Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security United States

East Coast Facing Gas Shortage Due To Ransomware Attack 157

New submitter TheCowSaysMoo writes: Gas stations from Florida to Virginia began running dry and prices at the pump jumped on Tuesday as the shutdown of the biggest U.S. fuel pipeline by hackers extended into a fifth day and sparked panic buying by motorists. About 7.5% of gas stations in Virginia and 5% in North Carolina had no fuel on Tuesday as demand jumped 20%, tracking firm GasBuddy said. Prices rose to their highest in more than six years, and Georgia suspended sales tax on gas until Saturday to ease the strain on consumers. North Carolina declared an emergency. Colonial Pipeline has forecast that it will not substantially restore operations of the 5,500-mile pipeline network that supplies nearly half of the East Coast's fuel until the end of the week. The company preventively shut the pipeline on Friday after hackers locked its computers and demanded ransom, underscoring the vulnerability of U.S. energy infrastructure to cyberattack.
This discussion has been archived. No new comments can be posted.

East Coast Facing Gas Shortage Due To Ransomware Attack

Comments Filter:
  • by IWantMoreSpamPlease ( 571972 ) on Tuesday May 11, 2021 @04:31PM (#61374170) Homepage Journal

    Our critical sections are vulnerable to external attacks, but hey, stock prices are at record levels and corps are paying zero taxes, so there's that...
    (in other words, something is seriously broken in the country)

    • by Lisias ( 447563 ) on Tuesday May 11, 2021 @04:35PM (#61374184) Homepage Journal

      Our critical sections are vulnerable to external attacks, but hey, stock prices are at record levels and corps are paying zero taxes, so there's that...
      (in other words, something is seriously broken in the country)

      Not only on yours. This crap is happening everywhere. It only happens that your country is currently one of the most rich of the World, what made you a primary target.

      As soon as USA fixes their infra-structure (and fix it they will, otherwise they will go kaput), will rain hell on the rest of us....

      • This "crap" is happening because IT departments are largely incompetent when it comes to IT security. How a critical system isn't firewall'd off on its own and managed my computers that have restricted access is beyond me. We provide virtual desktops with floating operating systems (Windows), and use file / folder redirection to store all documents on file servers that are backed up every day and the storage appliance creates snapshots every 15 minutes. We have had instances of ransomware. We normally tell
        • by Forty Two Tenfold ( 1134125 ) on Tuesday May 11, 2021 @05:14PM (#61374346)

          This "crap" is happening because management departments are largely incompetent when it comes to IT security.

          FTFY. There is no point in the pipeline being accessible from the Internet.

          • by Known Nutter ( 988758 ) on Tuesday May 11, 2021 @05:35PM (#61374416)
            I can turn my porch light on and off over the internet. I should be able to run my goddamn pipeline over the internet, too.
            • You'll curse things is some a-hole starts making the thing randomly flash all the time. If the convenience worth it from the vulnerability you now get to manage? How about your fridge, should the temperature setting be remotely adjustable, or perhaps even remotely disabled?

              The more important something is, the more insulated it should be. Really important things should be air-gapped from the web, full-stop.

          • What evidence is there that the pipeline controls were exposed to the Internet?
            Perhaps what was hit with ransomware was their billing system. Profits come first.

            How do we know that this was not done with the assistance of an insider? The Darkside group solicits and promises a share to people who have access . It's possible they bribed their way in .

            Let's try to separate what facts we know from the guessing going around.

            • by AK Marc ( 707885 )
              The pipeline owner claims the shutdown was due to protect the pipeline from the hack.

              That is evidence that the pipeline is at direct risk. You have no evidence that contradicts that. You might suspect they are lying, but perjury is still "evidence", until proven otherwise.

              You are guessing that other people's statements are guesses, and not based on public statements by the pipeline company.
              • by clovis ( 4684 )

                Here's an update.
                https://www.cnn.com/2021/05/12... [cnn.com]

          • It might not be. Their corporate systems were what was infected, but they don’t know how far the crackers got in. Even a well protected link between the corporate network and the SCADA network needs to be treated as suspect when you have been taken over.

