Maritime Cybersecurity Firm: 37% of Microsoft Servers On Ships Are Vulnerable 51
colinneagle writes: A report from maritime cybersecurity firm CyberKeel claims that spot checks at 50 different maritime sites revealed that 37% of the servers running Microsoft were still vulnerable because they had not been patched. But what's most interesting is what happens when hackers can breach security in shipping environments, including one case in which "drug gangs were able to smuggle entire container loads of cocaine through Antwerp, one of Belgium's largest ports, after its hackers breached the port's IT network," said Rear Adm. Marshall Lytle, assistant commandant responsible for USCG Cyber Command.
Running "Microsoft" (Score:2)
So this summary doesn't even go into which Microsoft product is vulnerable, and how these vulnerabilities could be potentially exploited. This level journalism is what causes people to say that Windows NT left a ship marooned.
Re: (Score:3)
Drug gangs...
Two words put together by no one ever who sounded authentic.
Re:Running "Microsoft" (Score:5, Insightful)
"So this summary doesn't even go into which Microsoft product is vulnerable, ..."
Are you kidding?
They ALL are!!!
Re:Running "Microsoft" (Score:4, Funny)
So this summary doesn't even go into which Microsoft product is vulnerable...
I'm sorry, but can you please identify your location? It seems the rest of us in the known universe are wondering what planet you are from where there is a Microsoft product that somehow isn't vulnerable.
..., and how these vulnerabilities could be potentially exploited.
Given that the latest SMB rehashed vuln affects every version of Windows, I'd say the "exploit" is running Windows.
This level journalism is what causes people to say that Windows NT left a ship marooned.
Given my previous statement regarding vulnerabilities still being discovered, it really wouldn't fucking matter what version of Windows they assumed was hacked.
Re: (Score:1)
Notepad
Re: (Score:1)
This level journalism is what causes people to say that Windows NT left a ship marooned.
Ah, you mean that old RexBallard-era chestnut on the 'Government Computer News' website? For some reason that's the only article I have EVER seen linked to from that particular website.
On the other hand (Score:3)
Drug smugglers in Europe managed to deliver 400kg of cocaine to the Aldi supermarket chain in Berlin. So apparently not all drug smugglers are good at moving their contraband.
Aldi supermarket workers find record cocaine stash in banana boxes [www.dw.de]
Re:On the other hand (Score:4, Funny)
Drug smugglers in Europe managed to deliver 400kg of cocaine to the Aldi supermarket chain in Berlin. So apparently not all drug smugglers are good at moving their contraband.
Aldi supermarket workers find record cocaine stash in banana boxes [www.dw.de]
'Allo? Polizei? Ve bin finden der... four... five... six... er, FOUR hundred kilos von der cocaine!'
Re: (Score:2)
Europe's supermarkets are literally flooded by cocaine. Earlier Prague got 100kg shipped. Now Berlin got 400kg.
There was another 140kg shipment somewhere. And these are just the cases picked up by the media.
That's Because they're all running (Score:4, Funny)
Pirated versions.
yarrr
Re: (Score:2)
Pirated versions.
yarrr
when it's maritime you use the merigoround
these are seaservers btw, not webservers
Re: (Score:3)
37% of wives and girlfriends are likely to cheat on you too. But what you gonna do about it? Dump your cheating girlfriend and just end up with another cheating girlfriend? What's the point of that? So most people just stay with their lousy operating system or girlfriend. Really it is all pointless anyway.
Er... presuming that the cheating is important to you, you have a 100% chance of having a cheating girlfriend if you stay with the current one but only a 37% chance if you switch to a new, randomly chosen girlfriend.
But... if you don't instinctively see that, then I have to conclude that on some level you want abuse from your girlfriend/software vendor. In fact given your track record of past choices it seems likely that your choice will perform worse than chance, although a probably bad new choice remains
37% of webservers, not servers on ships (Score:5, Informative)
Hopefully that includes timely patch management, since CyberKeel claims 37% of maritime webservers running Microsoft were not patched and thereby "open to remote control risk." Granted, that risk is about hackers taking over websites, but it could certainly turn into a misinformation mess.
Also, I love the picture used for that article - a coast guard cutter in front of a ship burning on the water in the background - as though it's vulnerable Microsoft-based computer suddenly burst into flames and took the ship with it. Danger! Patch your OS or this could happen to you!
Re: (Score:1)
Re: (Score:2)
And then there was the famous Intel TV ad showing how the Intel chip could make the internet run faster.
Re: (Score:1)
Bah! Vote for the greater evil; https://www.facebook.com/cthul... [facebook.com]
Re: (Score:1)
Bah! Vote darkness and despair; https://www.facebook.com/cthul... [facebook.com]
Thank Greeks and Microsoft for your iWatches! (Score:1)
Re: (Score:2)
You do realize that these systems are connected to the Internet? The same Internet that everyone else is connected to. The fact that the server is in the middle of the ocean is irrelevant. As is the fact (true enough) that a significant fraction of commercial shipping is run by Greek firms.
I suppose it being in Greek might be an example of security by obscurity, but it's just TCP/IP and the same Microsoft code that everyone else uses.
Re: (Score:2)
You do realize that these systems are connected to the Internet? The same Internet that everyone else is connected to. The fact that the server is in the middle of the ocean is irrelevant. As is the fact (true enough) that a significant fraction of commercial shipping is run by Greek firms.
I suppose it being in Greek might be an example of security by obscurity, but it's just TCP/IP and the same Microsoft code that everyone else uses.
No, -most- of these systems are not connected to the Internet, not even between them and/or a central ship's system - usually they are just monitor and control systems with very little integration. I don't blame you because the article (and /. summary) was not good to begin with, so relax, everything is under control in sea by us Greeks (hey dude, some fucking Greek pride, don't hate me!)
servers on ship != port systems (Score:1)
The headline is 37% of MS servers on ships, the lead is about Port IT systems. These are of course very different things.
Windows for warships still in use? (Score:2)
Well if they F* realty bad just send the seals into the MS HQ.
Ship Hacking? (Score:2)
Uuh, Mister The Plague, something really weird's going in the system, we've got a user logged on, with the load of about four users. I think we've got a hacker.
Obviously (Score:5, Funny)
Those servers are particularly vulnerable to flooding.
Re: (Score:2)
Too many links (Score:1)
They shipped buggy code (Score:1)
Come on, someone had to say it.
Servers on Ships? (Score:3)
Is that like Ruby on Rails?
Pffft (Score:1)
That study is full of ships!
You say bugs (Score:2)
We say "Ship It!"
Heh (Score:1)
I thought I read "Microsoft Servers on Ships" :)
Can not be true, right
Re: (Score:2)
Not new at all, and hackers not involved (Score:2)
Long time ago Risk Digest had an article where the latest and greatest air craft carrier failed left drifting in the water when the operating system (NT) had a divide by zero error.
Doing a global search the best I could come across was this one article.
(http://www.theregister.co.uk/2010/05/12/emals_backfire/)
The article describes an incident where, apparently, a test of the US Navy's
new Electro-Magnetic Aircraft Launch System (EMALS) failed because it
unexpectedly went in reverse, destroying 'important equip
Gibson? (Score:2)
I figured they would of fixed this problem after the Gibson was hacked?
DiVinci returns.
Only 37%? (Score:2)
Re: (Score:1)
No, because if you consider ALL Mickey$oft Servers, then the percentage would be even higher, IMHO!!!