they cant say that because it is not fearmongering

While that's technically true, there was still a fear that the attack could spread to the operational tech. Also, it was kind of interesting that they only needed to stop the billing system in order to stop the flow of gas.

@@julianbrown3100 We should look very skeptically at the phrase “there was still a fear that…” because it puts weight behind unsubstantiated fears. If there’s some objective cause to believe that there’s the technical capability to attack the gasoline itself, that’s important. If there’s reason to think they wanted to or were willing to, that’s important. But just treating fears that aren’t connected to reality as if they deserve serious response is how you get wild overreactions and in foreign policy the consequences of that can be extremely bad. Also the fact that the profitability of a private company can cause the loss of crucial infrastructure tells us that we have a critical infrastructure weakness in allowing private profits to carry more than they should. We can build defenses by, for example, having an emergency purchase/sale agreement in place in the event of an emergency. Something that would kick in as soon as the private company loses its ability to provide basic necessities in the ordinary course of business. That way the amount of loss is lessened.

@@twestgard2 It's been quite a while since I looked into this case, but if I remember correctly, there was no microsegmentation to separate the OT from other systems. So, yes, the fear that the attack could spread to the OT was (very much based in reality and) material during Colonial's mitigation and remediation efforts. The threat actors in question ultimately regretted the attack, since it brought too much attention to them. But it would be foolish to think that we could trust in future threat actors' goodwill or good intentions in staying away from critical infrastructure. I'm not usually one to fear-monger but this particular case should serve as a wakeup call - and it did, as we saw from the many, many white house/CISA statements on cybersecurity in critical infrastructure, supply chains, and private enterprise to come out in its wake. Your suggestion for an emergency purchase agreement sounds interesting. I'm not sure if the niggly practicalities would work out, but it could ensure that 'the spice flows.'

@@julianbrown3100 yeah, my point is not that cyber threats don’t exist or aren’t serious. They do exist and they are serious. My point is that our choices about how to build and distribute the critical infrastructure were poorly conceived, in two specific ways: one is that we overly rely on privatization and the required profits of that system are what shut down the system. We can make different choices there, such as an emergency taking when and if the for-profit system fails to function. The second thing is that we concentrate infrastructure in a misguided concept of efficiency, which is the direct opposite of safety redundancy in engineering. The gasoline shortage could only happen because there was one company that was too big to fail and that’s a structural vulnerability that we are building into our own armor. We should break up monopolies as a matter of national security.

I hope it goes well m8

Thank you for your comments..write ✍️ to me👆👆👆

@@justiceperez3087 Thank you for your comments..write ✍️ to me👆👆👆

We can safe humanity by contributing our quarter in protecting our networks and information structure. I’m also an IT student

I am a final year computer science student, I wanted to pick VR development as my specialisation. My brother landed me a trainee position at a cyber security firm, since then, I realised this is my calling. And since then I am paranoid about everything I do on and offline 😂

"we must use the best possible tools to mitigate risks" Yes. And you must develop those tools! Go to work now! You must save the world!

@@21stcenturyscots Yes. I am a developer!

Thank you for your comments..write ✍️✍️ to me👆👆

What is very suspicious is, that neither the governments, nor the police, nor the secret services and most suspicious, that investigative journalists do never identify the cyber criminals nor have them arrested unless it is convenient for them privately and personally.

Thank you for your comments..write ✍️ to me👆👆👆👆

Well that's not entirely true some well designed software can still have bugs/ vulnerabilitys

Thank you for your comments..write ✍️ to me👆👆👆

Simply don't do anything, whatever you do you are in his hands. The more you try to do something the more you encourage him to torture and steal your work.

Write ✍️✍️ to me 👆👆

Cyber security is extremely important without it all modern system will fall

Thank you for your comments..write ✍️ to me👆👆👆👆

🥴🥴🥴

A bs ?

@@davidhiggins2804 how you protect your systems from full-chain, 0-click, 0-day with persistence', kernel code execution attack?