RE: [Full-Disclosure] Al Qaida claims responsibility for blackout

[Andre Ludwig <ALudwig@Calfingroup.com>]

Just to add to the deluge of articles that should be driving the point home.

http://straitstimes.asia1.com.sg/world/story/0,4386,205339,00.html

"Industry officials said that during the second half of last year, 60 per
cent of the country's power and energy companies experienced hacking
attacks. None was successful."


So don't simply dismiss the theories that we  have brought to light simply
because you think that "they" don't have the intelligence to do these
things.

All warfare is based on deception. Hence, when able to attack, we must seem
unable; when using our forces, we must seem inactive; when we are near, we
must make the enemy believe we are far away; when far away, we must make him
believe we are near. Hold out baits to entice the enemy. Feign disorder, and
crush him.
-Sun Tzu 



Andre Ludwig, CISSP


-----Original Message-----
From: Michael Scheidell [mailto:scheidell@secnap.net]
Sent: Wednesday, August 20, 2003 1:58 PM
To: Geoff Shively
Cc: Drew Copley; full-disclosure@lists.netsys.com
Subject: Re: [Full-Disclosure] Al Qaida claims responsibility for
blackout


> I particularly like this:
> 
> http://www.foxnews.com/story/0,2933,95049,00.html
> "In the entire history of FirstEnergy, FirstEnergy spokesman Todd
Schneider
> said there hasn't been an outage of any system due to hackers, and that
that
> the weather in northeastern Ohio did more damage.

In light of this:

"The Slammer worm penetrated a private computer network at Ohio's
Davis-Besse nuclear power plant in January and disabled a safety
monitoring system for nearly five hours, despite a belief by plant
personnel that the network was protected by a firewall, SecurityFocus has
learned. "

see: http://www.security-focus.com/news/6767

-- 
Michael Scheidell, CEO
SECNAP Network Security, LLC 
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html