lights turn green or whatever they're afraid of is nothing like having a bullet penetrate someone or a bomb going off - it's almost impossible, if not impossible to kill someone by hacking into a computer.

      Shut something life threatening down or screw it up by hacking into it? There's backup or work around.

      "Cyber warfare" is a small threat and not worth all the time and money spent on it. We should be spending the effort on ground surveillance and other means to reducing life threatening issues.

      Rome sowing the fields of Carthage with salt didn't directly kill anyone either, but it was still devastating and ruined chances for any meanigful growth or recovery. You do not have to kill anyone to do irreparable harm. Nor does an act of war always neccessarily have to involve killing.

      --
      The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
    24. Re:Cyber warfare: FUD for vendors. by rtb61 · · Score: 1

      Troop movements, secret nuclear bombs, who gives a rats about cyber warfare, you just set the world up for global thermo nuclear warfare and your worried about PC security, too late already.

      Cyber warfare is just the new money black hole to make up for the loss of the cold war.

      Oh my, pull the plug, the war is over, is that really so hard. It is is mission critical and absolutely doesn't need to be connected to the internet, than don't connect it to the internet. If you running a system that lives depend on and you connect it insecurely to the internet when it wasn't necessary to do so, then you should be charged with criminal negligence for doing so.

      Easiest solution is to start penalising countries for network attacks that originate out of that country. No need to prove the individual responsible simply fine plus costs for damages the country and leave it up them to track down the individuals responsible and to prosecute them. It all can be arranged via digital treaty, and penalties can be applied via the WTO. So gather the evidence, present it in court and if it is sufficient apply the penalty to the country and give them the evidence to further pursue the case. If they choose not too, them the fine has been paid and the cost of damages has been recovered.

      As for infrastructure weakpoints, what the hell does major power transmission lines, dams, bridges etc. etc. have to do with computer security, what your going to keep their location secret on the internet, talk about professional tin foil hatters.

      --
      Chaos - everything, everywhere, everywhen
    25. Re:Cyber warfare: FUD for vendors. by rickb928 · · Score: 1

      Agreed. Any color will do. Yellow may be the most confusing of all...

      --
      deleting the extra space after periods so i can stay relevant, yeah.
    26. Re:Cyber warfare: FUD for vendors. by sheph · · Score: 1

      That's an awfully optimistic viewpoint. The threat is actually very real, and depending on what is attacked it could be very very bad. At least as bad as physically bombing a city if not worse. Imagine having power knocked out, after the backups have been disabled. Imagine losing key lines connecting the grid, as in someone pulling a series of towers down at strategic points. You don't put those up overnight. Imagine losing power for 2-3 weeks in LA, California around the beginning of August. No A/C, no refrigeration, no way to charge cell phones, no gas, no water service, hospitals will maybe run for a day or two, but then what happens when folks start dying? Imagine all of those businesses losing productivity for 2-3 weeks. Don't think that might have an economic impact? People would be killing each other, the enemy wouldn't have to. It would be complete chaos. It would be Katrina times 10. Now I'll readily agree that what we are doing to prevent such an attack is really not doing anything to protect us at all. It's largely security theater, and in some cases it's actually making us less secure. Ground surveillance is a great idea, but how are you going to watch every tower associated with the electrical grid? That's just one physical scenario. The cyber aspect opens up all sorts of nifty posibilities. What if someone were to take control of an entire utility and instead of shutting everything down decided to cause an intentional spike that burns stuff up all over the place? How about if they locked everyone out an maxed out all of the generators causing them to run beyond spec and fail. You don't put up towers overnight, but you'd be looking at a few years to replace a generator.

      No, I'd say it deserves the attention. I just wish there was a little more intelligence involved in coming up with solutions to the problem instead of the typical knee jerk reactionary crap.

      --
      I don't believe in karma, I just call it like I see it.
    27. Re:Cyber warfare: FUD for vendors. by GillyGuthrie · · Score: 1

      we live in a world where grocery stores continue to make sales when the cash registers are broken

      I went to Giant Eagle the other day and their computers were "down" from a recent t-storm. I waited around 15 minutes or so as the store gradually filled up with irate customers (they were NOT making sales) until I finally left and just went down the road to a gas station for my gallon of milk.

    28. Re:Cyber warfare: FUD for vendors. by KingPin27 · · Score: 1

      Everything must go -- FIRE SALE!! bwah-- all of this cyberterror **it reminds of a stupid movie with stupid actors running around trying to stop the CYBER bully from taking control of the U.S!!!

      Get off my lawn and go away with the CyberTerror CRAP!

      --
      "i lost my dignity on a slippery wiener"
    29. Re:Cyber warfare: FUD for vendors. by Anonymous Coward · · Score: 0

      This was in Die Hard 2.0. Hooray for fiction!

    30. Re:Cyber warfare: FUD for vendors. by rickb928 · · Score: 1

      The stupid part, ya got right.

      Kinda like watching all those WWII movies. Yeah, they were glamorized, mostly, and real people don't die like that.

      But real people died in the real thing.

      --
      deleting the extra space after periods so i can stay relevant, yeah.
    31. Re:Cyber warfare: FUD for vendors. by uninformedLuddite · · Score: 1

      Any company that has these possibly life threatening/super expensive facilities connected in anyway to the Internet should be hung, drawn, and quartered. Even baddies in Bruce Willis movies are forced to reroute the gas rather than crack the power station. Which makes me wonder why they didn't just reroute the gas in the first place.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    32. Re:Cyber warfare: FUD for vendors. by jofny · · Score: 1

      Heh. That would be "most of them". There's a reason there're all these bills going before congress about critical infrastructure and cyber security.

    33. Re:Cyber warfare: FUD for vendors. by siddesu · · Score: 1

      the information could most certainly be used to ... temporarily stunt or even cripple entire economies.

      Well, information is being used in this way right now, and has been used like that for decades, except the people who're using it aren't cyber this or that, but plain and simple fund and bank managers. Spies, hackers and what not cannot come close to the level of damage these people are doing, and yet it is legal, encouraged and awarded.

      And the world is still spinning ;)

    34. Re:Cyber warfare: FUD for vendors. by Mattskimo · · Score: 1

      So a bit like our involvement in Iraq and Afghanistan?

  4. Warning, noobish question ahead. by Pojut · · Score: 5, Insightful

    One of the common claims regarding "cyber warfare" are attacks against the power grid. What I'd like to know is this: why is the power grid accessible to any outside system?

    1. Re:Warning, noobish question ahead. by Monkeedude1212 · · Score: 5, Interesting

      So that someone somewhere (probably higher up) can work from home.

      Probably, anyways. You know how it is.

    2. Re:Warning, noobish question ahead. by PolygamousRanchKid+ · · Score: 3, Insightful

      why is the power grid accessible to any outside system?

      Because using the Internet is way cheaper than building your own intranet.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    3. Re:Warning, noobish question ahead. by captainpanic · · Score: 4, Interesting

      I think it is because there are remote installations that need to be operated from a single location.

      The power grid is a lot of generators (scaling from enormous powerplants to small scale wind/solar and other types of production, including stuff that can be switched on and off all the time such as gas engines).
      Someone has to control the whole lot of it in order to balance power production and consumption.

      I see no way that we can do that without actually connecting the whole lot to a network. It would be awesome if it was a completely independent network - but the internet is there anyway... why no use it in a secure way?

      (Note: I am no expert - I just expressed my opinion, which happens to contain a lot of technical assumptions)

    4. Re:Warning, noobish question ahead. by DeadPixels · · Score: 1

      I wish I could clarify, but I've honestly never gotten a satisfactory explanation for this either. I've talked to former and current government employees with knowledge in this area, but none of them have really been able to give me a good answer as to why this is even possible.

    5. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      There are many components to a power company's network design. Keeping things simple, there are things like Plant Management networks, transmission networks, and grid management networks. Obviously there is also always some kind of office/administrative network. People who work on these more critical networks need to do their jobs and still do mundane things like print, check email, post documents on fileservers, etc. Rather than have two dedicated machines and have an air gap between the office LAN and the critical LANs, their primary workstations are generally given access through whatever firewalls may exist. Thus: generic exploit comes in over the internet, attacker gains access to O/A, becomes domain administrator, takes over workstations, finds path to critical networks. This is just one way to do things. Many major components of the networks have connections to external facing "networks" as well. Some I have seen: modem-based out of band management for substations, management of telemetry devices using CDPD, SCADA networks with PLCs using modbus over tcp with wireless LAN protocols to bridge networks, etc. It is rare (within the US) that there are direct paths to things like the Internet from, let's say, the Windows NT system doing process control at a coal burning power plant. However, that has been seen in foreign countries. Also, the "power grid" is something of a misnomer. There are many power grids. Some are interconnected. Most have connections to outside entities. Take what I said above about traversing from an O/A network into a grid management network and extrapolate it.

