Hackers and the US Power grid

[Jason Wright]

On Fri, Nov 9, 2012 at 11:20 PM, Chip Fetrow <tacos at fetrow.org> wrote:

> Well, you are never going to get me to think that government ownership of
> power companies is a good idea.
>
> Of course, the government could issue a regulation, or the legislators
> (state or federal) could pass a law to fix this issue.
>
> I believe we will be hacked, a huge power failure will result and one of
> two things will result:
>
> 1:      These idiots will clean up their act.
>
> or
>
> 2:      The government will step in and force them.
>
>
There are regulations in place, but they are typical government
regulations: ambiguous and out dated when written. The NERC CIP standards
have compliance penalties of significant weight, however, the asset owners
spend an inordinate amount of time trying to redefine the NERC CIP
boundaries on their networks. ie. If the boundary only applies to this one
computer, then I will secure it and leave the rest of the network as I
found it. Every standard is a game of "let's  what we can not do and still
comply".

Also, NERC only applies to electrical stuff.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://amrad.org/pipermail/tacos/attachments/20121110/f1a36899/attachment.html>