            I don’t get why these systems are so poorly designed; 20-25 years ago we would build separate safety PLCs that prevented things from operating out-of-bounds in terms of safety or function, and SCADA as a sparate layer. The PLC systems were muc

            • by AK Marc ( 707885 )
              SCADA is generally without any security. The "engineers" demand air gaps, and demand no security, because it gets in their way.

              The users bypass the air gaps because security by enforcing zero functionality is stupid. Then you get a SCADA network indirectly connected to the Internet with no real security protecting it.

              Building the SCADA on the Internet, and securing it appropriately is actually a better plan than what almost all SCADA networks do today.
          • by DarkOx ( 621550 )

            I have to respond because I am getting tired of reading this horse shit response.

            You know what people with your attitude are EXACTLY why we have crisis like this. Its YOUR fault! Let me clue you into the reality. Management does not accept your view here, the "let's not connect it to the internet" ship has left port and is over the horizon. There are to many good reasons to connect it to the internet, at least with layers of indirect access like jump boxes etc. Its a huge productivity win for some of the

            • by AK Marc ( 707885 )
              Odd, I've lived through the opposite. The "engineers" (PEs and the like) are the ones saying "air gap only", and then someone runs a wire from an unsecured computer to the unsecured SCADA. The network security people said "sure, just pay for a CA, FW, and some other things", and management says "no".

              Yeah, I could dial in from home to a PC, then connect through a PCAnywhere serial connection to an unsecured SCADA. The only security was username/password (PAP/CHAP) on the dial-up. That's what management
    • Re: (Score:2, Flamebait)

      by fermion ( 181285 )
      A small number of gas stations have no gas. The people who fill up everyday because they drive 100 miles to work in their Hummer, because they are just that patriotic, are now filling up twice a day. This is causing prices to go up. Yes, we have an infrastructure problem, but this is a people problem, like insisting we still need to go out and eat during a pandemic.
      • by ghoul ( 157158 ) on Tuesday May 11, 2021 @04:41PM (#61374198)
        With most low qualification jobs having been offshored, the service sector including restaurants support a large number of underqualified folks. Yes its not necessary to eat out but millions depend on eating out culture to be able to eat.
        • Restaurants support a large number of over qualified people also. There are not enough good jobs for these people or the jobs are not where these people want to live.

          At this time unemployment with the bonus checks is supporting both under and over qualified people. If the Democrats can keep this going they will have instituted a UBI and a higher minimum wage without anyone getting to vote against it.

          • by ghoul ( 157158 )
            The jobs dont need formal qualifications like degrees. Whether people with degrees work them or not, doesnt mean the job changes. A tipped waiter is one of the few jobs (besides cops and firemen) where a high school graduate can make 6 figures.
      • The people who fill up everyday because they drive 100 miles to work in their Hummer, because they are just that patriotic, are now filling up twice a day.

        Doesn't sound like an outlier or anything.

      • ...but this is a people problem, like insisting we still need to go out and eat during a pandemic.

        I dunno about you, but I did my time stuck at home.

        I'm fully vaccinated, about as safe as I can get (according to the scientists)...and I'm out again.

        I've been going out to eat at restaurants again, many of which are so crowded that there are waits to get a table (no purposely non-seated tables, 100% capacity).

        For many of us, the pandemic is over.

        Masking restrictions lifted, businesses opening, etc.

        How mu

        • For many of us, the pandemic is over.

          Sure, for those of you living in la-la land.

          The pandemic ain't over until Covid-19 and its descendants are wiped out.

          Until then, there's the possibility of a new and worse mutation being harbored in an unvaccinated population, possibly even in majority-vaccinated nations, let alone in nations which aren't getting adequate doses.

          How much longer do you expect people to give up their lives and livelihoods?

          I expect more people to give up their lives because of the unmasking. But asking people to care about people they don't know is generally too much to ask... in the USA.

      • by King_TJ ( 85913 )

        You're really going to try to blame the gas shortage on the Hummer owners driving 100 miles to work each day in them? Good luck finding the statistically significant number of them to create the issue!

