Viral Video Hoax or Proof of Impending Cyber Apocalypse?
Posted by Russ Ray on May 27, 2009
From Wired’s Threat Level blog:
This video of hackers taking over the lighting controls in an urban skyscraper in order to play the world’s most awesome game of Space Invaders is ominous proof that intruders really are eyeing utility control systems as targets, warns security vendor McAfee. “Perhaps the first demo was just for fun, but the others will have less juvenile goals,” McAfee Avert Labs researcher Francois Paget blogged on Friday. “An attack can involve nationwide damage, a terrible effect on the public’s morale, and huge financial losses.”
Scary talk of intruders cracking SCADA systems to cause power outages and other mayhem has reached a fever pitch over the last year, even as confirmed incidents hover around 1999 levels — i.e., roughly zero. That might make this November 2008 clip an important piece of evidence if it weren’t a complete hoax. “The inspiration was really to take the idea of having a computer game in your living room, and take it up to a really big screen,” says Yves Peitzner, managing director The Brainstormclub, the Munich-based producer of the video. ”It’s been very interesting to read the discussion on all the different blogs and websites … There are some people who really think this is real.” Two different Munich buildings were shot for the video, and the terrific Space Invaders game play was added in post-production, says Peitzner.
To be fair, McAfee’s Paget acknowledged some doubts “about the technical aspects of these light-show ‘attacks’ on unprepared buildings.” But with the enthusiastic faith of cybarmageddonists everywhere, he boldly asserts that it doesn’t matter if the video is genuine. “Fake or not, the video confirms that hackers and cybercriminals have got their eyes on SCADA networks.”
I think that what the video highlights most is the complete and utter lack of physical security that most of these utility control systems have. It may be one thing to have firewalls and other software installed to prevent a hack, but if you’re going to leave the barn door unlocked, you’re inviting someone to steal all the horses.
If you don’t think that this could have an impact, see this related article on how a software bug contributed to the largest blackout in history in 2003. August is a heck of a lousy time to lose power, given our modern reliance on air conditioning. See also Hurricane Katrina and its after-effects.
