News for hackers. Stuff that matters.
Re:Hacker increased chemical level at Oldsmar's city water s... by TedDoesntTalk on Monday February 08, 2021 @08:38PM (#26072806)
> Most US tapwater is fantastically clean and drinkable, and doesn't generally need a filter.

It is my understanding that most municipal water utilities only test water quality every 3 months. A problem can come and go between testing cycles.

Even with weekly testing, I’d expect the same risk (there’s still a window between tests). Basically you’re only going to know about a problem when it’s too late.

Re:Hacker increased chemical level at Oldsmar's city water s... by jcranmer on Tuesday February 09, 2021 @01:23AM (#26074489)
Your understanding is incorrect.

It depends on what contaminant you are measuring, but the testing frequency can vary from "every several years" to "continuously monitored and sets off a SCADA alarm if it exceeds a given threshold." The biggies--IIRC, turbidity, pH, and dosages of coagulant and treatment chemicals--are logged every 15 minutes, with more tests happening on hourly 6-hourly, and daily frequencies, followed by yet more contaminants happening largely on monthly or quarterly assessment bases. The issue in question would have shown up in a pH measurement, so there's no reason it shouldn't have been caught within minutes.

Re:Hacker increased chemical level at Oldsmar's city water s... by jaggederest on Monday February 08, 2021 @09:15PM (#26073084)
You also have to look at the success and failure rates of those tests. Most tests reveal no problems, which implies periodic sampling is plenty to handle the rare problems that crop up. If we found more problems, we would demand more testing, but increased testing is pointless if there is no problem to be found. In reverse, if the tests are not specific enough, they can cause issues when you over test due to false positives on the tests.

Indeed, you'll see that if a water test comes back positive, there will be multiple retests and a much greater rate of testing until the problem is abated, at least at my local drinking water board.

Re:Hacker increased chemical level at Oldsmar's city water s... by loeg on Monday February 08, 2021 @09:44PM (#26073294)
> It is my understanding that most municipal water utilities only test water quality every 3 months. A problem can come and go between testing cycles.

This isn't remotely true.

Re:Hacker increased chemical level at Oldsmar's city water s... by TedDoesntTalk on Monday February 08, 2021 @10:13PM (#26073421)
Which part?
Re:Hacker increased chemical level at Oldsmar's city water s... by loeg on Monday February 08, 2021 @11:28PM (#26073874)
The whole of it. You stated that most municipal water supplies aren't monitored for months at a time. This is extremely incorrect. The EPA-mandated quarterly report is a summary, not the entirety of samples collected. It would be dangerous and reckless not to monitor drinking water for months at a time.

E.g., Seattle explicitly states:

> We monitor your water 24 hours a day, 365 days a year. We test samples from the region between 10 and 100 times per day.

https://www.seattle.gov/Documents/Departments/SPU/Services/W... (PDF)

> To ensure the safety of our drinking water, SPU's water quality laboratory analyzes over 20,000 microbiological samples each year (more than 50 a day) and conducts chemical and physical monitoring daily, 365 days per year.

https://www.seattle.gov/utilities/your-services/water/water-...