RE: [Full-Disclosure] east coast powergrid / SCADA [OT?]

[Andre Ludwig <ALudwig@Calfingroup.com>]

It is my general feeling that the power failure could be SCADA related.  If
it was an attack or an accident i do not know, nor do i think the
appropriate information will ever be released to the public.  Allot of SCADA
systems from my research do RUN MS software (from win95 all the way up to
win2000), granted these are not full fledge systems but stripped down
machines with some functionality disabled.  I have found out that RPC is
used on several SCADA systems, to what extent i do not know, nor do i know
if they are vulnerable to the recent rash of RPC based exploits.  If someone
with more knowledge on these systems can please come forward i would greatly
appreciate it. 

Did anyone watch the PBS cyber war series that was on months ago?  I
remember Richard Clarke ranting about possible SCADA attacks on the power
grid. If anyone has more info please do come forward as this is a rather
interesting subject matter.

Andre Ludwig, CISSP

-----Original Message-----
From: KF [mailto:dotslash@snosoft.com]
Sent: Thursday, August 14, 2003 3:54 PM
To: full-disclosure@lists.netsys.com
Subject: [Full-Disclosure] east coast powergrid / SCADA [OT?]


Anyone wanna comment on SCADA and the "cascading failure" that happened 
today in the north east, like potential for a similar outage from a 
"cyber based" attack, etc? 

Sorry ... I need to read about something other than blaster before I go 
insane. =]
-KF

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html