Slashdot Log In
Greek Hackers Target CERN's LHC
Posted by
ScuttleMonkey
on Fri Sep 12, 2008 04:18 PM
from the try-try-again dept.
from the try-try-again dept.
Doomsayers Delight writes "The Telegraph reports that Greek hackers were able to gain momentary access to a CERN computer system of the Large Hadron Collider (LHC) while the first particles were zipping around the particle accelerator on September 10th. 'Scientists working at CERN, the organization that runs the vast smasher, were worried about what the hackers could do because they were "one step away" from the computer control system of one of the huge detectors of the machine, a vast magnet that weighs 12,500 tons, measuring around 21 meters in length and 15 meters wide/high. If they had hacked into a second computer network, they could have turned off parts of the vast detector and, said the insider, "it is hard enough to make these things work if no one is messing with it."'"
Related Stories
[+]
Science: Awesome Pics of CERN's Large Hadron Collider 249 comments
mactard submitted a collection of insanely beautiful pictures of the Large Hadron Collider. I've always had a warm place for amazing photgraphs, and these really don't disappoint. Science really is beautiful sometimes.
[+]
Science: Large Hadron Collider Goes Live September 10th 409 comments
Naznarreb writes "CERN announced today that the first attempt to circulate a beam through the Large Hadron Collider will be on September 10th, 2008. You can read the press release here. They also announced the event will be webcast live. According to the release, they're just planning to run a few tests laps, not smash any particles, so the world won't be ending quite yet." And despite that September 10th date, according to the BBC, "On 9 August, protons will be piped through LHC magnets for the first time."
Firehose:Greek Computer Hackers at CERN's LHC by Anonymous Coward
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Why is that even possible? (Score:5, Insightful)
Why can anyone get to the control systems for a piece of equipment like that from the internet?
Re:Why is that even possible? (Score:5, Funny)
security updates?
Parent
Re:Why is that even possible? (Score:5, Insightful)
Unfortunately, it's not always that simple. Sure, there may be a few universities that have secure leased lines running to CERN, but, given the prominence of the LHC, there are sure to be researchers not from those universities who want to run LHC experiments. Cutting off those researchers simply because they're at the wrong institution doesn't seem fair.
Parent
Re:Why is that even possible? (Score:5, Funny)
Vista needs to phone home for activation.
Parent
Re:Why is that even possible? (Score:5, Funny)
Yeah, right, as if the LHC has enough horsepower to run Vista!
Parent
Re:Why is that even possible? (Score:5, Funny)
Parent
Re:Why is that even possible? (Score:5, Informative)
I know you are being funny, but CERN uses Scientific Linux. [scientificlinux.org]
Parent
Re:Why is that even possible? (Score:5, Informative)
These things are internet connected in order to allow on-call technicians and facilities management to check/fix it remotely. All big machines work like this. Everyone claiming that it shouldn't be connected to the internet has never worked with a machine like this (PS: I have).
Seriously, we need to stop the hysteria over this. It's not like you're presented with a "destroy the world" button when you log in!
No, you'll land at a bash prompt. And then what? You won't know the commands necessary to get to the control system software, and, even if you did, you'd only be able to randomly tinker with magnets. This will either have no effect whatsoever, or will be prevented by the machine protection system.
The worst you can do is to interrupt operation for a while while they kick you out, and restore any changes you made (which would be easily done from automatic history software).
This is bad -- any crack like this is bad -- but it's not gonna cause black holes, it's not gonna release radioactivity, and it's not gonna break the machine.
People need to calm down.
Parent
Re:Why is that even possible? (Score:5, Informative)
http://lcg.web.cern.ch/LCG/ [web.cern.ch]
http://www.gridpp.ac.uk/cernlcg.html [gridpp.ac.uk]
The BBC has a less tchnical piece on te grid: http://news.bbc.co.uk/1/hi/sci/tech/7534866.stm [bbc.co.uk]
Parent
Re:Why is that even possible? (Score:5, Informative)
You're correct (I did an internship recently on data management with the LCG/EGEE network). It's a massive multi-tiered network of datacenters (something like 50k nodes, 15PB of dedicated data storage, but don't quote me on these figures), all required to distribute the enormous amounts of data collected in the experiments to the researchers capable of processing the data.
I'm not going to be an ass and piss too much on the work of thousands of others, because it took quite a bit of effort to set this up, but them getting hacked doesn't really surprise me. The architecture they set up (even for only data-distribution) is very complex, and a lot of software they use has been written in-house or has been forked (years ago). Oh, and it's all open source, readily available for whoever looks for it. With the LHC being such a high-profile target, this is IMHO a security nightmare waiting to happen.
In what I've seen, I'm crossing my fingers that this break-in isn't related to the grid network, and that the next few months will go smoothly, but the grid has been primarily designed for high throughput, not security. Sure, they have certificates you need to access the grid systems, the policies are there, but technically I have my doubts.
Parent
Re:Why is that even possible? (Score:5, Insightful)
Parent
Re:Why is that even possible? (Score:5, Funny)
No, the zeros don't weight anything.
Parent
Re:you question the actions of the scientists? (Score:5, Interesting)
remember: everything PhDs do is art. everything. including using their alma mater's mascot name as their password. art, i tell you!
Years ago (when I still worked in science) I got a call from the US military. It seems one of our scientists was attacking one of their systems.
