News for hackers. Stuff that matters.
Re:‘Zero-click’ hacks are growing in popularity by skybrian on Saturday February 19, 2022 @12:10PM (#30398604)
Both attacks and defenses have gotten a lot better. Meanwhile, the consequences of hacks keep going up every year. You didn't have viruses disrupting shipping or gas pipelines before, because they didn't depend as much on computers.
Re:‘Zero-click’ hacks are growing in popularity by ReptileMan on Saturday February 19, 2022 @01:07PM (#30399085)
You have to be a special kind of naive to not have such infrastructure behind airgap.
Re:‘Zero-click’ hacks are growing in popularity by dreamcompiler on Saturday February 19, 2022 @06:11PM (#30401428)
There are a number of organizations out there who think they are airgapped. And then some employee in the basement decides he needs to run a test while he's on the road, or monitor the water treatment plant from home because he's been exposed to COVID and can't come in, so he gets his buddy to install an LTE hotspot and boom! Now the company's not airgapped any more.

It's a special kind of naive to assume that airgapping is a technological problem rather than a human behavior problem.

Re:‘Zero-click’ hacks are growing in popularity by unionpivo on Saturday February 19, 2022 @02:27PM (#30399739)
> You have to be a special kind of naive to not have such infrastructure behind airgap.

Most of it is not behind air gap. And unless things get a lot worse it wont be.

Proper air gaping is hard, expensive and pain in the ass, on the ongoing basis.

That's why almost none does it. Not even most military systems are air gaped.

Re:‘Zero-click’ hacks are growing in popularity by bsder on Saturday February 19, 2022 @09:01PM (#30402540)
You cannot assume "airgap" for any reason--that will eventually fail.

Systems need to work assuming that they are bathed in a hostile environment at all times.

Re:‘Zero-click’ hacks are growing in popularity by toss1 on Saturday February 19, 2022 @03:12PM (#30400085)
Yup.

And yet in most organizations, airgapping is an alien concept. Even for machine tools that could kill someone.

Security vs convenience...

Re:‘Zero-click’ hacks are growing in popularity by freshpots on Saturday February 19, 2022 @05:50PM (#30401273)
Airgapping didn't stop Stuxnet.