        What's more of a problem is just the panic buying where everyone decides to go to the gas station on the same day, rather than spreading it out randomly across a 7 day week as they'd usually do -- plus people bringing multiple 5 gallon gas cans to fill and "stock up".

        • plus people bringing multiple 5 gallon gas cans to fill and "stock up".

          You mean like these fat Americans [9cache.com] in their fat SUV?

        • by fermion ( 181285 )
          Obviously price and availability is dependent on demand. Over the past few decades, since US automakers used the SUV to circumvent CAFE and the price of gas has remained relatively constant people have forgotten that it is not a unlimited resource. We knew this, as we had a Dodge Dart that got 10 miles to the gallon and we had to wait for hours to get gas. That is why demand went down around the 1980s and we were able to renormalize
      • by jwhyche ( 6192 )

        A small number? How about 20% of gas stations have no gas? Is that still a "small number?"

        • GP is correct in this case. Specific regions have an increased demand problem; there is sufficient storage in the system to handle consumption requirements for a week at least, although some stations (currently less than 10%) will likely have supply interruptions, especially in Georgia to North Carolina. New York down to Virginia will likely not be impacted if operation is restored this week.

    • Because their infrastructure is not yet as advanced that cyberattacks can affect it. When something runs without chips hard to take down with cyberattacks. If anything America's infrastructure is too advanced. let it crumble a little bit.
      • So does that mean this wouldn't happen in say Great Britain or Australia then? How about South Korea or Taiwan? Those "primitive" places.

        • by ghoul ( 157158 )
          I am thinking Nigeria, Sudan, Nepal. You hardly ever hear of a Cyber attack taking down anything in Nepal or Sudan.
      • or they weren't idiot enough to hook anything critical up to the internet in the first place...

    • by slack_justyb ( 862874 ) on Tuesday May 11, 2021 @04:52PM (#61374242)

      (in other words, something is seriously broken in the country)

      Yes and it is that shiny new lands better on the newspaper than mundane keeping everything magically working. Additionally, cities constantly keep trying to slash budgets so that they can attract hot flashy and new companies with the extra cash and tax-free gifts.

      I was reading an article about COBOL programing here. [logicmag.io] Here's a part that stuck out for me.

      So why was COBOL framed as the culprit? It’s a common fiction that computing technologies tend to become obsolete in a matter of years or even months, because this sells more units of consumer electronics. But this has never been true when it comes to large-scale computing infrastructure. This misapprehension, and the language’s history of being disdained by an increasingly toxic programming culture, made COBOL an easy scapegoat. But the narrative that COBOL was to blame for recent failures undoes itself: scapegoating COBOL can’t get far when the code is in fact meant to be easy to read and maintain.

      That said, even the most robust systems need proper maintenance in order to fix bugs, add features, and interface with new computing technologies. Despite the essential functions they perform, many COBOL systems have not been well cared for. If they had come close to faltering in the current crisis, it wouldn’t have been because of the technology itself. Instead, it would have been due to the austerity logic to which so many state and local governments have succumbed.

      Governments are not putting the resources into the the things they have built to maintain those resources, because maintenance is transparent. Maintenance is a budgetary burden. Maintenance is not popular among those seeking new be they in the public or government.

      In order to care for technological infrastructure, we need maintenance engineers, not just systems designers—and that means paying for people, not just for products. COBOL was never meant to cut programmers out of the equation. But as state governments have moved to slash their budgets, they’ve been less and less inclined to pay for the labor needed to maintain critical systems.

      I get it, nobody likes paying taxes. But we do not get to pay for people to maintain our infrastructure if we do not allocate enough funds to pay for them. Additionally, we don't get to direct money to these people to maintain if we are always chasing flashy and new companies with tax-free sweeteners or building big flashy new conference centers while the bridge leading to it crumbles.

      The priorities of governments have been far too short-sighted as of late and we ultimately pay for that short-sightedness long term.

      • Governments are not putting the resources into the the things they have built to maintain those resources, because maintenance is transparent.

