Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:What took them so long? (Score 4, Informative) 212

The article tells us that "...hackers managed to access production networks..." The question is, why was this allowed?

When I was in university we wrote an optimizer in "Operations Research" for a still-mill as a practise which determined optimum cutting lengths of steel 'bars' based on customer orders.

Orders probably arrive in the office network. I can well understand people don't want to walk with a USB stick (if that would survive the environment at all) from their office to the plant to feed instructions into the industrial control units. So probably some network connection was introduced and thought to be sufficiently secured. And then the Windows on the "safe" side was never updated because it couldn't connect to the internet anyway. Wind forward 10 years and you have a Windows full of completely unimaginable holes (which are easy to exploit because Windows is the same everywhere) which is indirectly accessible from the internet.

Comment English translation (Score 4, Informative) 212

Translation to English to the best of my abilities:

3.3 Incidents in private enterprises
In contrast to governmental offices there is no duty up to now for private companies to report grave security incidents to the BSI.
[.... ]
3.3.1 APT attacks on plants in Germany
Issue
Targeted attack on a steal plant in Germany
Method
Using spear-phishing and advaced social engineering the attackers gained initial access to the office network of the plant. From there they gradually penetrated into the production networks.
Damage
Failures of individual control units or complete facilities occured increasingly. The failures prevented the controlled shut down of one blast furnance and brought it into an undefined state. As a result the facility sustained heavy damage.
Targets
Operators of plants
Technical capabilites
The attackers showed very advanced technical capabilities. Several different internal systems up to industrial components were compromised. The know-how of the attackers did not only cover IT-security very thoroughly but also included detailed technical knowledge on the running industrial control units and production processes.

Comment Re:Science, bitches, that's *how* it works! (Score 1) 197

Actual science can some time feel "weird" and defy logic, because it defies the monkey-brain logic. - e.g.: the sum of all positive integer is a negative fraction)

You do thoroughly prove that by the numbers.

This has nothing to do with monkey-brain logic but with you either not reading or not understanding related wikipedia articles. E.g. this article clearly says "A summation method can be seen as a function from a set of sequences of partial sums to values."

Thus your 1+2+3+4+....'='-1/12 'non-monkey-brain science' actually says that if you apply a certain function (other than standard summation) to map a divergent series to a number that number will be -1/12. Or, to say it in another way, a nice pasttime for mathematcians wanting to classify (not solve) series.

But unless you also want to claim that -1/12=infinity that number is definitely not "the sum of all positive integer".

Comment Re:Foolish (Score 1) 44

Yes, but with collecting and processing data from the internet the attacker opens himself for attacks. Or how bug-free is the analysis software.
And once you go illegal it becomes difficult to sue counter-attackers. "Intrusion into government computers" might look strange on a warrant if the perpetrator claims he just shut down a C&C server.

Comment Re:Biased summary (Score 4, Informative) 282

The arbitrary requirements you linked are to be allowed to use buslanes and taxi parking spaces in Amsterdam not to be a taxi driver in the Netherlands (it explicitely says that taxi drivers from outside Amsterdam are still allowed to drive into and out of Amsterdam without the "Taxxxivergunning"). So how about some information on the real requirements? Another page on the same site you linked mentions e.g. the "regels van de Wet Personenvervoer 2000" but my Dutch is not the best.

At least in Germany the "proper credentials" do include e.g. a special driver license which includes a medical analysis, a police clearance, a check of the driving penalty points registry, check of local knowledge, ... .

Comment Re:Veteran Intelligence Professionals for Sanity (Score 1) 205

> it would be interesting to learn more about the people involved and their backgrounds

You mean the authors? Russian KGB.

Note the section about Russian "shock and awe". They couldn't abstain from hurling only lightly veiled threats even when faking a letter from US intelligence. It happens if you select people based on common school education instead of competency.

Comment Re:Sue police department, this is routine procedur (Score 1) 463

Therefore I think it may be correct that the police department that established the dangerous policy is held responsible. I don't see any serious crime commited by this particular officer, based on the facts available.

May I suggest a bit more than the police department's procedures be changed? Like U.S. laws?
German traffic law (StVO) says about special rules (my translation)

35 Special rights
(1) Excempt from these regulations are the following: Army, Federal Police, Emergancy Services, .... , State Police, ...., as far as urgently necessary to fulfill their tasks.
.....
(8) These special rights may only be used if public safety and order are sufficiently respected.

As the completly innocent dead byciclist shows the officer did not sufficiently respect public safety, so according to German law he would not get off.
Conclusion: Change your laws!

Submission + - Does U.S. police need an FPS ... to learn to incapacitate?

WoOS writes: When armchair-generaling the shootings in Ferguson and St. Louis one wonders why the policeman didn't simply shoot their gun-less opponents in the leg, moved some steps away and wait. Especially when a seemingly NRA-sponsered study on stopping power says "In a certain (fairly high) percentage of shootings, people stop their aggressive actions after being hit with one round regardless of caliber or shot placement."
Since I would assume police officers are sufficiently trained to hit a leg from 3 yards away, I can only conclude that they panicked due to being in an unknown situation not knowing how to use their only tool (their gun) to incapacitate. Looks to me like a business opportunity for a modding team to sell a FPS to the police where you loose if you kill instead of incapacitate.

Comment Re:The ruling CCP is very desperate these days. (Score 1) 167

If you really are Chinese, I think you are deluding yourself. Why? Simply because what you write and how you write it sounds like propaganda. Some things might be true, but you make it sound the Chinese government is about to fall in a few months. I would guess even in a worst case scenario (for them) they will hold out for years to come given the fact they have a garnered a lot of public goodwill (within China) with their improvement of the economics.

Don't fall for the propaganda of the Chinese government but neither fall for the propaganda of some exile groups. Those too have proven wrong before.

Comment Re:Boo (Score 1) 163

Or to say it in a different way:

The hands-on detection on the steering wheel is there for a reason. The reason is that drivers might not read the manual telling them about all the dangers of letting the car drive without human supervision. Reading the manual is not something the car manufacturer can force people to do.

But by manipulating the hands-on detection the driver shows that he had understood the car's restrictions but willingly circumvented it. If there is an accident, it will be thus the driver who will be charged with negligent homicide, not the car manufacturer.

Comment Re:Meh (Score 2) 90

> if such an algorithm existed, you could run it repeatedly on a data source until you were down to a single bit.

Ah, but you are not describing universal lossless compression but universal lossless compression with a guaranteed compression ratio of better than 1:1.
That indeed isn't possible but I can't see it claimed in TFA.

Comment Munich did it already (Score 3, Interesting) 296

Munich decided to move completely to Linux (so not only from MS Office on MS Windows to LibreOffice on MS Windows) 10 years ago and managed to complete the move last year. One of the main complaints of users seems to be lack of compatibility when exchanging documents with the MS world.
Now if more cities move to Open/LibreOffice, companies trading with them might have to produce more compatible documents and MS might finally loose its compatibility "strangle" on its user.

Slashdot Top Deals

UNIX is hot. It's more than hot. It's steaming. It's quicksilver lightning with a laserbeam kicker. -- Michael Jay Tucker

Working...