Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hacker Claims He Broke Into Wind Turbine Systems

Posted by samzenpus on from the I've-got-the-power dept.

itwbennett writes "Claiming revenge for an 'illegitimate firing,' someone has posted screenshots and other data, apparently showing that he was able to break into a 200 megawatt wind turbine system owned by NextEra Energy Resources, a subsidiary of Florida Power & Light. In an e-mail interview, Bgr R said he's a former employee who discovered a vulnerability in the company's Cisco security management software that he then used to hack into the SCADA systems used to control the turbines. His motive was to embarrass the company, he said."

4 of 105 comments (clear)

  1. Former employee? by atari2600a · · Score: 4, Insightful

    Well that pretty fucking much limits the list of possible suspects now doesn't it?

  2. Sounds dodgy to me... by BrokenHalo · · Score: 5, Insightful

    In an e-mail interview, Bgr R said he's a former employee who discovered a vulnerability in the company's Cisco security management software that he then used to hack into the SCADA systems

    That just tripped my bullshitometer. Most Cisco systems (in my experience) are pretty robust, but an employee would have been in a good position to create an open door for himself to use later. So the "vulnerability" (if I'm right) would simply be his employer's misplaced trust in him.

    1. Re:Sounds dodgy to me... by amanicdroid · · Score: 3, Insightful

      Oo oo I love Cisco Jeopardy! I'll go with:

      What is he had remote access to the KVM that the Cisco's console port was connected to?

  3. FAKE by StickyWidget · · Score: 4, Insightful
    FAA: "Wind power company sees no evidence of reported hack
    " http://www.itworld.com/security/156817/wind-power-company-sees-no-evidence-reported-hack

    Also:
    http://seclists.org/fulldisclosure/2011/Apr/264
    http://seclists.org/fulldisclosure/2011/Apr/265

    ~Sticky