Slashdot Mirror
US Hacker Sets Off 156 Sirens At Midnight (dallasnews.com)
"I had the displeasure of being awoken at midnight to the sounds of civil-defense/air-raid sirens," writes very-long-time Slashdot reader SigIO, blaming "some schmuck with a twisted sense of humor." The Dallas News reports:
Rocky Vaz, director of Dallas' Office of Emergency Management, said that all 156 of the city's sirens were activated more than a dozen times... Dallas officials blame computer hacking for setting off emergency sirens throughout the city early Saturday... It took until about 1:20 a.m. to silence them for good because the emergency system had to be deactivated. The system remained shut down Saturday while crews safeguarded it from another hack.
The city has figured out how the emergency system was compromised and is working to prevent it from happening again, he said... The city said the system should be restored Sunday or Monday.
City officials reported 4,400 calls to their 9-1-1 emergency phone number in the first four hours of Saturday morning, with over 800 occurring in that first 15 minutes when all 156 sirens started going off simultaneously.
The city has figured out how the emergency system was compromised and is working to prevent it from happening again, he said... The city said the system should be restored Sunday or Monday.
City officials reported 4,400 calls to their 9-1-1 emergency phone number in the first four hours of Saturday morning, with over 800 occurring in that first 15 minutes when all 156 sirens started going off simultaneously.
Dear Texas: you have shit security and morons managing it. This is dangerous. I sounded the appropriate warning systems.
There have been recent reports of problems with the Dallas 911 infrastructure causing hold times and delays which resulted in deaths. This may have been an attempt to further highlight the problems.
City officials reported 4,400 calls to their 9-1-1 emergency phone number in the first four hours of Saturday morning, with over 800 occurring in that first 15 minutes when all 156 sirens started going off simultaneously.
People, people, people, when the emergency sirens are sounding, the authorities already know about the emergency. You don't need to call 9-1-1 to tell them about it, really.
People are so incredibly stupid.
Let me guess, SQL injection strikes again?
Just cruising through this digital world at 33 1/3 rpm...
I've seen municipal systems that were set up years ago without any hardware firewalls, just Windows XP. They ignored my advice to harden the systems. It's alarming that towns are not fully proactive about their municipal Internet-of-things. This alarm system in Dallas is simply mischief that points out the flaws in one system. Other systems, some critical to a town's functioning, are still vulnerable. Politicians are mostly dumbasses that run on ideas, but once in office are dumbfounded, dazed and confused., on all levels of government.
Everywhere has shit security. Every manager is a moron. Everything is dangerous.
A door being unlocked does not give one the right to steal what's behind it, and similarly having a vulnerable system does not give one the right to attack it.
You do not have a moral or legal right to do absolutely anything you want.
Having in the past been "one of those weird people interested in warning sirens as a hobby", I have a fair bit of knowledge to how insecure their control systems actually are, and thus how trivially easy it is to compromise them. Although security is slowly improving, a lot of older siren systems are controlled using unencrypted analog radio signals transmitting standard DTMF (telephone-type) tones. For a malicious person, it is shockingly easy for them to turn on an off-the-shelf police scanner, find the frequency used to control the system, record the activation signal (such as during a regular monthly test), then at a later time use an illegal transmitter of some sort to rebroadcast that recorded activation signal on the same frequency over and over. I do not know what control method Dallas uses for their siren system, but the fact that one of the news articles (CBS News) I read about this said the FCC has been asked to help investigate leads me to believe more than likely such an attack was utilized...and this isn't the first time such has happened.
He didn't break the 911 emergency number. The people did that to themselves by flooding the number with calls. Blame where blame is due.
Those people were idiots. If the sirens are blaring, then it is obvious that the authorities are already aware of the problem.
So the sirens sound, and presumably the North Koreans have a nuclear strike on the way. And what do the good citizens do? _nothing_. Only 4400 actually tried to figure out what was wrong; the rest simply ignored it.
You might as well get rid of the entire system, nobody cares about it anyway...
You know Russia has subs parked on every undersea communication link that the US has right? The first blow in any war will be the US having its metaphorical eyes, ears, and tongue hacked off.