        This was a private company which got screwed. Just like the SolarWinds hack. Just like Facebook. Just like Target.

        Perhaps these companies should put more resources into the things they have built instead of handing it over to extra bonuses and salaries for CEOs [cbsnews.com].

    • nothing to do with infrastructure, everything to do with NSA/CIA hoarding vulnerabilities they then weaponised instead of being responsible and advising vendors of these vulnerabilities. once hackers got their hands on the tools the NSA/CIA made and discovered the vulnerabilities they targeted a whole set of tools were made and are being sold to whoever ponies up the cash.

      also - that even 'Russian Cybercriminals' are behind these attacks is conjecture - anyone who knows how to contact the sellers of the too

      • Every time i hear "the russians are coming", i put it in perspective: this is a country with an economy smaller than Italy or Canada, and a population smaller than Bangladesh

    • by ShadowDragen ( 805730 ) on Tuesday May 11, 2021 @05:29PM (#61374394) Homepage
      To be clear, there was nothing actually wrong with the infrastructure, pipeline, or SCADA systems controlling everything. From all accounts, the SCADA system was never breached, and Colonial never lost control over the system.

      Colonial shut everything down because the hackers potentially had access to passwords, control information, etc that could potentially allow them to gain control. Rather than take the risk of a further breach they took the precautionary measure of a shut down.

      This is similar to the passcode for a banks vault getting stolen, and the bank shuts down until a new lock can be installed. The hackers never gained access to the vault, and it was done out of an abundance of caution. This isn't really an infrastructure failure, it's a cyber security failure no different than what's been seen at hospitals, tech companies, financial firms, etc.

      The only infrastructure that failed here is of the data-breach/cybersecurity nature and it's pretty clear at this point throwing money at the problem wont fix it since it's of a very technical nature.

      • If passwords are all it takes to get from the public internet to critical control systems then the problem isn't the breach of the outer systems, it's the design of the total system of the network.

        Those critical control systems should literally not be connected to the internet, protected by air gap or at least one-way network.

        Any links needed for control automation like responding to grid events should be point to point, not delivered over the open internet, insofar as that is possible.

    • by gweihir ( 88907 )

      A fair assessment.

    • Corporations make money by selling us stuff. If they pay taxes they will take the money from us by increasing the prices of things. Oh and by the way, a lot of people depend on owning shares in companies for their retirement. So if you destroy companies and the economy the government is going to have to get into manufacturing, and that NEVER works out. So either way you pay for it. Capitalism may suck but all the other systems have bigger flaws.

      • If they pay taxes they will take the money from us by increasing the prices of things.

        If you really believed in capitalism and the free market, you would realize that companies already charge a price that optimizes profits. Increased prices will reduce sales and hence reduce profits. Competition is (mostly, but not always) a thing.

        • Prices are optimized for profit which is dependent on demand, but when there is a tax the prices of everything is higher. So the end result is fewer sales (reduced quality of life) and greater unaffordability of goods.

          A Ford costs $20,000 because a Chevy costs $20,001 .. so the consumer who needs a car to go to work can choose the better deal. If Ford and Chevy both have to pay a $1000 tax, the Ford will cost $21,000 .. and so not as many people will be able to own a car at all -- Ford or Chevy. Due to redu

      • by dryeo ( 100693 )

        What do you suggest? Printing money? Borrowing more? Both of them will eventually lead to inflation which may screw with profits.
        Could cut spending, let the nations infrastructure deteriorate, but that might screw with profits too. Perhaps you have a fantasy that the government would cut spending on only wasteful things, doubtful based on history where a politicians first priority is getting reelected with pork being the go to way to do that.
        Could raise the citizens taxes, but then the corporations will hav

    • If you want redundancy you have to put it in the contract and likely pay more as a result. It was the same thing in Texas. No one paid for winterizing the electrical grid. The suppliers won't do it for free.
      We also have "anti-gouging" laws. So if a private company creates redundancy in the event of an emergency or stock piled a good such as masks or protective gear they would never be able to sell them at the emergency market rate. Far better that our nurses don't have protective gear than for some c
    • Our critical sections are vulnerable to external attacks, but hey, stock prices are at record levels and corps are paying zero taxes, so there's that... (in other words, something is seriously broken in the country)

      The company that operates this pipeline and shut it down is Colonial Pipeline [colpipe.com], and according to their About Us page, they are owned by five VCs, including one which looks like the Koch Bros. Looks like Private Industry choked on this one today. I'm really enjoying all this rage against Biden on here... But I guess it's fine, because that company has Values.

