Datapac? In my experience, there aren't many things left there... of course, I don't work in that industry. I thought most transactions/work took places on other Canadian packet-switched networks. As for south of the border, I know even less.
<br><br><div class="gmail_quote">On Dec 3, 2007 2:51 PM, Dude VanWinkle <<a href="mailto:dudevanwinkle@gmail.com">dudevanwinkle@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Also Johnson Controls<br><br>in 2005 they were busy converting the proprietary BACnet speaking<br>SCADA devices to embedded windows XP, considering NASA and friends run<br>JCI, and there is no good way to update embedded XP (AFAIK) remotely,
<br>these systems should be prime targets...<br><br>Whats an MLP?<br><br>-JP<br><div><div></div><div class="Wj3C7c"><br>On Dec 2, 2007 7:52 PM, gmaggro <<a href="mailto:gmaggro@rogers.com">gmaggro@rogers.com</a>> wrote:
<br>> Been giving myself a little refresher on SCADA, hope no-one minds the MLP.<br>><br>> Stock presentation on SCADA security issues:<br>><br>> <a href="http://www.blackhat.com/presentations/bh-federal-06/BH-Fed-06-Maynor-Graham-up.pdf" target="_blank">
http://www.blackhat.com/presentations/bh-federal-06/BH-Fed-06-Maynor-Graham-up.pdf</a><br>><br>> Ganesh Devarajan's Defcon presentation was interesting:<br>> <a href="http://video.google.com/videoplay?docid=2434649448102709100&hl=en" target="_blank">
http://video.google.com/videoplay?docid=2434649448102709100&hl=en</a><br>><br>> Makes of SCADA and related products I have seen in actual use:<br>> Allen Bradley (hardware)<br>> Siemens (hardware)
<br>> RAND (hardware)<br>> ABB (hardware)<br>> Wonderware (software, assuming this was what Ganesh was assaulting)<br>><br>> Well, assuming it was Wonderware (<a href="http://us.wonderware.com" target="_blank">
http://us.wonderware.com</a>) since in<br>> multiple networks of hundreds of thousands of nodes, and the companies<br>> that own them... Wonderware was the only SCADA related package that<br>> creeped up.<br>>
<br>> On a different and amusing note, X.25 was still in use in a number of<br>> these locations. Take that for what you will, but I don't think that's a<br>> good sign. Hello, Datapac! However I have little idea what the
X.25<br>> landscape is like anymore. Would be interesting if both<br>> credit/financial and infrastructure data regularly travelled over the<br>> same paths. Get access to a lottery/debit terminal, or just its<br>
> connectivity, and leverage that.<br>><br>> 24th Chaos Communication Congress "Hacking SCADA", it sure would be nice<br>> to make it over:<br>> <a href="http://events.ccc.de/congress/2007/Fahrplan/events/2227.en.html" target="_blank">
http://events.ccc.de/congress/2007/Fahrplan/events/2227.en.html</a><br>><br>> More amusement, though it's a subscription site:<br>> <a href="http://www.digitalbond.com/wiki/index.php/SCADA_IDS_Signatures" target="_blank">
http://www.digitalbond.com/wiki/index.php/SCADA_IDS_Signatures</a><br>><br>> Anyone have any resources they'd care to share?<br>><br>> _______________________________________________<br>> Full-Disclosure - We believe in it.
<br>> Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html" target="_blank">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>> Hosted and sponsored by Secunia - <a href="http://secunia.com/" target="_blank">
http://secunia.com/</a><br>><br><br>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html" target="_blank">http://lists.grok.org.uk/full-disclosure-charter.html
</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/" target="_blank">http://secunia.com/</a><br></div></div></blockquote></div><br>