Since the scientist in question was on the other side of the world on a field trip at the time, it seemed likely that someone had compromised his account, and I shut it down.
When I eventually asked the scientist if was using a strong password, he was proud to recite a long dog-latin linnean binomial. It was very difficult to spell or pronounce.
Of course, that was also the first word you saw if you searched for his name on the Internet (using WAIS, since this was before commercial search engines). This particular scientist was the world's foremost authority on the organism with that difficult name, and had published dozens of papers on it.
To put it in modern geek terms, it was like this guy was Bill Gates, his userid was gates, and his password was microsoft.
The idea that criminal hackers might actually look up his name came as a total surprise to this world-famous scientist with multiple PhDs...
Parent
Greek Hackers (Score:5, Funny)
Well the world WOULDN'T have ended... (Score:5, Funny)
but some jackasses decided to mess with things they knew nothing about.
I'll get my towel.
Computer security rocket science (Score:5, Funny)
Can't we all just get along? (Score:5, Insightful)
LHC webcams (Score:5, Funny)
http://www.cyriak.co.uk/lhc/lhc-webcams.html [cyriak.co.uk]
Watch it for a minute, you can see the effects the hackers are having on them.
Did they use a Trojan? (Score:5, Funny)
Sneaky Greeks.
Um, for all you jokers out there... (Score:5, Insightful)
Wondering why the LHC is connected to the Internet 'at all'...
Why was the Web even developed? Why was HTTP even thought of? Why was a graphical browser of any interest?
CERN. Ask Mr. Berners-Lee. And then contemplate the irony of wondering this at all.
Sadly, it looks like CERN needs to work on the security more, but hey, that's in the spirit of the World-Wide Wild Web, eh?
Re:Air gap + Sneakernet (Score:5, Informative)
Portable harddrives to move the data?
http://www.nsf.gov/discoveries/disc_summ.jsp?cntn_id=111420 [nsf.gov]
This thing will generate 28000 TB of data per hour! Imagine the number of grad students it would take to transfer all those hard drives back and forth.
Parent
Re:The correct term (Score:5, Insightful)
I'm with you on the nomenclature issue. Such an important experiment and mankind in general offers far too many whack jobs who want to shut it down.
The logic of the 'we're all gonna die' crowd eludes me. If nothing happens, all is good. If the world ends, doesn't matter anyway. All those that think they will go to meet their maker should be happy either way, right? WTF?
Parent
Air gap and 15 Petabytes of data annually (Score:5, Insightful)
By manual entry, copying this data across the air gap (120wpm) would take:
15,000,000,000,000,000 characters /(120 words/minute * 6 characters/word) = 4*10^7 years.
Even passing that back and forth on hard drives means shutting about (15Pb/365/24 = ) 1.7 Terabytes per hour. (24 hours a day.)
At some point, you have to admit that just connecting this thing to the internet and securing it is the right thing to do.
Parent
Re:what retard put it online? (Score:5, Informative)
All these machines have connections to the internet. This allows on-call technicians to ssh in to debug a problem remotely, and for facilities management to make checks on the performance of the machine.
It's not like connecting to the control software will present you with a big red button labelled "Black Hole Generator". You'll be presented with a bash prompt, and, if you can figure out the right command, possibly a control screen that you don't understand.
These machines are stunningly complex, and the most likely outcome of some random script kiddie fucking with things is that *nothing* will happen. Someone more knowledgable (or lucky) might be able to find something that will be prevented by the machine protection system, or cause the machine to shut down for a while. Bad, but not as scary as you suggest.
Seriously. Anyone who thinks that random "hackers" can do any real damage, or that these machines shouldn't be on the internet, doesn't know anything about them.
(PS: I'm an accelerator physicist who has worked with several of these machines.)
Parent
Re:what retard put it online? (Score:5, Informative)
Are they anticipating researchers waking up at 1am and thinking "hey, I want to run one more experiment from home before I go to bed..."?
I know you were trying to joke... but the answer is probably "yes."
I've never worked at CERN, but it may be similar to large-scale science user facilities (e.g. x-ray synchrotrons) that I have worked at. Specifically, you want to be able to control the instruments remotely for a variety of reasons. Part of it is safety (in order to minimize time spent near radiation sources and industrial equipment). Part of it is convenience (to check on the status before driving all the way to the actual facility). Part of it is for collaboration (allowing an instrument scientist to log into the machine and change a setting for you, show you how to do something, etc.).
At many facilities, you can change samples, alter instrument settings, re-align, etc.; all without actually going to the facility. Scientists doing those kinds of experiments do indeed appreciate the ability to log into the machine at 1am and check on the status.
There are of course safeguards in place (e.g. hardware safety triggers that cannot be remotely over-ridden)... but it is sometimes possible to break something with remote commands. Now, most of the facilities that work like this are running samples, and need remote manipulation to switch samples and re-align and so forth. LHC doesn't have the same set of requirements... but there are indeed a variety of legitimate reasons why a scientist might need to remotely log into the system and change some settings.
Large facilities are designed to "do science" 24/7. Remote control is one thing that helps scientists maximize the usefulness of equipment. (Such as waking up at 1 am, checking on an experiment you started before leaving work, realizing the data is no good, fixing a few parameters, and running a new more useful experiment.)
Parent