  • by Headw1nd ( 829599 ) on Tuesday May 11, 2021 @04:46PM (#61374224)
    Does anyone know the extent of the damage beyond "They got hacked"? Are they having to rebuild their SCADA system from the ground up? Or did they not actually have any way of reaching their various remote PLCs without just hooking them up to the internet, and now they're trying to figure out some other way?
    • by bagofbeans ( 567926 ) on Tuesday May 11, 2021 @04:50PM (#61374234)

      The billing system was made inoperable, so the pipeline was shut down because the product couldn't be metered and charged for. Sorry, no citation.

      • This makes more sense than any scenario I can imagine involving control computers that, worst case, should've been possible to restore with new hardware from backups in a few hours if the IT department isn't made entirely of PHBs.

      • The billing system was made inoperable, so the pipeline was shut down because the product couldn't be metered and charged for. Sorry, no citation.

        Well that's certainly one ignorant way of prioritizing profit over functionality, especially with a potential impact like this.

        One would think if the pumps and meters were operational, then keep your fuel flowing while you declare a financial emergency if funds are that desperately needed.

        (Desperate? Sadly, this is when we find that Colonial Pipeline probably has billions in cash reserves.)

    • by chill ( 34294 )

      No, and I doubt anyone ever will. They'll never let the results of a forensic audit be known because if there is even a hint of them skimping on secuirty or them cutting corners, (aka "business as usual") then their liability for negligence gets them all sued into oblivion.

      Hence the headline "CISA yet to obtain 'technical information' on Colonial Pipeline hack [go.com]".

    • It might be as simple as changing SCADA access credentials that could have been leaked, at least for now. They will need to assess if detailed operational and control drawings have been leaked what risks and mitigation measures are necessary to harden the system from future threats.

  • I've filled my tank once in the last 15 months.

    And it's still full.

    • by Bodie1 ( 1347679 )

      Might want to drain it, that fuel is likely varnish by now.

      • It was relatively recently that I filled it, but I do need to double-check exactly when.

        I've been kinda hoping somebody drops a piano on it. Looks like I won't really be needing it anyhow.

      • This isn't the 1960s, they put preservatives in it now.

        But if a person was worried about it, they could just add some fuel system cleaner to the tank; done.

        • This isn't the 1960s, they put ethanol in it now.

          Old stuff could sit on a shelf for many years - the new stuff needs stabilizer or it's junk in one or two. It also eats fuel lines in lawn equipment - but I'm sure the sellers of lawn equipment really don't mind the extra business.
          • by dryeo ( 100693 )

            Easiest for the small engines is to buy the premium without ethanol, the 2 cycles want mid-grade anyways and it's not like the equipment uses that much that an extra buck or 2 a month isn't worth it to preserve the equipment.

            • Yeah I JUST heard this for the first time, which is weird if it's that easy. Sadly, too late to save the carb on my string trimmer, though.

              • by dryeo ( 100693 )

                Probably depends on where you live. Here in BC there's the Chevron Super Premium that is ethanol free. Stihl also sells mixed pure gas in cans that'll keep for years, not cheap but for a small yard likely worth the money.
                As for your carb, if you're lucky, it just needs a diaphragm, which is easily replaced, blow out everything too while in there.

    • I've filled my tank once in the last 15 months.

      And it's still full.

      Good luck with that "gasoline" and the car that's trying to choke it down.

      You're probably going to need it.

    • Your battery's probably dead too.
  • by Ichijo ( 607641 ) on Tuesday May 11, 2021 @04:51PM (#61374240) Journal

    So gas stations can raise their price by an equivalent amount? Brilliant!