    6. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      I've read that these systems are accessible from the internet so that support staff can remotely diagnose problems.

    7. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      I'd change that to:
      Why is the power grid, which is connected to the internet, not using strong encryption on it's VPN?

    8. Re:Warning, noobish question ahead. by wjousts · · Score: 1

      Well, my local power company is now into selling broadband over power lines. They use the same technology to connect my power meter back to the power company so they don't need to send out meter readers and they can monitor outages.

    9. Re:Warning, noobish question ahead. by rtfa-troll · · Score: 2, Interesting

      the internet is there anyway... why no use it in a secure way?

      Simply put because there isn't really yet such a thing as a "secure" way. Our current systems are too new, too complex and put together too quickly to make them anything approaching what you would mean by "secure". First let's start by defining secure. I'll put it as "you would have to invest 10% of the cost of the network in order to destroy it". That's an arbitrary and quite low value. I should probably have used about 30% and talked about the value of the dependent systems, but it's still a good start. I can't find a good place to start, but given that wind power is projected at around 150 Billion, let's use a Trillion dollars as the value. So to be secure, you want to make a person invest at least 100Billion dollars to attack the system.

      100Billion dollars buys you a whole load of programmers. The kind that can actually analyse a VPN system and work out how to get into it. The ones that can work out how to tell passively which VPN system you are using.

      Another analysis would be "weakest link" analysis. In this case, you say "what would it cost to do a physical attack" and make sure that a "cyber" attack costs more. However, a cyber attack can give you almost guaranteed anonymity, so you have to factor in the reduced risk of discovery which makes the attack more valuable. You will still find that an anonymous, whole grid surprise physical attack is almost impossibly expensive and unreliable. Again, you are probably talking billions of dollars. Doing the same thing with an attack via a VPN is likely to be much cheaper.

      Fundamentally, by the time you are making your system secure enough to work on the intenet, it's probably cheaper to just start off with dedicated interconnections anyway. This is especially true for people like power grids who own a whole load of fibre optic cable (twisted together with their power lines) in any case.

      Overall, whats clear is that currently not enough redundancy, stability and security are being put into the electric (or other) infrastructiure. You can't treat an electric grid as something that can be run purely by private industry because that means optimal use of resources, which means lack of redundancy. For stability and security there needs to be serious state / self defence interest in keeping it stable.

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    10. Re:Warning, noobish question ahead. by lymond01 · · Score: 1

      According the the Apple Guy in Live Free or Die Hard (not a porn, but an action movie with Bruce Willis), the power grid isn't on the internet which is why the bad guys had to fly a helicopter, kill all the guards, and hardwire into the system to cause problems.

      It's all right there in the screenplay...

    11. Re:Warning, noobish question ahead. by Peach+Rings · · Score: 1

      Do you suggest that all important electrical equipment be monitored and controlled physically by an operator? Any kind of remote control can make the grid vulnerable to a serious enough security breach.

    12. Re:Warning, noobish question ahead. by rtfa-troll · · Score: 1

      Because it's cheaper. Because the "anti-big-government" people (the ones with the big private contracts) make sure it's all run for maximum profit. The people that run the system don't risk that much personally (a few months wages? nothing?) for getting caught being stupid. Most of the risk is all externalised onto people who have no say in the matter (the rest of us).

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    13. Re:Warning, noobish question ahead. by fuzzyfuzzyfungus · · Score: 1

      As you note, the logic behind some sort of networked control for power stuff is more or less impeccable.

      On the other hand, given that any part of the power grid is part of the power grid because somebody laid big fat power cables between it and something else, one suspects that a matching data network could be added(at least whenever a line is replaced/upgraded/added) for relatively low cost. My understanding is that, already, a nontrivial amount of "power line" actually includes a strand or strands of fiber, which is sensible enough, given that the additional cost of including a few fiber strands is pretty low, if you are already running a big, fat, weatherproof cable.

      It wouldn't surprise me if a number of the links between SCADA systems and the public internet are for basically stupid reasons(No, you don't actually need to be able to check your email and access your GridAdmin(tm) console on the same computer... It won't kill you to deal with having two, on physically distinct networks).

    14. Re:Warning, noobish question ahead. by Anon1072 · · Score: 1

      Note: I am no expert - I just expressed my opinion, which happens to contain a lot of technical assumptions

      I generally assume this when reading a comment on a blog, but thanks for the heads up.

    15. Re:Warning, noobish question ahead. by networkconsultant · · Score: 1

      Well,
      Supply and demand are part of it; but if you are dealing with Hydro you also need to manage the water levels both up and downstream which means ultimately your electricity is depenant upon the weather; which means more automated management for things like flood gates to prevent peoples cottages from washing away or getting submerged in artificial lakes.

    16. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      I would expect they actually use point-to-point T1s to connect it all on a private network. But there are still ways to hijack a T1 private network, or get onto it through someone's VPN that has access to both the private network and the internet.

    17. Re:Warning, noobish question ahead. by AB3A · · Score: 1

      Many people have written many articles as well as a significant number of books about this subject.

      There are valid reasons, though the short answer is because they don't know any better. Really.

      These networks are supposed to be separated from the office. However, real security is hard. All it takes are one or two dreamy eyed, lazy idiots on the office side, wanting access to all that delicious data "in real time" so that they can surf it and "discover new paradigms." They nag the IT department, and before you know it, someone has breached the two networks.

      Oh and by the way, it will be interesting to see how all that wild data from the up and coming smart grid project interfaces to SCADA system securely. Security is not high on the agenda of most smart grid designers.

      I write this as one who is involved in ISA-99 (Industrial Control Security) and the DNP3 protocol committee, and as a SCADA integrator and end user. There is a tremendous amount of education and work to be done. I wish it were as simple as disconnecting the two networks. Unfortunately, in too many cases, it has already gone way beyond that.

      --
      Nearly fifty percent of all graduates come from the bottom half of the class!
    18. Re:Warning, noobish question ahead. by DSwitz · · Score: 1
    19. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      why is the power grid accessible to any outside system?

      Because using the Internet is way cheaper than building your own intranet.

      Mod parent up, unfortunately.

      We all benefit from cheaper utility prices due to remote monitoring and control operated over the existing Internet...right up to the moment that the lights go out because someone discovered Acme Energy uses a single dictionary word on all of its substations.

    20. Re:Warning, noobish question ahead. by shadowrat · · Score: 1

      what i'd like to know is what damage would attacking the power grid really do? we have power outages all the time already. Most really important systems have their own redundant power supplies.

      people have survived relentless bombing of their cities and that didn't destroy their society or will to fight. i doubt turning someone's lights off is going to be very devastating.

    21. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      I see no way that we can do that without actually connecting the whole lot to a network. It would be awesome if it was a completely independent network - but the internet is there anyway... why no use it in a secure way?

      Yeah, its not like the telecoms have dozens of various private networks they could use, or they don't have physical wires strung all around the country...

    22. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      Having installed a dial up modem on an unpatched NT4 box that was connected by serial to the control system of a rubbish burning station I can say:

      Yes your statement is 100% correct

    23. Re:Warning, noobish question ahead. by hitmark · · Score: 1

      i dont think it may be intentionally connected to the internet, but that thanks to every computer being a potential router, any computer that can access both will be a gateway to the power grid control network.

      --
      comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    24. Re:Warning, noobish question ahead. by suryatheSun · · Score: 1

      When I attended a cyber security conference in New York I was told that even the defense systems are connected to the Internet and can be operated remotely. When it is simply not feasible to build a separate network, even for defense uses I wouldn't be surprised in power grid piggybacking on the Internet. Think of this like the highways across the country, you cannot expect defense, power to have their own highways, do you?

    25. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      A quote from a NPR broadcast earlier this year:
      "power companies today will tell you there's no connection, but every time the government has tested or private companies have tested, they've found a way to get very quickly from the Internet to the controls and take over the controls." - Richard Clarke

      source: http://www.npr.org/templates/story/story.php?storyId=126097038

    26. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      Power companies actually have networking over power lines that they use for remote control of power substations and whatnot.

    27. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      "power companies today will tell you there's no connection, but every time the government has tested or private companies have tested, they've found a way to get very quickly from the Internet to the controls and take over the controls." - Richard Clarke

    28. Re:Warning, noobish question ahead. by sheph · · Score: 1

      The main reason is to provide real time data to neighboring utilities as mandated by the feds.

