2017/11/10

This is frightening

http://www.aviationtoday.com/2017/11/08/boeing-757-testing-shows-airplanes-vulnerable-hacking-dhs-says/

"""
The cost to change one line of code on a piece of avionics equipment is $1 million, and it takes a year to implement. For Southwest Airlines, whose fleet is based on Boeing’s 737, it would “bankrupt” them if a cyber vulnerability was specific to systems on board 737s, he said, adding that other airlines that fly 737s would also see their earnings hurt. Hickey said newer models of 737s and other aircraft, like Boeing’s 787 and the Airbus Group A350, have been designed with security in mind, but that legacy aircraft, which make up more than 90% of the commercial planes in the sky, don’t have these protections.
"""

Pretty strong argument for security early in the SDLC

2017/11/07

Holy cow, they stink at security

There is a lot of conjecture in the article about who could be behind all of these attacks. I think that is a little misguided, this early into any investigation. Seems as if ABC News is pushing a particular storyline in this article. Regardless, The Trump Organization really sucks at cybersecurity.


http://abcnews.go.com/Technology/wireStory/ap-finds-hackers-hijacked-195-trump-web-addresses-50931253

"""
Many of the addresses were not being used by Trump. Businesses and public figures commonly buy addresses for possible future use or to prevent them from falling into the hands of rivals or enemies. The Trump Organization and its affiliates own at least 3,300 in all.

According to security experts, the hackers hijacked the addresses by penetrating and altering the domain registration records housed at GoDaddy.com, a seller of web addresses.
"""