Hacker News new | past | comments | ask | show | jobs | submit
lifeisloving | on: Tracking Anthropic-discovered vulnerabilities
[flagged]
mech422 | parent | next
we've already had water treatment plants hacked and the amount of chlorine in the water changed. Florida ended up with dangerous amounts of lye being added to the water and was saved by an employee that noticed the change...I am worried, no airgaps to be found..

https://www.controleng.com/throwback-attack-hackers-attempt-...

https://esemag.com/water/russian-hackers-breached-quebec-wat...

https://www.cbsnews.com/news/us-water-systems-cyberattacks-i...

https://www.bbc.com/news/world-us-canada-55989843

edit: formatting urls

throw0101d | root | parent | next
> I am worried, no airgaps to be found..

Reminder that Stuxnet managed to jump an air gap (via USB keys):

* https://en.wikipedia.org/wiki/Stuxnet

mech422 | root | parent
oh great..I'd almost forgotten about that... what I found really funny was they just infected every USB key that vending machine had until a worker bought one...No fancey targeting, just cheap usb keys and patience.
lifeisloving | root | parent
Have you tasted Florida water, it could probably use some extra chlorine. They dont exactly invest that much in public health/infrastructure, im not surprised this happened in Florida. Its a careless state with careless politicians.

Im still not worried about it. There's thousands of water treatment facilities in the USA and you've surfaced two occasions.

Ya'll should try actually breaking into something semi secure with an LLM, its not as easy as you might think. Seriously go try it, if you think its so easy there's millions of dollars to pick up off the floor on bugcrowd or h1. Seriously, please go give it a go.

Secondly, maybe the USA should stop committing mass murder across the globe if we don't want to be the subject of retaliatory attacks.

mech422 | root | parent
I actually 'surfaced' attacks in 5 states, and you only read two of them...not to mention Canada and Israel. Also, you're acting like you think its some script kiddies gonna try this stuff. It will be state actors, and was mentioned upstream in the stuxnet comment.
lifeisloving | root | parent
I dont think it's going to be script kiddies, but it sure does seem like everyone worried about this issue thinks anyone can hack critical systems now with a claude sub.

Do you think state actors are only capable of harming you now because of llms??? They don't need llms lol.

I would argue that systems were largely more vulnerable 5 years ago than they are now. Especially at a municiple level.

There seems to be a lot of "strategy of tension" being employed in these news cycles surrounding security and AI. Dont fall for it. You're fine. Systems are more secure now than they ever have been in the past.

But on the Israel note, thats awesome I hope more of that comes their way.

loading story #50450523
lmz | parent | next
Just like the European freezers and refrigerators.
pants2 | parent | next
"should be" is doing a lot of work here.

Airgaps don't solve everything either. Stuxnet was successful at destroying air-gapped machines.

bluefirebrand | root | parent
Airgaps still should be bare minimum though?
pixl97 | parent
[flagged]
tomhow | root | parent
Please omit snark and internet tropes on HN. The guidelines make it clear we're trying for something better here. https://news.ycombinator.com/newsguidelines.html