      --
      I don't believe in karma, I just call it like I see it.
    29. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      While that's true all of that can be done with leased lines, microwave, etc. All of that is on a closed network at the utility where I work. The trouble comes in with the requirement to share real time data with other utilities, as well as getting decision making data to other departments within the corporate network.

    30. Re:Warning, noobish question ahead. by westlake · · Score: 1

      So that someone somewhere (probably higher up) can work from home.

      It might also be a question of distance and scale - transmission lines that run hundreds of miles cross-country.

    31. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      why is the power grid accessible to any outside system?

      Well DUH ... how else are we going to get any power to anything?

    32. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      I'm going to start this with a disclaimer - I am by no means an expert, but I do know a couple things that are relevant. My dad works for a major utility company in my state (MN), so I grew up around many people that work there also. I know a little about how their system works (emphasis on little). Most of their system communication is microwave based. They lease a certain range in the spectrum and have point to point towers directed at each other to achieve their switching operations and some basic communication. You can hear the signals in Morse code from the truck radios when there is a switch command sent. To my knowledge, the only way to hack into the controls would be to gain access to one of the computers that does monitor and control operations at their main headquarters. Besides that, at the generation facilities (yes, even wind) there are employees constantly monitoring and they do the actual changes to the equipment. It's been about 5 years, but the last time I had a chance to talk to one of the guys in a generation plant, he said that the computer that they used to control the generators was separate from the one he used to surf the web. Keep in mind that my knowledge is mostly from just talking to some employees and it is most likely a little outdated. I think that when you see someone "hacked" into our electrical grid, that they at best may have been able to see current status of some resources.

    33. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      Having talked to some people that work in secure installations I don't believe any of the control systems are actually connected to the internet. I've heard propaganda otherwise, but I've never seen any evidence.

      In support of my claim though, secure installations (Military bases, NSA, etc.) are not connected at all. There's no internet connection at all in a SCIF, you leave your cell phone, watch and everything at the door. There's no physical connection to the outside besides your desk phone. It's a PITA to work, since you can't even read forums/online help if you have an issue with some software library, but it does make sense.

      That's one thing Transformers (film) did get right. You need to be physically connected to a military computer already to attack another one. You cannot do it from home.

    34. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      Because using the Internet is way cheaper than building your own intranet.

      Especially when you have miles of wires strung on you own poles everywhere.

    35. Re:Warning, noobish question ahead. by Anonymous Coward · · Score: 0

      Yes but they actually have a intranet. Its called the power grid. Its actually very simple to route messages along it.

      So they dont need to build it, its already built and was in wide use before most people started to use the internet.

    36. Re:Warning, noobish question ahead. by uninformedLuddite · · Score: 1

      access to porn of course

      --
      The new right fascists are bilingual. They speak English and Bullshit.
  5. Maybe not today but in the future. by elucido · · Score: 4, Insightful

    When millions of people in key positions have artificial hearts, limbs, microchips in their body, nanotechnology with RFID in their clothes, then cyberwarfare becomes something physical.

    If hackers can stop the artificial heart of somebody important, this is no different than assassinating the person.

    1. Re:Maybe not today but in the future. by Brett+Buck · · Score: 1

      Hmm, how many people are walking around with artificial hearts, again?

    2. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 2, Informative

      Dick Cheney for one. The only real hearts he has are the ones hes eaten.

    3. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 0

      So, it wouldn't be assassination if they stopped the articificial heart of someone unimportant?

    4. Re:Maybe not today but in the future. by Tetsujin · · Score: 2, Informative

      When millions of people in key positions have artificial hearts, limbs, microchips in their body, nanotechnology with RFID in their clothes, then cyberwarfare becomes something physical.

      It's times like this that I really wish I hadn't spent all that money in the 1990s on Internet-enabled toasters... My bagel came out overcooked this morning and I just know it was because of cyber-warfare!

      --
      Bow-ties are cool.
    5. Re:Maybe not today but in the future. by easterberry · · Score: 2, Insightful

      No, it would be murder. I'm not sure how important you have to be to get 'assassinated' instead of just 'killed' but the line seems to be somewhere around viscount.

    6. Re:Maybe not today but in the future. by ElectricTurtle · · Score: 1

      Nope, then it would be murder. "Assassination" connotes that killing somebody would accomplish some kind of (political, economic, social) goal that is larger than the person individually. Killing John Q. Public isn't going to mean anything more than some people who knew him will be rightly upset, but if somebody kills the Pope, that will have repercussions throughout the world beyond any personal level.

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    7. Re:Maybe not today but in the future. by AndersOSU · · Score: 1

      With artificial hearts - 0
      With VADs - hundreds
      With pacemakers or internal defibrillators - tens or hundreds of thousands

      I don't think any of these are accessible via the internet (yet), but most newer pacemakers are accessible wirelessly.

    8. Re:Maybe not today but in the future. by gyrogeerloose · · Score: 5, Funny

      Dick Cheney for one. The only real hearts he has are the ones hes eaten.

      I am very offended by this remark. Dick Cheney has never eaten a human heart. He's cut them out, certainly, but the only hearts he's eaten are puppy hearts.

      Please retract your statement.

      --
      This ain't rocket surgery.
    9. Re:Maybe not today but in the future. by Stregano · · Score: 1, Informative

      Mwahahahaha!

      Take That!!!

      --
      The world is how you make it
    10. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 0

      i think that is just murder then.

      i'm not sure on the distinction between assassination and murder but when a man murders his wife (in cold blood) they never say he assassinated her. likewise if a member of a gang is targeted and killed by a rival gang member they don't say he was assassinated. i think it has to be someone pretty prominent and planned and possibly carried out by a third party or lower member of a team to be assassination.

    11. Re:Maybe not today but in the future. by thewiz · · Score: 1

      If someone is stupid enough to get an artificial heart/pacemaker/defibrillator with a built-in webserver, they should be given an instant Darwin Award.

      There are somethings that don't belong on the Internet now or in the future.

      --
      If "disco" means "I learn" in Latin, does "discothèque" mean "I learn technology"?
    12. Re:Maybe not today but in the future. by mcgrew · · Score: 2, Interesting

      People already have artificial body parts; the lens in my left eye is artificial, and is on struts so it can focus (I wrote about it here). I know people with artificial knees and hips, and there are people with heart pacemakers. There is an RFID chip in my work's security card. However, these implanted devices aren't connected to the internet, and I can't see them being connected to the internet in the future.

      I found Down and Out in the Magic Kingdom a good read, but I just don't see optical implants to connect to the internet ever happening.

    13. Re:Maybe not today but in the future. by Opportunist · · Score: 2, Insightful

      You are aware that you're talking about people who put their private life in the hands of Facebook and the like, yes.

      But hey, maybe that's the cyber version of Mendelian selection.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    14. Re:Maybe not today but in the future. by Buelldozer · · Score: 4, Informative

      You are years behind. Pacemakers with remote connectivity began being installed in 1999 and DefCon addressed the issue back in '08.

      http://venturebeat.com/2008/08/08/defcon-excuse-me-while-i-turn-off-your-pacemaker/

      Welcome to a brave new world, one where your pacemaker can be disabled or instructed to deliver a fatal shock to your heart...remotely.

    15. Re:Maybe not today but in the future. by networkconsultant · · Score: 1

      Anyone here ever watch Gost In the Shell, man I can't wait for my Cyborg Upgrades, just be damn sure your wetware is made by BSD folk, because if Microsoft starts making people parts we are all screwed.

    16. Re:Maybe not today but in the future. by random_ID · · Score: 1

      Pacemakers are already wireless and internet connected.

    17. Re:Maybe not today but in the future. by hitmark · · Score: 1

      a pacemaker that can call for medical aid if the heart stops responding?

      maybe some combo that can also monitor the patients blood pressure and other vitals and transmit them to the doc for evaluation without having to stop by the office ever so often?

      --
      comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    18. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 0

      With artificial hearts - 0

      I always thought this was a weird number, since the artificial heart was invented in the 50s, and it's hard to believe that the supply of donor hearts is sufficiently above the need that no one has to wait.

    19. Re:Maybe not today but in the future. by mcgrew · · Score: 1

      I don't know, those seem like good reasons, but I would think that the information would go one way only -- outwards. Why would one need inwards communication with the devices?

    20. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 0

      There is Syncardia Total Artificial Heart, it still can't fit on the patients body and is expensive, but people can live indefinitely with it, so you know, there's definitely a couple of people with artificial hearts. www.syncardia.com

    21. Re:Maybe not today but in the future. by AndersOSU · · Score: 1

      Well that's new.

