Post AUaCIgtZiExFUnFdgW by kimzetter@infosec.exchange
(DIR) More posts by kimzetter@infosec.exchange
(DIR) Post #AUaCIgtZiExFUnFdgW by kimzetter@infosec.exchange
2023-04-12T13:52:16Z
1 likes, 1 repeats
Two years ago on Super Bowl weekend in Tampa Bay, a Florida sheriff and city manager held a press conference to tell the world that hackers had penetrated the city's water control system and increased the lye to a dangerous level. "Somebody hacked into the system. Not just once, but twice and controlled the system, took control of the mouse.," the sheriff told reporters. For the next two years media outlets tried to get an update on the case but the sheriff, the city, and the FBI would only say the investigation was ongoing. Now it turns out that the FBI had in truth concluded its investigation within four months of the incident and determined that no hack had occurred and that likely a city worker had mistakenly altered the level of lye. But no one bothered to tell the public or give reporters the update they had been seeking. https://www.wfla.com/8-on-your-side/employee-error-oldsmars-water-system-wasnt-hacked-former-city-manager-says/
(DIR) Post #AUaQ1KopwCLjSieYRk by djsumdog@djsumdog.com
2023-04-12T20:06:56.016135Z
0 likes, 0 repeats
I had totally forgotten about this story.I mean... unless those types of safeguards were requirements in the original software, I can see how those types of checks wouldn't be added in. There's going to be that disconnect between the civil engineers and software engineers unless they're both working for the city. Likely one was a contractor.
(DIR) Post #AUaQoamdN3DlAH6v0y by djsumdog@djsumdog.com
2023-04-12T20:15:32.329490Z
0 likes, 0 repeats
true, or at least there should be secondary, completely independent checks further down the pipe (which I suspect there were; probably how it was caught?) :blobcatshrug: