FBI Says Smart Meter Hacks Are Likely To Spread 189
tsu doh nimh writes "A series of hacks perpetrated against so-called 'smart meter' installations over the past several years may have cost a single U.S. electric utility hundreds of millions of dollars annually, the FBI said in cyber intelligence bulletin first revealed today. The law enforcement agency said this is the first known report of criminals compromising the hi-tech meters, and that it expects this type of fraud to spread across the country as more utilities deploy smart grid technology."
Re:So how come they are "smart" meters? (Score:4, Interesting)
Simple, just put the magnet on at night...take it off during the day when at work....
I've been wanting to get some rare earth magnets to play with...hmm...now, maybe I have even more justification?
{BAEG}
No fraud checking? (Score:5, Interesting)
The "other" hacking? (Score:5, Interesting)
What about thieves who regularly intercept wireless signals from the meters to determine occupancy patterns, then come back and break in when no one's home?
Do these meters have end-to-end encryption? Inquiring minds want to know.
captcha: quality
Re:So how come they are "smart" meters? (Score:2, Interesting)
They would like to find out when you are home and when you aren't home.
They would like to characterize your usage so they can predict what kind of goodies you have,
And I'm just talking about the power company and hordes of corporate marketing entities what would love to get this data. Imagine the boner it would give thieves and other criminals to have instant access to this information.
Re:No fraud checking? (Score:5, Interesting)
Besides the fact that you don't need to mess with dangerous line-voltages, this is no different than normal meter fraud. I can't imagine anything other than incompetence being the reason this was not found. A utility buys electricity, or makes it, and the amount they put on the grid is a known quantity and easily measured. If the amount that they are billing for is less than that, something is wrong. You can do the numbers on a per-line or a per-substation basis, possibly even more granular than that. All the major HV lines and substations have their own meters which report back to HQ. A single person stealing electricity is somewhat hard to catch, but if substantial amounts of people got away with this for an extended period of time, someone was not doing their job.
But take your average mid size city, and the substations cover huge areas. HV feeders typically feed entire neighborhoods and step down to lower voltage on the neighborhood feed without any such meter. Line loss is variable, not a constant you can be assured of over time. Your mom's current frugality binge can make a significant difference in usage month to month.
So how do you find the 6 houses out of 100 that reduce their consumption by some amount less than the average variance? Especially if they ratchet it down slowly in the high use season?
And even if you statistically isolate a few suspects, how do you prove it? About the only way to do so is to put another meter upstream of each suspect house. Expensive, and not at all stealthy, so the suspect can drop the hack.
A power company in an area I lived in, where power was still distributed with overhead wires, would put the meter at the top of the off-property pole as a way of advertising people they had caught tampering with meters. The entire neighborhood knew what that meant. They could still read them remotely, so it didn't involve any additional work load on their staff once installed.
Re:So how come they are "smart" meters? (Score:4, Interesting)
The law enforcement agency said... that it expects this type of fraud to spread across the country...
Especially now that the vulnerabilities have been announced.
Re:So how come they are "smart" meters? (Score:5, Interesting)
Smart meters do not use the old electro-mechanical method to measure power consumption. They are solid state and have no moving parts or coils that can be tampered with by a magnetic field.
Little story:
Back in high school I took electrical installation, basically you were taught to become an electrician for residential, commercial and industrial. We had an amazing teacher, a master electrician who told us how he cheated the meter to cut his bill down. Basically most older electric meters were "5-jaw" meaning that they had 5 contacts, two incoming hot legs from the street, one neutral and two outgoing hot legs to your panel box. If you cut the neutral leg the meter stopped spinning. So he "obtained" a forged matching utility seal (the numbered plastic thing that seals the meter to detect tampering) and ran two wires stealthily into the meter pan. Instead of the neutral leg of the meter going strait to the main neutral bus bar, it first went into his home to a timer switch hidden in a closet and back to the meter pans neutral bus bar. He said if you looked in the pan and didn't poke around, you would never see that the wires were diverted.
So over the period of a few years he finally got it to the point where he would only pay 20-30 dollars a month in electricity because he lowered it very very slowly over time. If you suddenly half your electric bill the uitility's billing software would flag you and send an investigation team out who will pull your meter and take it to a lab for diagnosis and inspect your meter pan. Well he was sitting pretty paying next to nothing while running air conditioners and pool filters but one day the timer burnt out completely shutting the meter off. He didnt notice and said it could have been that way for well over a month. The utility came to his house on a day when he happened to be home and pulled the meter. The lights went out and he decided to look out the window and saw the utility truck in front of his house. He ran out and with some quick thinking started screaming at the utility workers "What the fuck are you doing! My wife was carrying laundry down the stairs and she fell. I think she broke her leg. Im calling 911, and im going to sue your asses!" before he could get back in the house the utility crew plugged the meter back in and ran. He then removed his modifications and covered his trail. The next day an inspector came and rang his bell informing him they had to remove the meter for inspection and that they were sorry for any problems the previous crew caused. Well they took his old mechanical meter and installed an electronic meter that had a clock and a light sensor (from his description). It was a "4-jaw" meter (no neutral) and could not be disabled without physically unplugging it. He never heard back from the utility as he covered his tracks and they couldn't prove he tampered with the meter since he replaced the seal with one of the same serial number. He never tried to tamper with the meter again.
Goes to show you how easy it was to cheat the electric bill with a little skill, resources and patience.
Re:So how come they are "smart" meters? (Score:3, Interesting)
Re:No fraud checking? (Score:5, Interesting)
They do tend to have meters per transformer ("pole pig"), which is pretty granular, as well as at other points in the distribution network. They use them to diagnose flaws in the system, but they're also used for finding fraud.