      There may be one person with an artificial heart (unless he's already got his replacement.)

    22. Re:Maybe not today but in the future. by Anonymous Coward · · Score: 0

      Next step is to have one of these implanted by default. Only to stop the terrorists mind you...

    23. Re:Maybe not today but in the future. by ElusiveJoe · · Score: 1

      Just when Deus Ex stopped being a science fiction?

  6. Nanotech weaponry. by elucido · · Score: 2, Funny

    Anyone who does not take cyberwarfare seriously is not envisioning a world where nanotechnology is everywhere in everything. Where the enemy can create a bomb that you shallow in a pill, or that is sprinkled on your food. Where the enemy can use nano bots too small to see to kill people, or hack into or reprogram, etc.

    It's definitely not fiction, it's reality. The technology to do this already exists and for all we know governments could be launching their attacks as we speak. Whoever controls the nanotech weapons will control the future.

    1. Re:Nanotech weaponry. by Tetsujin · · Score: 0, Offtopic

      Anyone who does not take cyberwarfare seriously is not envisioning a world where nanotechnology is everywhere in everything.

      Oh, not to worry... I've read Ghost in the Shell...

      --
      Bow-ties are cool.
    2. Re:Nanotech weaponry. by FeepingCreature · · Score: 1

      Today's issues today.

      Tomorrow's issues tomorrow.

    3. Re:Nanotech weaponry. by coaxial · · Score: 1

      Get thee to an atomic powered flying car!

  7. WTF? by Anonymous Coward · · Score: 0

    Postmodern Slashdot?

  8. cyberwarfare arms limitation treat? by tnk1 · · Score: 0, Offtopic

    A "cyberwarfare arms limitation treat"? Yum! Does that come in cherry flavor?

  9. Everything will be internet connected. by elucido · · Score: 1

    And in a world where everything is connected, and everything is nanotechnology, and everything can be hacked, the dangerous are entirely different.

    1. Re:Everything will be internet connected. by shadowrat · · Score: 1

      And in a world where the Source is tainted by the dark one men who can channel are dangerous.

    2. Re:Everything will be internet connected. by Zumbs · · Score: 1

      Not to mention that nanites can hack everything and gain collective consciousness and destroy humanity in their hivemind mentality, before they make great big nano-spaceships to colonize the Cosmos.

      --
      The truth may be out there, but lies are inside your head
    3. Re:Everything will be internet connected. by Thiez · · Score: 1

      Elaida, is that you?!

    4. Re:Everything will be internet connected. by Anonymous Coward · · Score: 0

      I WIN AGAIN

  10. Does this mean... by Anonymous Coward · · Score: 0

    Does this mean that I also don't need a drivers license to drive around on the Information Highway?!

  11. Hmm by Anonymous Coward · · Score: 0

    It seems the author commits his own offense, assuming that warfare is limited to organised military efforts. How many Americans killed British soldiers during the Revolutionary War, of their own volition?

    1. Re:Hmm by Anonymous Coward · · Score: 0

      That wasn't "warfare", those were unlawful combatants in an insurgency!

  12. There is a difference between "war" and "terror" by rtfa-troll · · Score: 5, Interesting
    As ever, this post has so many things wrong with it that it's stupid.

    a) I've had my finger on the "off" switch for an entire country's power grid from a mobile phone

    No you haven't; at least not in the sense that matters. Even if there is a country stupid enough to connect it's "off switch" to the internet, all they have to do is pull the ethernet cable and switch it on again. Even if you can break a small proportion of power stations, the rest will come on again. You are a "cybervandal" not a "cyberwarrior".

    The real serious cyberwarfare people would do both. A disable the off switch (force it on) and b) drop a graphite bomb at a key place to do weeks worth of damage. That's proper "cyber" warfare.

    Cyber"warriors" know the exploit for the radar station and disable the air defences as they fly in with real bombs.

    Cyber"guerilla"s mess with account numbers in the fund transfer excels of most of the big companies in the place they target.

    There's a whole load of resources which are needed for this stuff. Real test suites where you actually have the control systems of your enemies nuclear power plants; actual buildings where you can try messing up the air conditioning system, people who can actually write serious, fully EAL7 compliant defence systems. People who can write EAL7 compliant versions of exploits (have you seen the state of security software????). etc. etc. etc.

    If you think your country's military doesn't have a valid role to play in a "cyberwar" then you haven't understood the difference between a "cyberterrorist" putting an "easter egg" into a flight control system and a "cyberwarrior" diverting all your civilians into the area where his nukes can strike them most effectively.

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  13. no different from other metaphors by csrjjsmp · · Score: 2, Insightful

    It is warfare in the same sense that computers think or ships swim. In other words, it really isn't, but it's a convenient metaphor to use because the truth is too complicated for the average person.

    1. Re:no different from other metaphors by rtfa-troll · · Score: 1

      I think that this isn't a good way to do this. Let's stick with traditional and clear definitions.

      cyber-warfare high resource entities such as states or possibly major corporations carry out large scale or unlimited attacks with the aim of disabling or destroying other high resource entities. Typical example; the USA disables the Iraqi command and control system and uses parts of it to send messages suggesting surrender around the start of the second gulf war. cyber-guerilla(-warfare) a small group of independent, but possibly attackers carry out effective but small scale attacks on a countries infrastructure; typical example Estonia or an effective attack on an entire stock exchange causing actual large scale money transfer. cyber-terrorism small, high visibility attacks aimed at changing behaviour through fear. Typical example; a terrorist manages to get a programmer working at Boeing and that programmer manages to get some code in to fly a plane into the ground in some specific situation. cyber-vandalism a low resource person spends considerable effort to make a minor and temporary irritation. Typical exmple; defacing a web site; switching off a power station for a day.

      Cyber-vandalism, I think, can be characterised by the fact that simple and obvious methods would largely limit the damage. It can still cause surprisingly large damage, but when that happens much of the fault is clearly with the person vandalised or surrounding systems.

      There's a real thing going on here and there are real changes in the way that people can carry out some types of attacks. That the military has got it partly "wrong" is inevitable. That doesn't mean that people with lots of "cyber" experience and no "warfare" experience are instant gurus who can tell the military all they need to know. Sensible and valuable discussion will happen when both sides work together and most of all try to work towards civilian systems which have some level of military level survivability as used to happen with telecomms networks.

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    2. Re:no different from other metaphors by jc42 · · Score: 1

      We might also compare it to other proclaimed "wars".

      Thus, here in the US, we've been fighting a "war on drugs" for decades now. As a result, we have a larger percent of the population in jail than any other country, most of them charged with drug-related crimes. We've lost a lot of legal protections we used to have, since an anonymous drug charge can lead to our homes being invaded without warrant and our property being confiscated without trial. And the drug "problem" is slowly getting worse. (Or at least the official keepers of the statistics say it is, but that might just be to maintain the justification for the "war".)

      Recently I heard of a push for a "war on obesity", which is a growing problem in the US. That'll probably result in us all getting fatter.

      But it doesn't always work that way. Back in the 1960s, we had a short "war on poverty". Then one day, a lot of poor people started publicly asking where they could go to surrender. The hostilities ended very quickly after that, though I never heard of any government spokesperson who publicly answered the question. We certainly still have a good number of poor people. I always sorta thought they should have gotten together and demanded armistice talks, but that didn't happen, either.

      One problem with the "war" metaphor is that you sorta expect it to be a handy excuse to go out and kill people. BSo far, it hasn't been possible to kill people via computer. But this might be changing. The medical industry is slowly getting computerized, and is learning to use the Net. And our cars are rapidly becoming computerized and networked. So it'll probably soon be possible for a government agency to reach out electronically and interfere with the equipment keeping people alive in hospitals or at home, or cause our cars to go berserk at highway speeds. The Toyota problems might be an early test of this.

      Stay tuned. We may soon see what a "cyber-war" brings us. Maybe, like the war on drugs, it'll bring us lots of imprisonment and auto accidents, and also more computers. Maybe it'll implement a Final Solution for dealing with the expenses of elderly people and military retirees on computerized life support. We'll see. Or at least the ones of us who survive will see.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  14. Don't you mean Information Warfare? by Anonymous Coward · · Score: 2, Interesting

    Anyone who puts the word 'cyber' in front of something should probably be shot.

    Moving along to more immediate activities, we are actively seeing 'Information Warfare' being executed on the Internet. The latest widely heard event was the Israeli-flotiilla debacle, and subsequent dis-information campaign from every possibly side. Ask someone who has stated they have been following it, and see what factual information they can give you, and have them list multiple non-governmental independent investigatory sources for validation. It isn't possible.