Hence the interest in satellite-to-satellite communications.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
>"How does this work in the US ? Here around in Europe, the authorities are supposed to immediately broadcast informations about the alert on all available channels (TV, radio, web, public announcement systems, etc.) "
Correct, that is the way it works here. If sirens go off, you are supposed to seek out a broadcast to determine the nature of the emergency. Where I live, it is always a weather emergency (like a tornado warning; and no, even though we don't live in "tornado alley", several touch down every year).
They are also used for nuclear power plant incidents, extreme thunderstorms, hurricanes, and civil defense.
In these days of shifting from "Cable is King" to Cord Cutters... well, as far as I know, they did get the cable companies to put emergency interrupt capability in every fucking channel. But it's a bit hard to do that with Netflix, or even an https request.
And the problem with disaster emergencies is that they are so infrequent that the mindless masses have no clue what to do, because it hasn't happened since the last Oscars, and that's as far as they can remember before their ADD kicks in and they start wondering what all the gossip page celebrities are doing.
To make it worse, now mostly mundane stuff has become an "ALERT!!!!!111!!!", which contributes to giving everyone alert fatigue, and when something real happens, they don't even know if they are supposed to care. But a siren going off while they're trying to sleep? In the land of people calling 9-1-1 because their fast food isn't fast enough?
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
I
To make it worse, now mostly mundane stuff has become an "ALERT!!!!!111!!!", which contributes to giving everyone alert fatigue, and when something real happens, they don't even know if they are supposed to care?
Exactly this. We've gotten so many alerts that we gave up and turned them off. And most were stupid. Most are too far away, most are false alarms, like when a woman thought her kid was abducted by her Ex, and it turned out the little girl had gotten in the car, took it out of gear, and the car drifted down the driveway and into the nearby woods. Even so, that alert was like 200 miles away.
We had one right in our neighborhood when a little boy was a couple minutes late walking home from school. Full alert with the dogs and police and rescue groups activated. Turned out the reason he was 5 minutes late was he stopped to talk to a friend. So 10 minutes after the alert, it was called off. And my alerts were all turned off.
Society might be happy to go insane, And turn it up to 11 on everything, but I don't feel like participating.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
If no one knows what to do when they hear the siren, then there's really not much point in having the siren in the first place.
1.2 million people live in Dallas. 4400 confused people, or about a third of 1%, dialed 911. You can't extrapolate from that to say that "no one" knew what to do.
For the clueless, here is what you should do when you hear a siren: 1. If you are in a tsunami warning area, head for higher ground. 2. Make sure your house isn't on fire. 3. If you have an air raid or fallout shelter, get in and seal the door. 4. If none of the above apply, then go back to bed and hope that someone else deals with the problem.
Great, you just killed everyone in tornado country. Hope you are happy.
I browse on +1 so AC's need not respond, I won't see it.
> In these days of shifting from "Cable is King" to Cord Cutters... well, as far as I know,
> they did get the cable companies to put emergency interrupt capability in every
> fucking channel. But it's a bit hard to do that with Netflix, or even an https request.
That's where AM and FM radio excel. Turn it on and listen. They both have longer range than cellphone cells, and continue functioning when the cell network gets overloaded. While we're at it, most smartphones *SHOULD* be capable of FM radio reception. But many smartphones in the USA are deliberately crippled, due to cell carriers demading this from OEMs. This is greed, pure and simple. The carriers want people to pay through the nose for data over-usage, rather than listening to FM radio for free. https://yro.slashdot.org/story...
I'm not repeating myself
I'm an X window user; I'm an ex-Windows user
Don't laugh, but that's actually how the sirens in my county are activated. Each fire station's siren has a tone pair along with an all siren tone pair and a cancel tone pair for the all call tone. For an auto accident you usually get (not sure of the order) Siren Tones, Fire Pager Tones, EMS Pager tones, and a human decoded auto accident tone. This is simulcast from two sites on the main frequency (not sure if the other UHF system is still active) and the audio is carried on the digital P25 dispatch talk group.
Oh and we don't use what the people in the business call VHF (15X to 16X MHz range) we use Low Band (3X and 4X MHz Range).
sudo mod me up