Mastodawn

Security vulnerability on U.S. trains that let anyone activate the brakes on the rear car was known for 13 years — operators refused to fix the issue until now | Tom's Hardware

https://www.tomshardware.com/tech-industry/cyber-security/security-vulnerability-on-u-s-trains-that-let-anyone-activate-the-brakes-on-the-rear-car-was-known-for-13-years-operators-refused-to-fix-the-issue-until-now

Security vulnerability on U.S. trains that let anyone activate the brakes on the rear car, was known for 13 years — operators refused to fix the issue until now

Wireless hardware to seriously disrupt rail transport costs less than $500.

Tom's Hardware

Alex

6d ago

A friend is looking for an ICS pentesting gig in the UK. He has lots of experience in maritime, power, water, gas OT & SCADA.

He's also excellent on internal inf / red team especially when there's an OT element to the org and you need a safe pair of hands.

If you have any leads please message me and I'll hook you up.

#pentest #FediHire

Alex

Jul 5

NOT A DRILL: there is a new Tim Hunkin video.

https://www.youtube.com/watch?v=cqpvl-YGFD4

The Secret Life of the Home

YouTube

Alex

Jul 2

🅰🅻🅸🅲🅴 (🌈🦄)Jul 2

Are you a boy or a girl?
I'm nonbinary.

Yeah, but what were you born as?
A baby.

No, I mean what is your sex?
Awesome.

FFS! Do you have a penis or a vagina??
I've had my share of both.

OMFG!! WHAT IS IN YOUR PANTS??
A frankly disturbing number of lockpicks.

Alex

Jul 2

Russ Garrett Jul 2

Very nice report on the fire at North Hyde substation which took down Heathrow in March.

tl;dr:

* Fire was caused by moisture ingress in a high voltage bushing which was detected in 2018 but got lost in the system.
* North Hyde is an ageing substation which didn't have adequate protection against spread of fire
* Heathrow didn't think that a loss of grid feed was a plausible risk, so they assumed 10-12 hours was a reasonable recovery time from that.

https://www.neso.energy/document/363891/download

Show thread

Alex

Jul 1

FIFTY THOUSAND responses.

My QNAP NAS died an abrupt death today that not even the application of a 100ohm resistor could resuscitate.

I also learnt that:

1. I no longer had the encryption key
2. The external backup to USB silently stopped working in February

So any recommendations for a replacement? SMB and Docker are my needs, as well as having something take care of things for me.

I hear Synology are vendor locking drives as well so…? Halp?

Alex

Jun 29

Last couple of days to have your say.

Please do respond especially if you are an ally. https://infosec.exchange/@alexlomas/114681391090197556

Alex :nonbinary_flag: (@alexlomas@infosec.exchange)

If you have some time this weekend, please consider responding to the EHRC consultation on its proposed statutory code of practice. It's especially important if you are cis or own a company or service provider, or participate in non competitive sports like Park Run. The proposed changes are illogical and a legal nightmare to implement and you might want to have your say before you end up with a legal issue to navigate. Guidance on responding: https://transactual.org.uk/equality-act-campaign/responding-to-the-ehrc-consultation/

Infosec Exchange

Pronouns	They/Them
Links	https://www.alexlomas.com
🟦 BSKY	@alexlomas.com