Post
CNN's Sean Lyngaas back once again with a belter story: Iranian hackers are behind a series of breaches of systems that monitor the amount of fuel in storage tanks serving gas stations in multiple U.S. states.
Per Lyngaas: the hackers "exploited automatic tank gauge systems that were sitting online and unprotected by passwords."
A little louder for the folks in the back:
...."UNPROTECTED BY PASSWORDS."
https://www.cnn.com/2026/05/15/politics/iran-hackers-tank-readers-gas-stations
@zackwhittaker @drwho and they figure it has to be Iranian hackers, not 11 year olds from Detroit, for Reasons ๐คฆโโ๏ธ
@zackwhittaker Isn't blaming "Iranian hackers" for this kind of DARVOing it? You didn't put a lock on something you attached to the network. Do you also leave your gas tanks unlocked for any random passersby to open?
@zackwhittaker - Everyone is worried about the next stuxnet, but OT / ICS devices often have default creds or... as you point out... no creds...
And yes! The system is airgapped from the IT network! We only access it from the internet!!!! ๐
@zackwhittaker - Everyone is worried about the next stuxnet, but OT / ICS devices often have default creds or... as you point out... no creds...
And yes! The system is airgapped from the IT network! We only access it from the internet!!!! ๐
@zackwhittaker I mean weev went to prison for accessing things unprotected on the web. โBreachโ is a dumb word here though.
Which makes me wonder if they could then initiate false readings too. ๐ค
@zackwhittaker oof.
And I'm sure they already know about all of the internet facing devices the monitor and control crude oil levels in tanks and can be disrupted to stop the flow of oil going into pipelines. Protected only by default user/pass. I saw that far to many times when I was the industry.
I'm sure that won't become an issue at all at some point /s
@zackwhittaker I have zero doubt there are still stations with a Win 95 box reading a bunch of PLCs and dialing a modem to report nightly status.
And they are more secure than this bs.
@zackwhittaker the 'competency' of the tRumpsReich regime in full view
Customer to clerk: Pump x is not pumping.
Clerk goes in back. Returns.
Clerk: We are out of regular, but there is premium left.
Saw this on 2024 chistmas eve.
@zackwhittaker did you even read the TOS before you posted this? Do you really want me to agree with that? Do you know how to use the word Nope in a sentence?
@zackwhittaker "breached"? How is it "breaching" a door that was already wide open?
@zackwhittaker I stopped reading that article after 3 paragraphs. It just turned into an opinion piece after that. I want a detailed technical description as to what is going on, mostly due to the "US officials suspect Iranian hackers" claim. It sounds like they have no proof. These systems being wide open to anyone is something I've seen working in large corporate American businesses. I'd always remark how open these systems were, and no one cared.
@zackwhittaker I mean, is it even really "hacking" at that point
If it is unprotected, then it is not hacking.
@csstrowbridge @zackwhittaker - Give us a word for it then. We'll use your's from now on.
@tinker @csstrowbridge @zackwhittaker Entered unsecured premises.
Install bonfire.cafe
Get the full app experience