    1. Re:Don't you mean Information Warfare? by Anonymous Coward · · Score: 1, Funny

      Maybe they meant cyborg-warfare. Terminators and bleached human skulls as far as the eye can see.

    2. Re:Don't you mean Information Warfare? by Anonymous Coward · · Score: 0

      Don't you mean Information Warfare?

      No information warfare is a defined term that has a much fuller range. It includes building fake tank models on the shore, propaganda and the James Bond spy operations which have nothing to do with cyber activities. The military has used up a lot of terms already so you can't just adopt civilian terminology.

      Network Warfare: Networking your forces to provide information awareness
      Electronic Warfare: EM Spectrum (radars, jammers, etc)

      Yes those terms all sound better, but they've all been taken for 20+ years, there's no redefining them now. No matter the distaste for the term "Cyber" it's here for good. You can either accept it, or be that guy complaining we spell it aluminum.

      It could be worse, they could have called it iWar.

  15. Russian government with a foot in the mouth by mapkinase · · Score: 3, Interesting

    This is not the first time Russian government reveals its unique idiotic approach to technology. As a former Russian citizen I am following the drama of Russian government politics in technology, which, synthetically speaking, is a laughing stock of Russian technoblogging community.

    Basically, the technology policy of the Russian government does not differ much from:

    1. New exciting promising technology discovered!!
    2. ???
    3. Profit (get recognition, re-establish mother Russia as a world superpower, look wise, etc)

    Replace ??? with "flood zillions of roubles into this technology without any sense of balanced budget" (which was the case of "nanotechnologies") or in this case "propose a treaty to curb technology".

    One would think that smartass KGB spy would do better than idiot Khruschev, but no... the result is the same: embarrassment and ostracism of Russia on the international level.

    --
    I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
    1. Re:Russian government with a foot in the mouth by Anonymous Coward · · Score: 0

      I don't think anyone can ever take Russia seriously, especially after the Buran. That catastrophic joke of a space program solidified Russia's standing as the nation of no innovative or original thought whatsoever.

      Even the hangar that housed it was a poorly engineered disaster that was waiting to happen (and eventually did).

    2. Re:Russian government with a foot in the mouth by gblackwo · · Score: 1

      Seriously? You needed to start the Buran is worse/better than the Shuttle debate on slashdot again? Cue the fanboys on how completely different the two programs really were. Secondly, it's not as though the retired shuttle program was spotless.

    3. Re:Russian government with a foot in the mouth by Anonymous Coward · · Score: 0

      The STS Shuttle program wasn't exactly spotless, I will agree with you, but the Buran was the most expensive space project the Soviet Union had ever undertaken. (Why? How much money does it cost to blatantly copy a design?) It flew once, never carried a single soul, and was immediately mothballed.

      To an American capitalist like myself, that's just fucking hilarious.

    4. Re:Russian government with a foot in the mouth by rudy_wayne · · Score: 1

      I don't think anyone can ever take Russia seriously, especially after the Buran [wikipedia.org]. That catastrophic joke of a space program solidified Russia's standing as the nation of no innovative or original thought whatsoever.

      Even the hangar that housed it was a poorly engineered disaster that was waiting to happen (and eventually did).

      The Russian government may be totally incompetent - but I think this is exactly the point the author was making in his article. It isn't the Russian government that's the problem -- it's the Russian hackers who are very good at what they do and who are working independently of the government, with the government's tacit approval.

    5. Re:Russian government with a foot in the mouth by mcgrew · · Score: 1

      One would think that smartass KGB spy would do better than idiot Khruschev

      Well, to be fair, at least he didn't take off his shoe at the UN and bang the table with it screaming "WE WILL BURY YOU!!!!"

  16. it's real by Lord+Ender · · Score: 2, Interesting

    In the same sense that nuclear war is real, cyberwar is real. We've seen both only in limited fashion. We know the technology exists and works. We've just never seen two well-armed adversaries thoroughly go at it.

    There's a lot of fiction about full-scale nuclear war. That doesn't mean nuclear war itself is fiction.

    --
    A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    1. Re:it's real by delinear · · Score: 1

      The difference is that we've seen the effects of large scale nuclear attacks agains populated areas - we can make a reasonable extrapolation from that or what it would be like if two superpowers with nuclear weapons were to use them against each other. We've never seen what a "cyberwarfare" attack of the same magnitude could accomplish outside of a movie. Would it really bring society to its knees, or, more likely, would there be a few isolated incidents resulting in us taking some systems offline until exploits and security flaws were patched and then business as normal? The only way I can see cyberwarfare alone having much of an impact is if you can use it to trigger some kind of physical event while making it more difficult for the emergency services to respond, but it still seems the scale wouldn't be anywhere near so great as even conventional long range bombing. Possibly there is a place for such an attack alongside a conventional invasion, to knock out communications and make logistics, warning systems and intel gathering more difficult. On its own I can't imagine it ever being effective, for one thing you'd leave a society largely unaffected, if they're more powerful militarily than you you'd better hope they can't trace the attack, because you just gave them the perfect excuse to wipe you off the face of the planet in "self defence".

    2. Re:it's real by Lord+Ender · · Score: 1

      There was not "large scale" nuclear exchange in WWII. There never has been. That was small-scale one-sided, as the Estonian cyberwarfare was small-scale, one-sided.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    3. Re:it's real by rtfa-troll · · Score: 1

      Your local supermarket keeps less than a day of stock even taking into account it's warehouses and relies entirely on it's networked computer system to ensure that orders get to suppliers in time to deliver directly on site. They couldn't even do the truck routing correctly without the computer. Think about it. How many days stock of food do you have at home?

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  17. Yes, it is all fiction and ... by Anonymous Coward · · Score: 0

    ... and no printers have ever been delivered to unfriendly nations that contained complete cyber warfare ready code. That code wasn't used in the beginning of a drop-bomb, send-tanks-in war to bring down central parts of the network of the unfriendly government either. It is all fiction.

    I suspect there are many Asian made routers with some "extra code" in them too and I wouldn't put it beyond some "friendly" governments to be working with manufacturers to insert special code inside equipment destined for unfriendly or known-to-sell-to-unfriendly-nations either.

    Of course, all of this is fiction and not public knowledge.

  18. It's a very useful fiction... by fuzzyfuzzyfungus · · Score: 5, Insightful

    The convenient thing about "cyberwar" as a slogan is how it allows you to extend the notions of "wartime" into virtually every nook and cranny of life and infrastructure.

    The term "cyberwar" quietly implies that virtually any net-connected system is a potential or actual combatant. From here, it's just a hop, skip, and a jump to applying military/wartime standards for such niceties as atttacking systems, or requisitioning access. Even better, since "cyberwar" is, for suitably nebulous definitions, something that occurs pretty much constantly, among a wide variety of state and nonestate actors, with various levels of covertness, the mandate covers basically everybody, everywhere, and is of unlimited duration(See also: "Global war on terror").

    Who needs bullshit like "warrants" or "due process" when any computer system can simply be declared to be an "enemy combatant" or "materially supporting an enemy combatant"? If you think the notion of charging an object in order to avoid procedural restrictions is absurd, be aware that it is already standard practice in the context of "asset forfeiture". (which makes for some rather ridiculous case names...)

  19. Re:There is a difference between "war" and "terror by daid303 · · Score: 2, Interesting

    Even if you can break a small proportion of power stations, the rest will come on again.

    Many large power plants need quite a bit of energy to jump start from an 'off' condition (normally they never go 'off' just in lower power mode). Turning off all power plants at once would be a much bigger mess then you think. I don't think you ever could do it because of fail-safes, but if you could you would start a big mess.

  20. Mod author "Overrated" by BobMcD · · Score: 1

    Point 1, "Hacking is opportunistic."

    For civilians, yes, it certainly is. When you have operational forces at your command, however, it can get notably less-so. You could, for example, develop a virus and compel Microsoft to include it as a Windows Update. Or get a CIA operative to smuggle it in, conduct a raid on a connected node and have the soldiers upload it, duplicate the hard drive of a dignitary and implant it there, etc, etc, etc.

    This point is basically saying that because small arms don't have killing capacity against tanks, we don't ever have to worry about governments attacking us. It is bizarre and limits governments to powers that only civilians would use.

    Point 2, "Cyber-warriors aren't military"

    Yeah, and neither was Osama Bin Laden. Yet we recruited him and gave him weapons to use against the Soviets in Afghanistan. If you think we just hinted at what we wanted him to do, you're absolutely insane. He was even on the payroll, as I understand it.

    Governments have these people called 'operatives' that infiltrate organizations like the ones described by the author. These poor souls get burned if they get caught, but they knew that going in. Don't wax poetic about the cost of keeping clean hands without acknowledging that intelligence operations exist. Even in the civilian world we have 'social attacks', so who is going to believe that the government does not? What about 'youth groups' fundamentally changes this in any way?

    Point 3, "Indeed, in America, such youths are more concerned about attacking our own government and corporations ("fighting the Man") than they are about fighting foreign adversaries."

    So in America, there are only one type of youths, the anti-government type, and elsewhere they're all the opposite.

    This is so weak I'm simply not going to waste time rebutting it.

  21. There is no cyberwar... by Anonymous Coward · · Score: 0

    ... but there is cyber-security. Keeping a barrier between your systems and the potentially malicious or perhaps just curious outsiders.

    Lines of power on the internet are not under the control of governments. A system that is not safe can be just as successfully or better attacked by a single individual or a whole army.

    Numbers only mater in DDOS attacks. And the nature of these attacks, most effective to date, is in essence a shouting match, only conducted on the internet. And no botnet does it better than an idea that resonates among the people. There is no other defense than being prepared to serve faster and to filter the noise. Sometimes, the idea is national, like it was during the outfall of the Bronze Solder move. More often it is not. and its not certainly under any governments direct control.

  22. cyber is a dumb name but it is real by jollyreaper · · Score: 4, Insightful

    Sticking a stupid name on something and overblowing what it means isn't the same thing as it not existing to begin with. Computers are vulnerable. People who don't like us can exploit those vulnerabilities. But this is really just another arena of non-shooting conflict, all under cloak and dagger.

    The CIA has a long history of trying this sort of thing, sometimes successfully, many times not. There's directly funding revolutionaries, slipping agents into countries, running guns, sponsoring assassination attempts, economic sabotage, infrastructure sabotage, spying with human intelligence, electronic intelligence, satellite intelligence, etc. The CIA has a history of over-promising and under-delivering but this doesn't mean they won't still try.

    The Russians have traditionally been much better at running spy rings. The beauty of hacking is you don't even have to put your own assets in-country and risk their capture.

    On one hand, I don't think we'll ever get to the point where it can be Die Hard 4 info-Armageddon with hackers blowing up power plants at will. I think that public screwups will force a higher level of security and more rigorous design so that we are less vulnerable to external attacks. On the other hand, the BP fuckup shows that reason and logic are poor tools for explaining the behavior of large organizations. BP should have taken drilling seriously. They should have realized that they had no good plans for capping an uncontrolled well so if they were going to drill, the only option would be making sure they would never, ever, ever have an uncontrolled well. All the internal warnings they had in the months leading up to the disaster should have been their opportunities to stop the disaster before it happened. And we can see how it turned out.

    --
    Kwisatz Haderach
    Sell the spice to CHOAM
    This Mahdi took Shaddam's Throne
    1. Re:cyber is a dumb name but it is real by Renevith · · Score: 1

      On one hand, I don't think we'll ever get to the point where it can be Die Hard 4 info-Armageddon with hackers blowing up power plants at will.

      Something like this may have already happened, during the cold war: http://en.wikipedia.org/wiki/Siberian_pipeline_sabotage

      In short: CIA learns that USSR is planning to steal sophisticated SCADA software that's not available to them due to export restrictions. CIA inserts trojan that will make pipeline fail catastrophically. Boom. Now that's cyber-warfare!

  23. Nano bots too small to see? What , like bacteria? by Viol8 · · Score: 1

    "you shallow in a pill, or that is sprinkled on your food"

    Newsflash - thats been around since people first figured out how to poison others.
    Take your pick from poisons, bacteria or viruses. You've been reading too much sci-fi
    because biology got there a few hundred million years before William Gibson.

    Nothing to see here, move along please.

  24. Re:There is a difference between "war" and "terror by Viol8 · · Score: 2, Informative

    "Many large power plants need quite a bit of energy to jump start from an 'off' condition"

    Coal fired plants maybe. Pretty much everything else just requires someone to press an on button. Gas turbines are easy to start, nuclear never really goes off even with the rods in and hydro is as simple as opening the sluice gates.

  25. Oh please by Viol8 · · Score: 1

    Nuclear war: Large area are vapourised, even larger areas poisoned for centuries. Result - everyone and everything larger than a bacteria dies.

    "Cyber" war: Someone deletes some files on some computers and causes others to crash. Result - ethernet cables are unplugged and machines are restored from backups.

    Get a sense of perspective.

    1. Re:Oh please by Lord+Ender · · Score: 1

      You falsely indicate that I claimed they were equivalent in severity. You are wrong.

      You are also wrong about what damage would result from a cyberwar. Communications and telecommunications infrastructure would stop working for days. Food would rot on trucks undelivered. It would be much worse than "someone deletes some files."

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    2. Re:Oh please by Viol8 · · Score: 1

      "Communications and telecommunications infrastructure would stop working for days. Food would rot on trucks undelivered."

      Utter BS. Save the scaremongering for the knuckle dragging masses.

    3. Re:Oh please by Lord+Ender · · Score: 1

      Funny. I work at a company that routes those trucks. I actually know what I'm talking about. It would be impossible to do what we do by hand; the volume is just way too high relative to the staff levels. But thanks for sharing your ignorance.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    4. Re:Oh please by Viol8 · · Score: 1

      Ever heard of hiring emergency staff?

      No, didn't think so.

      Happens all the time fuckwit.

  26. don't forget.. by formfeed · · Score: 2, Funny

    ..cyber veterans day!

  27. Re:There is a difference between "war" and "terror by rtfa-troll · · Score: 1

    I think both you and daid303 are a bit right. In the case of a nuke plant, there's often a safety trigger which fires damping rods into the station and takes weeks to recover from. If you just take the station off the grid (as our hacker guru was proposing) then they can probably come back on again pretty quickly. If you are a serious "cyberwarrior", then you take a proper model of the control system and you work out a way to get the emergency systems to trigger.

    This is where I call bullshit on Mr Graham. Unless you have an copy of the power station control system, you can't test and be sure your attack on it will properly trigger the emergency systems. That's why proper "cyberwar" takes more resources than just a little bit of "cybervandalism". You are actually aiming to reliably destroy or disable large amounts of infrastructure in a very short amount of time. This is not something you do with just a single guy and a mobile phone.

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  28. Let's be serious... by whackedspinach · · Score: 1

    Cyberwarfare is very, very real. If anyone disagrees with me, google "Skynet".

  29. Re:There is a difference between "war" and "terror by networkconsultant · · Score: 1

    How about dropping a Pinch over southern California let's say right above Google and Intel's head quarters? Remember Pakistan is the world leader in that technology; no colleateral damage and nothing but sheer chaos on the ground. These are real BCP senarios; outlined by various standards such as the ISO.

  30. This is serious by redconfetti · · Score: 1

    This is a very serious matter! You might not be old enough to remember this, but it caused quite a stir back in 1979, and almost started a war, when some kid logged into the WOPR at Norad and started simulating a Soviet attack. Luckily they were able to stop the systems from a real attack by throwing the computer system into a tic-tac-toe loop. Then of course there was the Da Vinci virus that almost sunk that oil tanker. Something needs to be done about this!

  31. CyberWar/Law.... by OldHawk777 · · Score: 1

    I know that there can be an economic/legal impact, but CyberWar (I think) is used by businesses/C*Os to deflect legal responsibility and by governments to oppress public/citizens rights.

    Yes there can be CyberWar, but CyberWar as a word/term can and (I think) is too frequently misused to fear-exploit and express faux-responsibility of the culpable and innocent.

    I guess, I could be wrong, but... you cannot convince me (on this topic); So, BOOOWho?

    --
    Unaccountable leaders are masters, and unrepresented people are slaves. How do US and EU fare?
  32. Crap "article" by m509272 · · Score: 2, Informative

    Printing up counterfeit currency during WW2 by the Germans to destabilize Britain's currency certainly was part of the war and pieces of paper certainly aren't weapons in the killing and blowing up of things. They certainly are weapons in the sense of destroying the economy. So from that point of view any cyber attacks which aid in destabilizing the economy could be part of a war and would be weapons.

    As far as there being some sort of treaty to prevent this, that's probably the most stupid thing I have ever heard of. It sounds like people are making things up to either create jobs or keep them. Just another waste of money and time by the useless UN.

