Perhaps of relevance here. APT in a World of Rising Interdependence invited address, NSA, 26 March 2014 http://geer.tinho.net/geer.nsa.26iii14.txt --dan
On Thu, Apr 10, 2014 at 7:40 PM, <dan@geer.org> wrote:
... APT in a World of Rising Interdependence invited address, NSA, 26 March 2014 http://geer.tinho.net/geer.nsa.26iii14.txt
another great read Dan! thanks :) my only comment, for now: """ Five years ago, Kelly Ziegler calculated that patching a fully deployed Smart Grid would take an entire year to complete, largely because of the size of the per-node firmware relative to the available powerline bandwidth. """ this does not take into consideration the "truck roll" option. it's the network operator's worst nightmare; an option of last resort. the majority of smart grid devices i have analyzed contain both optical and higher speed radio interfaces which may be accessed by a technician on site or near by. much more expensive than the slow trickle broadcast, but to claim a critical fix could be deployed only via one method is a bit misleading. p.s. hacking these devices still an undiscovered country! has your local utility given you one yet? best regards,
Thanks for the note and the compliment. I took Kelly Ziegler at her word (*) given that her role as an executive at NERC (Northamerican Electric Reliability Corporation). --dan (*) https://www.usenix.org/conference/usenixsecurity10/grid-phd-smart-grid-cyber...
On Sun, Apr 13, 2014 at 09:46:32PM -0400, dan@geer.org wrote:
Thanks for the note and the compliment.
I took Kelly Ziegler at her word (*) given that her role as an executive at NERC (Northamerican Electric Reliability Corporation).
--dan
(*) https://www.usenix.org/conference/usenixsecurity10/grid-phd-smart-grid-cyber...
I would advise any cypherpunk that wants to keep their lights on to invest in a 48VDC system with (partial) battery backup. If your solar installer starts blathering about AC and inverters and batteries costing too much, get a new installer, or help me build some open-source hardware grid-tie inverters. If you have a say 5KW system, installers will try to sell you batteries to back up the entire 5kw. You only need a few hundred watts (and maybe 1 kilowatt-hour) of batteries. If you do it this way, it will cost less than buying electricity for the next 30 years. If there is a high-profile hack of some power grid device and utilities have to do a 'truck roll' to patch some magic utility box, then your solar payback time will probably drop to 5 years because you have to pay for the utilities insecurity.
participants (3)
-
coderman
-
dan@geer.org
-
Troy Benjegerdes