Become a member.Become a Ricochet member.
Tired of the toxicity of social media? Why not join Ricochet for just $5/month? Think of it as an online bar. Come in, have a drink, hang out, say whatever you want. But don’t badger, bully, or berate the other drinkers. That's our only rule.













































Discussion (9)
To read this bio, please join Ricochet.
I found the discussion about the Colonial Pipeline ransomware attack to be lacking. And it's partly because not enough information about it has been released.
But some points I take issue with. First, to say that Colonial Pipeline won't reveal anything about the attack and how it happened is wrong. They are a highly regulated and the government's cybersecurity experts are probably all over this. Electric utilities are the only U.S. industry that are audited by federal regulators on their cybersecurity practices, and fined for violations.
Because pipeline companies, like electric utilities, are also regulated by the Federal Energy Regulatory Commission, I suspect that a similar compliance program is on its way for pipeline companies, especially those that cross state lines like Colonial. It will take a year or two, but not as long as it did for electric utilities because they have a framework to work from.
I expect that there will be a lessons learned report out as well after the problems have been fixed, if for no other reason that the government will demand it.
Lucretia made some sweeping statements like, even if your network is totally closed, it's still susceptible to ransomware attacks. Well no, not really. The point is, I guarantee that their control systems network wasn’t closed, especially if the point of entry of their attack was a Phishing email. And if it was, then they are bordering on criminal negligence.
There are other points of entry for such an attack. I’m sure that the FBI is investigating the possibility that they had someone on the inside who helped, and if Colonial’s security practices were fairly good, then going that route is probably the most cost effective.
If what has been released is true, that this is a non-state actor acting alone, then probably they found an egregious weakness in Colonial’s network infrastructure.
Lucretia’s assessment that the future holds with cybersecurity disasters is probably wrong. Likely there will be incidents like Colonial’s which are resolved quickly, and that will mean there will be enough warning to deal with them.
I don’t feel that things are that bad.
To read this bio, please join Ricochet.
Party like its 1976! Inflation, Gas lines, Race Riots... Next disaster will be disco will be making a come back!
PODCAST ORGANIZATION
To read this bio, please join Ricochet.
To read this bio, please join Ricochet.
I always love your thoughtful and educational discussions and am a big fan of Lucretia. Today, however, it seems Lucretia barely let Steve get a word in. She is essential to making this podcast entertaining as well as informative, so forgive me for being critical of her, but Steve's point of view needs to be heard also.
To read this bio, please join Ricochet.
I think she could have used more voices in the chorus - to be more in line with the original performance. She also has a killer version of the Beatles "Come Together" - but the video for that is quite spicy. But she's a very talented singer - you'd never know it, from her performance, but English isnt her first language - she's Ukrainian.
Reboots seem to be all Hollywood does these days. Grease is getting a spin off tv series - so why not Staying Alive.
You're seeing five of nine comments. Sign in, or join for just $5 per month, to read them all and add your own.