Comments on: Breaking into a power station in three easy steps

Security expert Ira Winkler explains how you can break into a power station and take over the power grid.

[Zero187]

HINT: Hire smart(er) people AND/OR sit down with them for 5 minutes teaching them about phishing, executables, and basic common sense computer defense. For example, if you get an email from Paypal that says "Dear Customer" delete it right away. But if it says "Dear Mr. Smith" and you are infact Mr.Smith, then it's 95% going to be legit (unless the hacker is directly targeting someone they know personally, which doesn't happen often at the work place). If I was a boss I would do that test once a month and fire anyone who downloaded a virus because it shows their lack of awareness, and bad/lazy awareness == stupidity (at least in the long run). 95% of the time it only takes 10 seconds to use google to find out if the site is legit or not.

[Zero187]

HINT: Hire smart(er) people AND/OR sit down with them for 5 minutes teaching them about phishing, executables, and basic common sense computer defense. For example, if you get an email from Paypal that says "Dear Customer" delete it right away. But if it says "Dear Mr. Smith" and you are infact Mr.Smith, then it's 95% going to be legit (unless the hacker is directly targeting someone they know personally, which doesn't happen often at the work place). If I was a boss I would do that test once a month and fire anyone who downloaded a virus because it shows their lack of awareness, and bad/lazy awareness = stupidity (at least in the long run). 95% of the time it only takes 10 seconds to use google to find out if the site is legit or not.

[EnergyWise]

The author forgot to include the real STEP 1. First, find a moronic utility that has not isolated SCADA systems and controls from the Internet. I find it hard to believe that nuclear plants don't have complete isolation from the Internet to their SCADA networks.