Computer systems used to control federal prison facilities are riddled with vulnerabilities that might allow criminals to meddle with cell door opening mechanisms or shut down internal communications systems, according to security researchers. The vulnerabilities – which stem from flaws in industrial control systems and …
>all of the cells on death row popped open
Well, it IS correcting a mighty mistake: that they are still alive.
I smell a movie script
Sounds like a Colin Farrell number to me. Assuming he sobers up.
Brings a whole new meaning to the term ...
I think you mean a whole OLD meaning to the term "jailbreak".
I think (s)he means
the jail is broken, as opposed to braking out of the jail.
This would, in fact, be a new meaning.
I'm sorry... REMOTELY?
Why is "mission critical" stuff not a locked down private system with zero outside world connection?
Why is it not locked down? Because then the vendor couldn't use LogMeIn and a very simple shared password to connect in when there's a problem. Couldn't expect the poor dears to have to send a field tech out now could you?
Remote connections are ...
...often included in the spec by management so they can see what is happening remotely. And they often don't want to spend the cash on a hardware firewall.
They develop a hack that can remotely open prison doors and all they can think of to do with it is warn the prisons? No rescuing political prisoners? No helping billionaire banking criminals escape justice in exchange for fat stacks of cash? No creating a doomsday virus that simultaneousness frees serial killers and disables power plants at midnight January 1, 2012?
So why are prison SCADAs accessible from the internet?
Just wondering. Is some guy back at the Bureau of Prisons looking at display that tells him that cell block D at such-and-such prison now has cell doors unlocked because its time for lunch? And if so, why?
Sounds like these systems should be locked down and not accessible.
Of course, all it takes is a couple of key controlled, mechanical switches in place and you can cut these vulnerabilities right down.
Why am I not in the least surprised by this?
Could it be there is some form of pattern here?
Use Linux or QNX
Or even VXWorks. This isnt a job for shit.
'Why is "mission critical" stuff not a locked down ...'
I guess its just not an open-and-shut-case as some may think ...
New social media app: Friend-a-con?
Aww, he looks hot.
I think we should let him out.
I though John Leyden was English. Why can't he spell gaol?
Still the hackers best friend.
But as others pointed out some key switches wired *directly* to the mains comm link circuits would stop a lot of this. In principal. If the jail did not leave it *permanently* switched on of course.
BTW A jail break assisted by hacking the jails security systems is a kick off event in the film version of Tom Clancy's "Netforce."
Of course at the time it looked absurd because (to me) it seemed obvious that IRL no one would *really* be that dumb. That kind of stupidity could only happen when an author needs to move the story along in a hurry.
This potential clusterf**k is brought to you by the words "cheap", "convenient" and "simple".
Thank God it's not an Apple system...
"Not that big of a deal. You're holding your prisoners wrong."
"Traced to a power surge"
Eh? That might wash on Star Trek, but not in proper engineering. This is the real world, and power surges happen. If this kit can't handle that, then this was actually traced to "piss-poor engineering that couldn't cope with a standard use case".
Brave to go public
How long before this guy find himself in those cells of the back of this?
Just STFU about it, and fix it FFS !!
Why wobble here about it. Get the bloody thing fixed, STAT.
- Updated Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
- Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
- Android engineer: We DIDN'T copy Apple OR follow Samsung's orders
- Microsoft: Windows version you probably haven't upgraded to yet is ALREADY OBSOLETE
- Oz bank in comedy Heartbleed blog FAIL