On Nov 21, 2011, at 4:30 PM, Mark Radabaugh wrote: >> >> > Probably nowhere near that sophisticated. More like somebody owned the PC > running Windows 98 being used as an operator interface to the control system. > Then they started poking buttons on the pretty screen. > > Somewhere there is a terrified 12 year old. > > Please don't think I am saying infrastructure security should not be improved > - it really does need help. But I really doubt this was anything truly > interesting.
That's precisely the problem: it does appear to have been an easy attack. (My thoughts are at https://www.cs.columbia.edu/~smb/blog/2011-11/2011-11-18.html) --Steve Bellovin, https://www.cs.columbia.edu/~smb
