a speech

[coderman]

On Thu, Apr 10, 2014 at 7:40 PM,  <dan at geer.org> wrote:
>...
>   APT in a World of Rising Interdependence
>   invited address, NSA, 26 March 2014
>   http://geer.tinho.net/geer.nsa.26iii14.txt


another great read Dan!  thanks :)

my only comment, for now:

"""
Five years ago, Kelly Ziegler calculated that patching a fully
deployed Smart Grid would take an entire year to complete, largely
because
of the size of the per-node firmware relative to the available
powerline bandwidth.
"""

this does not take into consideration the "truck roll" option.  it's
the network operator's worst nightmare; an option of last resort.

the majority of smart grid devices i have analyzed contain both
optical and higher speed radio interfaces which may be accessed by a
technician on site or near by.  much more expensive than the slow
trickle broadcast, but to claim a critical fix could be deployed only
via one method is a bit misleading.

p.s. hacking these devices still an undiscovered country!  has your
local utility given you one yet?



best regards,