  33. Real War by b4upoo · · Score: 1

    Any action that weakens an economy or makes a resource more difficult top obtain can be an act of war. The perfect example is the deliberate destruction of oak trees that were normally used for barrels essential to Spain's military fleet. Without good oak barrels gun powder and food could not be kept at sea resulting in the destruction of the Spanish fleet.
                    Just as we can never be totally certain that the oil rig in the Gulf was not destroyed by a religious zealot or lunatic deliberately causing a spark at just the vulnerable moment we can also never be certain that simple email scams that harvest money from Americans are not encouraged, subsidized or even created by enemy nations or just some unfortunate people who seek to make a living by theft. We also can not tell if protest is simply by groups seeking to advance their cause or perhaps actually seeking to demoralize our public and make it more difficult to raise an army or get funding to support that army.

  34. ... in bed. by Zarf · · Score: 3, Insightful

    Putting 'cyber' in front of something is just a way for people to grasp technical concepts

    ... in bed.

    The analogies quickly break down, and are useless when taken too far

    ... in bed.

    --
    [signature]
    1. Re:... in bed. by Anonymous Coward · · Score: 0

      I cyberf**ed your mom

    2. Re:... in bed. by Zarf · · Score: 1

      I cyberf**ed your mom

      ... in bed.

      --
      [signature]
  35. What are the "cyberwarfare" people talking about? by FoolishOwl · · Score: 1

    The article was interesting in discussing the use of nationalist youth groups, and suggesting that hackers may act in the same way.

    I'm left wondering: if several national governments, including the US, and the UN, are devoting significant resources to the problem of "cyberwarfare," wouldn't one of these entities have detailed what they mean, exactly? I saw the point of the analogy of the bigger catapult to the bigger tunnel-sniffing dog, but what, then, are the cyberwarfare people actually proposing to do? Even if defending against cyberwarfare is fundamentally a stupid idea, it can't be completely devoid of content.

  36. Re:There is a difference between "war" and "terror by Anonymous Coward · · Score: 0

    Exactly, nuclear never really goes off ... BECAUSE?

    Exactly, because it takes forever to bring it to the ON state. So, if you managed to shut it off...

  37. Re:There is a difference between "war" and "terror by rtfa-troll · · Score: 1

    Pinch???? Google doesn't seem to help me here. A HANE above such sites would definitely be a counterpart for cyber-warfare guaranteeing much longer recovery times. For a true "cyber" part, wait for the US to launch satellites with nuclear weapons (for stopping "terrorist states"); then, during your cyber attack, take control of the satellite and use the bombs from that to cause your HANE.

    That's really interesting and quite resource intensive; to get a practical attack on a nuclear equipped satellite nowadays, I bet you would have to infiltrate the development program; you'd certainly need powerful transmitters and you'd need to have serious levels of engineers. You could in principle attack via the US ground station, but that's run by people who actually know something about security so it's not on the open internet. Your iphone will likely not help here.

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  38. Re:There is a difference between "war" and "terror by Anonymous Coward · · Score: 0

    lol, bulls1t. you really don't have a clue.
    read more here: http://en.wikipedia.org/wiki/Black_start
    and yes, that's why nuclear is dangerous.

  39. Viruses that can start fires!!! by Anonymous Coward · · Score: 0

    Ok let me send you a virus that will make your computer set on fire and tell me that isn't a "cyber attack". LOL

  40. Re:First blood! by somersault · · Score: 1

    offtopic is about the most retarded mod that could have had (for anyone that read the title anyway)

    --
    which is totally what she said
  41. American cyberwarfare by sageres · · Score: 2, Interesting

    I think that although cyberweapons do not exist, government can implement a best next thing: killswitch for individual networks at the backbone level. Seriously, consider that US owns majority of the Internet. Say they find some sort of DDOS attack that originated in Russia against Estonia. They would be able to immediately cut off some Russian networks out of the main backbones on various levels (cut off access to root DNS if they are naugty, and if they are especially bad -- cut off all their IP blocks).

    1. Re:American cyberwarfare by jc42 · · Score: 1

      Seriously, consider that US owns majority of the Internet.

      Actually, this is wrong in an important way. That majority of the Internet (or more accurately, the long lines and routers) is not owned by the US, but rather by US corporations. Even the US military's internal Internet clone runs mostly on lines owned and operated by corporations.

      And those corporations are at best only nominally American. In reality, they are all international corporations, with interests independent of the US, and only minimally controlled by the US government. It's widely believed in the US that the big corporations have more control over the US government than that government has over them.

      This isn't necessarily a comforting observation. Most of the core of the Internet is in effect owned and controlled by big organizations that are independent of any democratic or other social controls, and openly proclaim that their only interest is in their shareholders' profits. This should probably make us even more nervous than the thought that it's all American controlled. Americans are a disorganized, chaotic mob that fight each other more than they fight outsiders. Those giant corporations are much better organized, and have a history of effectively targeting their enemies (i.e., smaller corporations) and either killing them or eating them alive.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  42. Re:There is a difference between "war" and "terror by srleffler · · Score: 1

    Nuclear plants won't run without an external power source. It's a safety feature. If the plant can't get power from the grid, the reactor shuts down automatically.

  43. happy hunting. by Anonymous Coward · · Score: 0

    it's all abit technical.
    one has to expand the term "cyberware" some more.
    and it could rely on radical new physics.
    not just sending "run-of-the-mill" but malicious data
    over a conforming network.
    you have to imagine the RAM and CPU and what
    it relies on. not just electricity.
    you have to see the N-P, P-N etc. and all the quantum
    mechanical principals involved. you have to see
    that we are still discovering new physics (like
    those pesky oscillating neutrinos).
    see also spooky action at distance and entanglement.
    now, i'm sure some smart dude will get an idea
    where i'm going with this.
    just believe that EVERYTHING is connected.

  44. SunTzu: The Art of CyberWar by OldHawk777 · · Score: 1

    So, to summarize, the idea of nation states waging cyberwar (may be SunTzu, Ideal) with cyberweapons (DDOS, buffer overflow, worm, spoof/snoop, EMP...) is not fiction.

    It's an analogy we might use to describe some things that are virtual/conceptual that can cripple military/government ability to respond to emergency/threat incidents that are not in cyberspace, which triggers an excessive misdirected reaction. It's not what really goes on in cyberspace, but if a small-degree of fire-sale is possible that would allow mafia/other covert manipulation of a stock or market sector that could fund other criminal/war activities would that be using cyberwar/cyberweapon?

    The conflicts between nation states in cyberspace is warfare by other then lethal weapons(MD). The tools "Crackers" use are like weapons that can disable or disrupt tactical or strategic response, but no local/international law will ever prevent the creation or use of cyberweapons except possibly cyberspace disconnection/embargo (diplomatic) or cyberspace-MAD (military).

    Can cyberwar/weapons be used in asymmetric warfare? Yes!
    Can cyberwar/weapons include physical contact/weapons (EMP/firesale) for augmenting tactics and strategy? Yes!

    The cyberwar fiction is what drives the corporate/national policy, and that worries me a lot. The insipidness is a bigger danger to US, EU, RU... cyberspace than foreign/domestic Crackers.

    SunTzu analogy: The subjugation of your enemy without a death or any physical destruction of the infrastructure or industrial-base is ideal/possible.

    SunTzu still pwns war.

    --
    Unaccountable leaders are masters, and unrepresented people are slaves. How do US and EU fare?
  45. Keep the theme going . . . by moeinvt · · Score: 3, Funny

    No matter how ridiculous it sounds, we should do our best to keep up the whole "cyber-war", "cyber-weapons", "cyber-attack" theme.

    That way, we can invoke the Second Amendment when the government tries to restrict strong encryption, copyright circumvention software or whatever other "cyber-weapons" they find threatening. Sorry Feds, you were the ones that started this whole theme about electronics and software being "weapons", and as such, you have no power to restrict the citizens from owning them.

             

    1. Re:Keep the theme going . . . by SheeEttin · · Score: 1

      Sorry Feds, you were the ones that started this whole theme about electronics and software being "weapons", and as such, you have no power to restrict the citizens from owning them.

      ...as part of a "well regulated Militia".
      It's funny how frequently people forget that little phrase.

  46. This just in by Locke2005 · · Score: 1

    "Cybersex" is nothing like real sex either.

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  47. Re:There is a difference between "war" and "terror by debrain · · Score: 2, Informative

    Nuclear plants won't run without an external power source. It's a safety feature. If the plant can't get power from the grid, the reactor shuts down automatically.

