Showing posts with label ics. Show all posts
Showing posts with label ics. Show all posts

Friday, April 15, 2022

It really was a pipe dream

from here and here

I'm sure it took a lot of time, money, and effort to develop Pipedream, and now it seems it was all for naught because everyone got advanced warning about it.

I suppose my feelings on the matter could best be summed up as:


Watch on YouTube

Monday, February 15, 2021

Sharing isn't caring when it comes to passwords

from here

If I had to guess what the one key failure in the recent water treatment plant intrusion was, it would be that there was just one password shared by everyone. It wasn't the out of date operating system that let them remotely access the system, nor the lack of a firewall. There was and is a legitimate need to be able to monitor and control the system remotely and by all indications the perpetrator simply logged in with the same password as a legitimate user, which means it could be an actual employee or ex-employee, but the shared password makes it difficult to determine who and also difficult to revoke access when people leave because you have to inform everyone of the new shared password.