    • Or, with gas tax suspended, consumers see this as a drop in (effective) price, and will increase demand. Wonderful!
      • The prices are not set by a markup percentage. Lowering taxes on a product does not lower the retail price.

        Don't be such an idiot, the economy is outside, not on AM radio.

        • The prices are not set by a markup percentage. Lowering taxes on a product does not lower the retail price.

          In the US, almost everywhere, gas is most certainly sold to consumers with tax included, and with that tax removed it would directly drop the price. If you see a sign that gas is $3.00/gallon, and you fill up 6 gallons, you are most assuredly paying $18.00 and nothing more. Gas stations already purchased the gas with tax included, and they do not remit taxes from the gas sold to consumers to the localities where they nexus. The question I'm interested in - do the gas stations get reimbursed for the taxes th

      • by ceoyoyo ( 59147 )

        Lol, yeah, I'm not sure Georgia understands how free markets work.

        Hey honey, the hackerz are attacking so they suspended taxes so we can all stockpile gas! Grab every container you can find, we're going shopping!

    • So gas stations can raise their price by an equivalent amount? Brilliant!

      Much like billionaires getting richer from a pandemic, this is actually a very dangerous move that's ripe for corruption.

      Removing the tax ensures that gas stations suddenly enjoy profits like never before (remember they usually get pennies per gallon, and to your point they're sure as shit not going to offer discounts right now). That's not exactly what I call a deterrant for someone to attack a pipeline in the future, merely to ensure a similar emergency is declared, which shifts profits nicely into someo

  • On one hand, I believe ransomware blackhats should be subject to capital punishment as at least life imprisonment... on the other hand, they expose vulnerabilities that state actors will exploit someday sooner or later.

    • On one hand, I believe ransomware blackhats should be subject to capital punishment as at least life imprisonment... on the other hand, they expose vulnerabilities that state actors will exploit someday sooner or later.

      (Victim) "You attacked our broken software and network that hasn't been patched or properly secured for years!!"

      (Hacker) "Yeah, who is criminally stupid here again? I'm practically your fucking security consultant."

      Tends to make you wonder which head we should be putting on the chopping block first here...

  • An interstate fuel pipeline is obviously part of critical national infrastructure but clearly managers continue to connect pieces of it to the internet at breakneck speed and/or avoid proper security tactics and procedures. Dollars to donuts it probably wasn't even the fault of windows XP, probably there's Windows 95 or Windows 2000 system somewhere in the mix there. (I'm tempted to add Win 3.11 to the mix, but I'm going to stay with the safer bet) Almost certainly there's NOT state-of-the-art security zoni

    • by v1 ( 525388 )

      Seeing as it was ransomware there's around a 95% chance it got in by some idiot with more computer rights than they needed (and less brains than they should have) clicked a phishing link or a boobytrapped pdf/doc/xls from an untrusted source. It got on their computer, and hopped onto the network shares and started encrypting files under the authority of the stupid user.

      Likely the user will get their hand slapped, and bricks will rain down on the heads of the IT people. It's hard to blame the users, even w

  • yeah, that's the problem here. When we know there's an issue we immediately think of our own self-interests rather than maybe just curtailing our activity a bit.
    A virus hits, let's buy up TP and sanitizers in large quantities even though we can't use that much in six months.
    A gasoline pipeline shuts down because the front office can't bill and now we all need to fill up.
    I'm still seeing neighbors' houses gutted and rebuilt because they didn't know how to shut off the water during a 0-degree hard freeze, but

    • A gasoline pipeline shuts down because the front office can't bill and now we all need to fill up.

      Well, hurricane season starts June 1st.

      IT always is prudent to keep a full tank of gas and other supplies during hurricane season.

  • by 140Mandak262Jamuna ( 970587 ) on Tuesday May 11, 2021 @05:16PM (#61374356) Journal
    Stock market rewards efficiency.

