Re: [Full-disclosure] SCADA refresher

2007-12-04 Thread Joey Mengele
Dear I period D period and mailing list, I also am not qualified to comment on this, so here it goes. I don't know shit either, blabla hello electronic mail internets 2007! I AM FAMOUS ON THE FULL DISCLOSURE LOLOLOL! J On Mon, 03 Dec 2007 19:01:40 -0500 I. D. [EMAIL PROTECTED] wrote: Datapac?

Re: [Full-disclosure] SCADA refresher

2007-12-04 Thread gmaggro
I. D. wrote: Datapac? In my experience, there aren't many things left there... of course, I don't work in that industry. I thought most transactions/work took places on other Canadian packet-switched networks. As for south of the border, I know even less. Well it's been 20 years since I

Re: [Full-disclosure] SCADA refresher

2007-12-03 Thread Elazar Broad
This is interesting: http://www.schneier.com/blog/archives/2007/05/scada_security.html About a year ago, Nessus released plugins for testing SCADA systems: http://blog.tenablesecurity.com/2006/12/nessus_3_scada_.html And SANS is always a good resource:

Re: [Full-disclosure] SCADA refresher

2007-12-03 Thread Dude VanWinkle
Also Johnson Controls in 2005 they were busy converting the proprietary BACnet speaking SCADA devices to embedded windows XP, considering NASA and friends run JCI, and there is no good way to update embedded XP (AFAIK) remotely, these systems should be prime targets... Whats an MLP? -JP On Dec

Re: [Full-disclosure] SCADA refresher

2007-12-03 Thread I. D.
Datapac? In my experience, there aren't many things left there... of course, I don't work in that industry. I thought most transactions/work took places on other Canadian packet-switched networks. As for south of the border, I know even less. On Dec 3, 2007 2:51 PM, Dude VanWinkle [EMAIL

[Full-disclosure] SCADA refresher

2007-12-02 Thread gmaggro
Been giving myself a little refresher on SCADA, hope no-one minds the MLP. Stock presentation on SCADA security issues: http://www.blackhat.com/presentations/bh-federal-06/BH-Fed-06-Maynor-Graham-up.pdf Ganesh Devarajan's Defcon presentation was interesting: