News for hackers. Stuff that matters.

A comment on US passes emergency waiver over fuel pipeline cyber-attack. Parent comment

Re:US passes emergency waiver over fuel pipeline cyber-attack by chiph on Sunday May 09, 2021 @09:59PM (#27101906)
It was intended to be airgapped, but we're talking about a pipeline that is several thousand miles long, with many pumping stations and delivery terminals. All it would take is one of the SCADA systems at one of those locations to suddenly open a valve and dump petroleum out into the environment to cause a disaster.

Or worse - rapidly open & close valves in rhythm, and the water hammer effect (the inertia of the petroleum in the pipeline) would cause the pipeline to destroy itself. The repair costs would be astronomical - you'd naturally have to repair the damaged sections, but then also re-test all the welds to see if any had been weakened by the pressure pulses.

[ Parent | on HN ]
Re:US passes emergency waiver over fuel pipeline cyber-attack by rckoepke on Sunday May 09, 2021 @10:22PM (#27102037)
It was not intended to be air-gapped. These systems generally communicate to business layers through firewalls.

Onion-layer security rather than air gaps. Communication through the firewall isn't supposed to allow control over the valves, but it does communicate both ways (TCP/IP). This is the general practice in petrochemicals, at any rate.

[ Parent | on HN ]
Re:US passes emergency waiver over fuel pipeline cyber-attack by WalterBright on Sunday May 09, 2021 @10:41PM (#27102153)
In airplanes, this is dealt with by having an independent system monitoring things.

Think what would happen if the autopilot suddenly went berserk and did a hardover.

[ Parent | on HN ]