    Having spare capacity, having resilience is unused resources, inefficient, it will be punished by Wall Street. "Inefficient allocation of capital" they say. I don't know how valuing Telsa, and I am a serious EV fan, more than all other auto companies combined is efficient allocation of capital. Can't figure out how companies selling dollar bills at a discount are getting venture capital. But I digress..

    Outsize salaries and bonuses of fund managers are justified saying they take the risk, so they get the reward.

    Then shit like this happens, they don't go bankrupt. They are too big to fail. Govt has to step in and save their sorry asses. And they dont even pay taxes. They use every dodge in the book to escape taxes. No wonder the country is going to the dogs.

    Let us blame the immigrants or transpeople or someone or anyone, anyone other than the corporations thieving us.

  • That means those of us in the west get cheaper gas. Right? Supply/demand. Right?

    Oh yeah, that means those of us completely unaffected will suffer gas price spikes.

    Thanks Obama.
    • by Phact ( 4649149 )

      I guess that means you're not as "completely unaffected" as you think.

  • by ikhider ( 2837593 ) on Tuesday May 11, 2021 @05:41PM (#61374430)
    This is the state of computer security now, where people can wreak this kind of havoc on our infrastructure? This is what backdoors and the NSA spying on all citizens has brought us? Is the NSA not there to help enhance security to help prevent attacks like this? Schneier on Security, (paraphrase) you cannot have a mid way here, either we are all secure and protected or we all get back-door'd.
    • This is the state of computer security now

      BWAHAHAHA!

      This is exactly the state of computer security today, what channel have you been watching?

    • Maybe instead of glorifying people like Bill Binney who built the apparatus we should look for heros in the silent professionals who secure software with little to no reward. For every infosec gathering filled with swag toting groupies sitting around eating expensive korean barbecue there is one person making an honest effort to secure the internet, and they may get one free laptop, like if ever.

    • No, this is not the result of backdoors and NSA spying. This is the effect of creating an entire environment/ecosystem. We grew it "organically", by tweaking here and there to meet our needs. Along the line, a bit of knowledge was lost/forgotten, and one tweak in a hundred had non-visible (until now) consequences. Combine a few of these "inconsequential" tweaks, and you have a massive security problem.

      Our entire industry is in damage control mode, has been for over 10 years, and I see no signs of it getting

    • Wait until you see how the power grid is (not) protected ...

  • and watch this [youtube.com].
  • Not so fast (Score:2, Interesting)

    by quonset ( 4839537 )

    The reason the East Coast (specifically the Southeast) might be facing a gas shortage is not because of the ransomware attack, it's because of fat fucks driving fat SUVs [9cache.com] and filling their tank plus gas cans to the brim because they can't walk more than ten feet without getting exhausted and their vehicle only gets 10 miles to the gallon.

    • The whole country is full of fat fucks driving light trucks. That's not especially true on the EC. It's true everywhere.

      The ones in the southeast, specifically florida, need to occasionally stockpile gasoline to run their generators... during storm season. Which is probably what's going on there. Florida is just not suitable for year-round habitation.

  • by jwhyche ( 6192 ) on Tuesday May 11, 2021 @08:41PM (#61374928) Homepage

    But Grandpa Joe's mouth piece just said there is no gas shortage. What am I supposed believe? My own eyes at the gas pumps or what Ol' Good to Go Joe's handlers say?

    • There isn't a gas shortage. There is a distribution failure.

      Further, the same kind of thing can happen to EVs, because our power infrastructure is so generally poorly secured.

      Infrastructure is poorly secured due to the lack of consequences for executives when it is exploited, and that doesn't look to be changing any time soon...

      • by jwhyche ( 6192 )

        Are there lines at the gas pump? Are gas stations running out? It's a gas shortage. Now its caused by a distribution failure but its still a, shortage. Putting a pretty name on isn't going to change what it is.

        • There are localized shortages but they were caused by the belief in a broader shortage, which does not exist. And they are temporary, in that people can only hoard so much gasoline, so the hoarding will stop soon and the localized shortages will end.

          It was much easier for hoarders to cause a long-lasting shortage in TP, because you can stack quite a bit of it up without any special facilities.

1 + 1 = 3, for large values of 1.

Working...