[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Full-Disclosure] east coast powergrid / SCADA [OT?]



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>

<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">


<meta name=Generator content="Microsoft Word 10 (filtered)">
<title>RE: [Full-Disclosure] east coast powergrid / SCADA [OT?]</title>

<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:blue;
	text-decoration:underline;}
p
	{margin-right:0in;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman";}
span.EmailStyle18
	{font-family:Arial;
	color:navy;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=EN-US link=blue vlink=blue>

<div class=Section1>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><a
href="http://www.pbs.org/wgbh/pages/frontline/shows/cyberwar/view/";>http://www.pbs.org/wgbh/pages/frontline/shows/cyberwar/view/</a></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>PBS Video</span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br>
<b><span style='font-weight:bold'>From:</span></b>
full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com] <b><span style='font-weight:
bold'>On Behalf Of </span></b>Kane Lightowler<br>
<b><span style='font-weight:bold'>Sent:</span></b> </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>Thursday,
 August 14, 2003</span></font><font size=2 face=Tahoma><span style='font-size:
10.0pt;font-family:Tahoma'> </span></font><font size=2 face=Tahoma><span
 style='font-size:10.0pt;font-family:Tahoma'>9:06 PM</span></font><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'><br>
<b><span style='font-weight:bold'>To:</span></b> 'Andre Ludwig'; 'KF'<br>
<b><span style='font-weight:bold'>Cc:</span></b>
'full-disclosure@lists.netsys.com'<br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: [Full-Disclosure]
east coast powergrid / SCADA [OT?]</span></font></p>

<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>&nbsp;</span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>I Caught the PBS doco, thought it was quite
interesting.</span></font> <br>
<font size=2><span style='font-size:10.0pt'>I got the secion on the power grid
&amp; SCADA systems online if anyone is interested</span></font> <br>
<font size=2><span style='font-size:10.0pt'><a
href="http://scooby.oranged.to/cyberwar/4_hi.mov"; target="_blank">http://scooby.oranged.to/cyberwar/4_hi.mov</a></span></font>
</p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Enjoy</span></font> </p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Kane</span></font> </p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>-----Original Message-----</span></font> <br>
<font size=2><span style='font-size:10.0pt'>From: Andre Ludwig [<a
href="mailto:ALudwig@Calfingroup.com";>mailto:ALudwig@Calfingroup.com</a>] </span></font><br>
<font size=2><span style='font-size:10.0pt'>Sent: </span></font><font size=2><span style='font-size:10.0pt'>Friday, 15 August 2003</span></font><font
size=2><span style='font-size:10.0pt'> </span></font><font
 size=2><span style='font-size:10.0pt'>10:15 AM</span></font> <br>
<font size=2><span style='font-size:10.0pt'>To: 'KF'</span></font> <br>
<font size=2><span style='font-size:10.0pt'>Cc:
'full-disclosure@lists.netsys.com'</span></font> <br>
<font size=2><span style='font-size:10.0pt'>Subject: RE: [Full-Disclosure] east
coast powergrid / SCADA [OT?]</span></font> </p>

<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>&nbsp;</span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>It is my general feeling that the power failure could
be SCADA related.&nbsp; If it was an attack or an accident i do not know, nor
do i think the appropriate information will ever be released to the
public.&nbsp; Allot of SCADA systems from my research do RUN MS software (from
win95 all the way up to win2000), granted these are not full fledge systems but
stripped down machines with some functionality disabled.&nbsp; I have found out
that RPC is used on several SCADA systems, to what extent i do not know, nor do
i know if they are vulnerable to the recent rash of RPC based exploits.&nbsp;
If someone with more knowledge on these systems can please come forward i would
greatly appreciate it. </span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Did anyone watch the PBS cyber war series that was on
months ago?&nbsp; I remember Richard Clarke ranting about possible SCADA
attacks on the power grid. If anyone has more info please do come forward as
this is a rather interesting subject matter.</span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Andre Ludwig, CISSP</span></font> </p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>-----Original Message-----</span></font> <br>
<font size=2><span style='font-size:10.0pt'>From: KF [<a
href="mailto:dotslash@snosoft.com";>mailto:dotslash@snosoft.com</a>]</span></font>
<br>
<font size=2><span style='font-size:10.0pt'>Sent: </span></font><font size=2><span style='font-size:10.0pt'>Thursday, August 14, 2003</span></font><font
size=2><span style='font-size:10.0pt'> </span></font><font
 size=2><span style='font-size:10.0pt'>3:54 PM</span></font> <br>
<font size=2><span style='font-size:10.0pt'>To:
full-disclosure@lists.netsys.com</span></font> <br>
<font size=2><span style='font-size:10.0pt'>Subject: [Full-Disclosure] east
coast powergrid / SCADA [OT?]</span></font> </p>

<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>&nbsp;</span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Anyone wanna comment on SCADA and the &quot;cascading
failure&quot; that happened </span></font><br>
<font size=2><span style='font-size:10.0pt'>today in the north east, like
potential for a similar outage from a </span></font><br>
<font size=2><span style='font-size:10.0pt'>&quot;cyber based&quot; attack,
etc? </span></font></p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>Sorry ... I need to read about something other than
blaster before I go </span></font><br>
<font size=2><span style='font-size:10.0pt'>insane. =]</span></font> <br>
<font size=2><span style='font-size:10.0pt'>-KF</span></font> </p>

<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>_______________________________________________</span></font>
<br>
<font size=2><span style='font-size:10.0pt'>Full-Disclosure - We believe in it.</span></font>
<br>
<font size=2><span style='font-size:10.0pt'>Charter: <a
href="http://lists.netsys.com/full-disclosure-charter.html"; target="_blank">http://lists.netsys.com/full-disclosure-charter.html</a></span></font>
<br>
<font size=2><span style='font-size:10.0pt'>_______________________________________________</span></font>
<br>
<font size=2><span style='font-size:10.0pt'>Full-Disclosure - We believe in it.</span></font>
<br>
<font size=2><span style='font-size:10.0pt'>Charter: <a
href="http://lists.netsys.com/full-disclosure-charter.html"; target="_blank">http://lists.netsys.com/full-disclosure-charter.html</a></span></font>
</p>

</div>

</body>

</html>
<HTML><BODY><BR>
CONFIDENTIALITY: This e-mail and any attachments are confidential and may be privileged. If you are not a named recipient,please notify the sender immediately and do not disclose the contents to another person, use it for any purpose or store or copy the information in any medium.  <BR>
</BODY>