News for hackers. Stuff that matters.

A comment on Rise of "forever day" bugs in ICS threatens critical infrastructure.

Re:Rise of "forever day" bugs in ICS threatens critical infr... by Retric on Monday April 09, 2012 @10:29PM (#3820378)
As long as these things don't have a wide adoption or a public facing IP address I don't see the problem. I mean plenty of company's have an windows NT box inside their network running some internal service that nobody want's to pay to upgrade.

At some point it's ok to say if a bank robber is inside the vault with a crow bar, then yea they have access to everyones safety deposit boxes. But, let's just try and keep them out of that room.

[ Parent | on HN ]
Re:Rise of "forever day" bugs in ICS threatens critical infr... by sakai on Monday April 09, 2012 @11:07PM (#3820460)
The problem with that analogy (and ICS in general) is that indeed the bank robber is outside the bank with a crow bar most of the time (harmless enough), but the safety deposit boxes are poking through the back wall into the alley.

The archaic, closed nature of these systems (and their small user bases and tremendously long refresh cycles) is precisely the source of their vulnerabilities, not a fount of "security through obscurity."

[ Parent | on HN ]