Slashdot Mirror
Warning Over 'Panic' Hacks on Cities (bbc.com)
Security flaws have been found in major city infrastructure such as flood defences, radiation detection and traffic monitoring systems.
A team of researchers found 17 vulnerabilities, eight of which it described as "critical." From a report: The researchers warned of so-called "panic attacks," where an attacker could manipulate emergency systems to create chaos in communities. The specific flaws uncovered by the team have been patched. "If someone, supervillain or not, were to abuse vulnerabilities like the ones we documented in smart city systems, the effects could range from inconvenient to catastrophic," wrote Daniel Crowley, from IBM's cyber research division, X-Force Red. "While no evidence exists that such attacks have taken place, we have found vulnerable systems in major cities in the US, Europe and elsewhere." The team plans to explain the vulnerabilities at Black Hat -- a cyber-security conference -- on Thursday.
https://www.huffingtonpost.com...
The main stream media does a good enough job creating panic as it is.
More so I might add than any one man with a twitter account.
Useless snark, insults, and shouting at the sky.
Process with caution.
US Hacker Sets Off 156 Sirens At Midnight garnered 230 replies.
We both quack together during a leisurely fuck.
balls deep in feathers and it feels so right!
used to find them in a couple of popular cereal brands.
If making a series of false-flag terrorist attacks against your own citizens just to get elected doesn't make you a supervillain, I don't know what would.
And that one has been pretty widely proven, not just by Litvinenko but even by ordinary police, identifying the FSB as a culprit.
Thus, if doing so on own soil is "ok", you can expect anything in a rival country.
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
https://news.slashdot.org/story/18/01/30/181234/false-hawaii-missile-alert-sent-after-drill-recording-said-this-is-not-a-drill
Almost all IT security these days is "cheaper than possible" because the people in charge are not able to do risk management. Until there are "reference catastrophes" of sufficient magnitude, they will mistakenly believe they are safe and do nothing. Then they will find out that decades of mismanagement are not easy to fix. It is always the same story. It is always utterly stupid. It is always completely obvious to actual experts what is going on, but nobody listens to them.
The leadership we have on all levels is not modern, educated, enlightened. It is cave men (and the occasional cave-woman) dressed in suits, full of themselves, greedy, corrupt and utterly incompetent and unsuitable to fill their core responsibilities.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
1: Flash something to Teslas and other "always-on" vehicles. A lot of vehicles use interference engine designs, so by having those mistime, cylinders will smash into valves, and that is the end of that.
2: Wait for a natural disaster like a hurricane, or something requiring an evacuation.
3: Trigger the vehicles to destroy their engines, or just erase their ECM firmware.
4: ????
5: Profit.
It only takes a few vehicles to be disabled from remote as a percentage to render all highways out of a city impassible, and with a lot of businesses having zero interest in security (breaches can make the top brass wealthy, as they can short before the announcements hit), it would not be difficult for a dedicated blackhat group to do this, putting themselves on the map.
Remote control of infrastructure was a mistake.
Anyone is authorized to pull it even if there isn't a fire.
All you need to do is blame "hackers" and it's not your fault. Whatever it is.
And about a dozen episodes of CSI?
Radiation science is dominated by a paradigm based on an assumption without empirical foundation. Known as the linear no-threshold (LNT) hypothesis, it holds that all ionizing radiation is harmful no matter how low the dose or dose rate. Epidemiological studies that claim to confirm LNT either neglect experimental and/or observational discoveries at the cellular, tissue, and organismal levels, or mention them only to distort or dismiss them. The appearance of validity in these studies rests on circular reasoning, cherry picking, faulty experimental design, and/or misleading inferences from weak statistical evidence. In contrast, studies based on biological discoveries demonstrate the reality of hormesis: the stimulation of biological responses that defend the organism against damage from environmental agents. Normal metabolic processes are far more damaging than all but the most extreme exposures to radiation. However, evolution has provided all extant plants and animals with defenses that repair such damage or remove the damaged cells, conferring on the organism even greater ability to defend against subsequent damage. Editors of medical journals now admit that perhaps half of the scientific literature may be untrue. Radiation science falls into that category. Belief in LNT informs the practice of radiology, radiation regulatory policies, and popular culture through the media. The result is mass radiophobia and harmful outcomes, including forced relocations of populations near nuclear power plant accidents, reluctance to avail oneself of needed medical imaging studies, and aversion to nuclear energy—all unwarranted and all harmful to millions of people.
(abstract from Epidemiology Without Biology: False Paradigms, Unfounded Assumptions, and Specious Statistics in Radiation Science)
LNT encourages the hysteria surrounding nuclear, and transforms harmless levels of radiation exposure into real deaths. The tragedy at Fukushima was not the nuclear accident, but the misinformed response: a forced evacuation which claimed ~1600 lives, the monumental cost of an absurdly excessive cleanup, and the entire nation regressing to imported fossil energy. Oh, and the tsunami itself, which was all but ignored while the media focused on fearmongering and conflating the unrelated refinery explosions with the damaged reactors.
See X-LNT for a more accessible background on low dose radiation. Set aside your ideologies and inform yourself; it may save your life someday.
"Security flaws have been found in major city infrastructure such as flood defences, radiation detection and traffic monitoring systems."
What retard connected their city infrastructure directly to the Internet.
The real reason that anyone goes to that particular conference is to get sloshed, play "Can you identify the Fed", and then get sloshed some more. By the end, most of the attendees are at some level of drunk.
Almost all of them. Believe it or not.
Haven't you been reading Risks To The Public for the past 20 years.
How many people have actually been seriously harmed or killed by something like what is described in these over-hyped "oh noes we need more security!" (read: give us more money) scenarios? Whatever number you come up with, it will be nothing compared to the damage cause by natural causes - storms, heat, cold, animals, not to mention the stupid things that humans do. I'll put my money towards limiting damage from those things, thank you. I wan't my power company to trim the trees and bury the power lines, to prevent days-long outages that kill people, instead of spending money on keeping hackers from flipping off a substation or generator for a few hours, ruining your cocktail party.
Strange things are afoot at the Circle-K.
We could have both the price efficiency *AND* the security/verifiability if only people would say 'performance is good enough now, where is our security/error correction?'
All major Intel, AMD and ARM chips have optional ECC support now, in some cases disabled only for market differentiation, in others only disabled to save a few traces in the design. The performance hit of it is negligable today, the cost under mass manufacture similiar to consumer level hardware already. If it wasn't for Intel market differentiating by ECC support, everyone would have migrated back to it already (Parity correction was standard until Intel's first chipset in the mid 90s, even on budget brand chipsets. Until Intel killed off 3rd party chipsets many of them included ECC in the late EDO and early SDRAM chipsets as well.)