full-disclosure - Re: SCADA StrangeLove 30C3 releases: all in one

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAJVRA1RKyQ54xGegDE0+cVceWkpx7PN9DYT86JLKAtACnboOxg@mail.gmail.com>
Date: Sat, 4 Jan 2014 16:47:08 -0800
From: coderman <coderman@...il.com>
To: scadastrangelove <scadastrangelove@...il.com>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: SCADA StrangeLove 30C3 releases: all in one

On Sat, Jan 4, 2014 at 3:35 PM, scadastrangelove
<scadastrangelove@...il.com> wrote:
> ...
> ICS/SCADA/PLC Google/Shodan Cheat Sheet
> THC Hydra with Siemens S7-300 support
> Slides and video from SCADA Strangelove 2 talk.
> "A Hacker Disneyland" by @ygoltsev and @arbitrarycode
> "Firebird/interbase database engine hacks" by @GiftsUngiven
>
> http://scadastrangelove.blogspot.co.at/2014/01/30c3-releases-all-in-one.html#more

i'm waiting for the day Parastoo starts using these methods.  right
now their cyber vector appears limited to cutting fibers...

http://cryptome.org/2014/01/parastoo-pge-metcalf.htm

what disturbs me most is that despite wide spread and persistent
vulnerabilities in our critical infrastructure, there is nothing more
than token security efforts applied this last decade. (except the
security applied to keeping infrastructure information secret - a lot
of money spent trying to get that cat back in the bag...)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/