    Sir –

    You're right that nuclear power plants need external power to operate as a safety feature - to keep the water pump providing coolant flowing so the reactor doesn't melt. However, the need to be connected to the grid differs from my experience working at nuclear power plants. At the plant I worked at (a CANDU reactor) if the reactor itself wasn't operational there was a grid-backup, a diesel backup, and a battery backup. The battery was the most impressive. The plant could be started and was designed to operate with any of these sources of power at any given time. Of course, other plants may have different, less redundant, designs — as you suggest.

  48. Anonomous ID10T error by Anonymous Coward · · Score: 0

    The anonymous originator is obviously an idiot of major proportion.

  49. remember remember the 5th of novemeber by Anonymous Coward · · Score: 0

    remember remember the 5th of November

    na lets all put a black cape on and wear white masks on November 5th
    and just walk around saying HI anonymous

  50. Disruption without direct access by Anonymous Coward · · Score: 0

    As it was explained to me when I asked that very question (to someone working in a nuclear power plant), you don't need direct internet access to the workings of the plant to cause a major disruption. To meet safety regulations, the plants have to file daily reports to the NRC via the internet. If the internet is disrupted and the reports can't get through, they are required by law to take the plant off-line, even if it's working perfectly. I suppose in an emergency they could go back to faxes or whatever they were doing before the internet, but that would take time to set up, and nuclear plants can't just be turned off and on like a light switch.

  51. Tiny malfunctions w Gigawatts of power do go boom by hAckz0r · · Score: 2, Informative

    You might lead the casual reader to think that merely throwing a switch has no real world consequences, which is anything but the truth. When you are dealing with systems of such magnitude of energies even the smallest delay in rectifying an issue has a very lasting effect. e.g http://englishrussia.com/index.php/2009/08/17/hydro-electic-power-plant-explosion/ There are any number of ways to force mechanical failures simply by using 'control' software. Any mechanical system can be forced to fail if you know how it is built, and what problems plague the internal design of that system. The US is vulnerable to many such attacks against the control systems (e.g. SCADA ) and these threats should be taken VERY seriously until such time that we know the internal control networks are unreachable from any outside influence. http://www.securityfocus.com/news/11465

  52. brought to you by Norton McAffee Symantic by Anonymous Coward · · Score: 0

    where's my "peace dividend"?!!!


    Haliburton must've gotten it...

  53. they're cost-cutting meausures! by Thud457 · · Score: 1

    No fatalities as a result, but slipshod documentation & maintenance is probably a bigger problem : http://tech.slashdot.org/story/09/11/05/1632204/Computer-Failure-Causes-Gridlock-In-MD-County?art_pos=1

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  54. we're slitting our own throats. by Thud457 · · Score: 1

    I've read that these systems are accessible from the internet so that support staff can remotely diagnose problems.

    ...from India.

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  55. Re:First blood! by Anonymous Coward · · Score: 0

    You missed, anyway. There's an anon 1 minute before you.

  56. The Atlantic things otherwise. by axlrosen · · Score: 1

    "When will China emerge as a military threat to the U.S.? In most respects the answer is: not anytime soon -- China doesn't even contemplate a time it might challenge America directly. But one significant threat already exists: cyberwar. Attacks -- not just from China but from Russia and elsewhere -- on America's electronic networks cost millions of dollars and could in the extreme cause the collapse of financial life, the halt of most manufacturing systems, and the evaporation of all the data and knowledge stored on the Internet."

    http://www.theatlantic.com/magazine/archive/2010/03/cyber-warriors/7917/

    1. Re:The Atlantic things otherwise. by Thad+Zurich · · Score: 1

      In computer-war terms, other countries (including, but not limited to, China) are already a military threat to the US. By attempting to infiltrate US DoD, contractor, and allied government and contractor systems, adversaries create conditions that divert defensive resources away from other military efforts. This alone is a form of cyber attack, even without considering the consequences of what might happen if/when such intrusions succeed.

  57. USE THE POWER GRID AS A PRIVATE INTRANET by Latinhypercube · · Score: 0

    Why risk the insecurities of the internet ? Use the power grid as an intranet using POWER LINE COMMUNICATION http://en.wikipedia.org/wiki/Power_line_communication . Then all you have to secure is your main connecting power lines.

  58. Re:Tiny malfunctions w Gigawatts of power do go bo by rtfa-troll · · Score: 1
    Thanks; I hope I didn't give the wrong impression.

    Any mechanical system can be forced to fail if you know how it is built

    (my emphasis) - you need to work out the right trick to cause a failure; you need to work out how to get that trick to happen through the control system; you need to integrate your software with the particular configuration of the control system in the particular power station you are attacking. Most of all, you need to repeat this whole process across many different installations all over a country.

    This becomes an extremely non trivial "multi-vendor" (at least the attacker + the control software author, if not also the network software) integration case and needs time and energy.

    Compared to the resources of the average army this is totally trivial. People who calmly send tens of thousands to their deaths are not worried by having to hire a few tens of programmers. On the other hand, to a little disorganised hacker band this is the kind of thing they can only achive through fairly serious advances in AI. One man and his iphone is just not going to cut it.

    Which is not to say that killing a few hundred or even thousand people (e.g. by breaching a well chosen dam or causing a fire in the bottom of a tall building), a goal well within the reach of one bored skillful and lucky man and his iphone is something that we should just totally ignore. It's just that it's not really close to warfare.

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  59. Regardless of what you call it... by Draele · · Score: 1

    The entire concept vastly more plausible and sensible than the 'All-Robot Warfare' idea that was going around several years ago.

  60. The summary makes me think of this... by geminidomino · · Score: 1

    Came across this while considering a graduate degree. It's enough to make Tom Clancy facepalm.

  61. B*llsh*t by Anonymous Coward · · Score: 0

    Cyberwar is very real. It's in it infancy right now and it relates more to the intelligence aspects of the military than to the 'men on the ground' idea of military might.

    How is hacking a military database and planting misinformation and destroying data any different than covert ops? The military will someday have some sort of data division specializing in attacking countries using computers custom-tailored for warfare.

    We can do this later and risk being vulnerable or we can do it now and maintain our supremacy. The choice is ours.

  62. Sorry, it's not fiction. by Thad+Zurich · · Score: 1

    Article states: "I can disable the national power grids of half the countries in the world using nothing more than an iPhone. There is no such thing as 'cyberweapons'" These statements must be viewed as incongruent on some level. The fact that an iPhone might be used to commit an act of war may not may the iPhone a cyberweapon; however, disabling a national power grid is an act of war, no matter how you did it. You need to view this sort of thing in light of Robert K. Knake and Richard A. Clarke's book _CYBER WAR_ ISBN 978-0-06-196223-3. Russia's proposed treaty is about keeping the US asymmetrically vulnerable to computer-based attacks.

  63. Badness approaches... by Anonymous Coward · · Score: 0

    Anything the UN and Russia are behind as far as a "warfare" act moving through the UN will spell trouble for the US. Beware.

  64. Political policy is about tomorrow. by elucido · · Score: 1

    If we waited until it was time then how would nuclear weapons be contained?

  65. What is it like No Such Agency? Come on.... by freeschwag · · Score: 1

    Um aren't there any gov'y related peeps on this board?
    Fiction? not hardly, Cyber-warfare quite some time ago became the 4th official platform just like other kinds (Sea, Air, Land) many years ago and the Air Force has an entire division with standard command structure in place.

    --
    Tweet, tweet, all id10t's out of the gene pool, open swim is over.
  66. Re:There is a difference between "war" and "terror by srleffler · · Score: 1

    I defer to your greater knowlege of the subject.

  67. Proprietary binaries kill by SgtChaireBourne · · Score: 1

    Close. It wasn't code that was injected, it was proprietary binaries. In other words, closed source kills. Yes, the same general category that gives us billions of lost hours from crappy drivers for good hardware. The same general category that is responsible for providing an incubator for the world's botnets.

    That makes what Novell, Black Duck and other branches of Microsoft are doing so profoundly bad when they try to re-label their proprietary binaries 'open source' without releasing the full source. Just releasing some of the source doesn't count, it's as bad as all-binary proprietary. By release, that means read, edit and re-compile. Anything less is just plain dangerous.

    You'd think that countries would learn. Or at least the US would learn. As things are, TSA is shaking people down for baby milk instead of doing something useful like nuking each and every NTFS partition on every harddrive that passes through customs. During a transitory period of a year or two, they could take it easy on the scum by just erasing every file ending in .com, .exe, or .dll and handing them a Fedora live CD. Tracking down and locking up the present and former executives of Microsoft and its partners would be another step forward. Off to Gitmo with the lot.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.