Rob (who should've had a promotion by now to at least Admiral),

It's been a damn long time.

I used to be ticked off that I didn't register for an account until long after I started reading (I could've been a 4-digit!) and I look now at some of the UIDs and think that you've got to be overwhelmed by what you and Jeff put together.

I'm glad you're taking some family time - just don't stay off the internet for too long huh?

And for (really) old time's sake, I notice that there has not yet been a mention of Petrified Natalie Portman or Grits in this article. Consider the oversight fixed.

See ya around.

Master's Thesis on SCADA Sec? Really? Published anywhere?

SCADA security isn't. I'm sorry but it's true. And the entire "security industry" is talking just like all the slashtards commenting.

Doing security right in this environment is non-trivial. The SCADA/ICS vendor community isn't providing it because SCADA/ICS customers aren't asking for it. The downside of course is that the SCADA/ICS customer is NOT the individual who is going to suffer when the screwups happen. The SCADA/ICS vendors and customers have externalized the costs of failure on the general public and no country-scale government is actually doing anything other than paying lip-service to the idea of dealing with aging/insecure infrastructure.

If you want to see more - have a look at the talk I did at DEF CON 18 - it covers the situation nicely.