• toast@retrolemmy.com
    cake
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 hours ago

    Foothills…epidemic…cyber frontline

    Must be serious – you don’t mix this many metaphors under normal circumstances.

  • ZoteTheMighty@lemmy.zip
    link
    fedilink
    English
    arrow-up
    9
    ·
    4 hours ago

    People seem to be able to reversed engineer almost anything with AI now, so the notion that “proprietary code is secure code” is becoming obsolete. Major hacks like this are going to be more common with anything on a network.

  • dan1101@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    4 hours ago

    This was inevitable with people connecting things to the internet for convenience instead of security.

    • ɔiƚoxɘup@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      The funniest thing about this is that there’s no way a human can keep up with this increase in cybersecurity flaws and vulnerabilities that are being discovered, but at the same time, there is no parity between cybersecurity defense and attack.

      Regardless of efforts, we’re still going to be in a losing battle for quite a while.

    • frongt@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      They already do. The cheap devices are cheap because their manufacturing cost is subsidized by the ads they show and the data they collect.

  • marxismtomorrow@lemmy.today
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    3 hours ago

    I mean, it’s kinda obvious. But it’s also not a bad thing. No secure system will be affected, because secure systems are designed to be impossible to fail.

    Lots of “secure” systems designed by hacks that took money selling half-cocked nonsense to dumb people will fail, and it’ll probably be revealed there’s trillions of dollars of investment by these dumb people into insecure systems that should outrage everyone.

    • ɔiƚoxɘup@infosec.pub
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 hour ago

      There are literally thousands of water infrastructure facilities that are on Shodan now. I take your meaning, but it’s a very bad thing.

      • marxismtomorrow@lemmy.today
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        1 hour ago

        Exactly my point. Corruption, stupidity, and complacency allowed that to happen despite experts warning for years it was a terrible idea. This isn’t some new threat, the only ‘new’ part of it is democratization of otherwise arcane knowledge. This is like getting mad that a thermite recipe is being passed around. Yeah, some people will do bad things with it, but generally anything that needs to be secure should be built to be secure against it.

        • ɔiƚoxɘup@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          20 minutes ago

          That’s not exactly accurate. The problem is that everything in infrastructure was working just fine, and so they figured they could make it more efficient by reducing the staff. And to do that, they put everything online, so it was controllable by fewer people. And they kept doing that year after year. The funding went down and down and down, and there are literal, uh, literal policies that keep them from switching to better stuff. So it’s much more complex than the way you draw it.

          For example, US water infrastructure would need $2.1 trillion or something around that amount to actually become current and fully repaired.

          Where exactly would that come from? It’s not an easy answer. It’s a much more complex problem. That’s all I’m saying.

          • marxismtomorrow@lemmy.today
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            14 minutes ago

            Where exactly would that come from?

            Well we could start by nationalizing water services so the inefficiencies that are inherent to monopolistic capitalist entities could be eliminated, drastically reducing costs. And we could pay for it over time with some sort of fee… one that might target those that have hoarded over 98% of all wealth produced over the last 50 years which should have gone into infrastructure maintenance and upgrades. We might even, if we’re really clever, directly seize the wealth of the companies that sold these solutions to these water companies given they’ve compromised national security and public health.

            That all would drastically reduce the inflated $2.1 Trillion number which isn’t the actual cost, it is the price for private contractors to do it for the government, to something you could reasonably pay for with the wealth already accumulated or that could be accumulated by actually fairly taxing those that have actively harmed society.

      • marxismtomorrow@lemmy.today
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        1 hour ago

        Implanted medical devices require pretty much skin to skin contact to adjust, the few that do use bluetooth to adjust settings. But yes, it is terrible that we use wireless technology in medical implants. We should, you know, sue the companies that made them knowing they were using naturally vulnerable technology to make them.

        • T. Hex@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          45 minutes ago

          the few that do use bluetooth to adjust settings.

          That may be the intended use, but it does not imply the system is secure.

          Here’s an example of an insulin pump vulnerability from a few years ago that enabled attacks from up to six meters away. Think about how many potentially-compromised devices you’re ever within six meters of. The vulnerability enabled remote control over the insulin pump, which IIUC can be deadly.

          https://www.aha.org/h-isac-reports/2021-11-29-h-isac-tlp-white-vulnerability-report-researchers-identify-high-severity

          My point being — it’s not a good thing to be in the midst of a hacking epidemic! Real people will be harmed as a result of increased hacking.