Comment Another example of failed U.S. governance (Score 3, Insightful) 47
These attacks prove that leaving individual cities to fend for themselves on the open commercial internet is a complete failure of public governance. The fact that small towns in these states are actively fighting off what U.S. officials believe are foreign, state-sponsored adversaries like Iranian hackers highlights the sheer absurdity of our decentralized approach. Cybersecurity inherently scales; while Fortune 100 companies protect thousands of endpoints for pennies per user using enterprise-grade automation, resource-starved municipalities are forced to survive with tiny budgets and skeleton IT crews.
South Dakota is the only state that endeavors to give a protected network to its municipalities. Five years after Oldsmar Florida exposed this exact vulnerability, we are watching the exact same script play out as utility operators across the country are forced to switch to manual workarounds to keep their treatment plants online. For a fraction of the millions spent reacting to these disruptions, states could easily pool their buying power to build a single, hardened network infrastructure for every municipal utility. The refusal of almost all of our states or the federal government to implement a sane, centralized defense model like South Dakota's means American critical infrastructure remains an open, fragmented playground for cybercriminals.
And an "I told you so": I stated in the first post on this when Minnesota was the only state named that the rest of the states were simply incapable of noticing. Now we have 7 states -- the attacks are likely against all.
South Dakota is the only state that endeavors to give a protected network to its municipalities. Five years after Oldsmar Florida exposed this exact vulnerability, we are watching the exact same script play out as utility operators across the country are forced to switch to manual workarounds to keep their treatment plants online. For a fraction of the millions spent reacting to these disruptions, states could easily pool their buying power to build a single, hardened network infrastructure for every municipal utility. The refusal of almost all of our states or the federal government to implement a sane, centralized defense model like South Dakota's means American critical infrastructure remains an open, fragmented playground for cybercriminals.
And an "I told you so": I stated in the first post on this when Minnesota was the only state named that the rest of the states were simply incapable of noticing. Now we have 7 states -- the attacks are likely against all.