In a first, U.S. blames Russia for cyber attacks on energy grid
reuters.com
reuters.com
https://www.washingtonpost.com/world/national-security/russi...
A code associated with the Russian hacking operation dubbed Grizzly Steppe by the Obama administration has been detected within the system of a Vermont utility, according to U.S. officials.
... but ...
Editor’s Note: An earlier version of this story incorrectly said that Russian hackers had penetrated the U.S. electric grid. Authorities say there is no indication of that so far. The computer at Burlington Electric that was hacked was not attached to the grid.
Generally speaking, anonymously sourced stories in western news outlets about Russian hacking have a very high propensity to collapse or get quietly retracted days later. The DHS is particularly notorious for this: they also claimed Russia hacked various election related systems in multiple states, but the states themselves investigated and said the DHS was wrong.
I cite some more examples in this blog post:
https://blog.plan99.net/%D0%BF%D1%80%D0%B0%D0%B2%D0%B4%D0%B0...
Glenn Greenwald also wrote extensively about this problem.
So now we have an "unprecedented" story sourced to anonymous officials in the DHS, making the entirely false claim that this is the first time US officials have accused Russia of hacking the electrical grid. The cited evidence is a Symantec report that didn't name anyone in particular.
Is it possible Russia is doing this? Of course. I would be, if I were Putin. But I'd also be doing it if I were the leader of Iran or North Korea or China. Perhaps all of them are doing it.
Regardless of the truth, this sort of story should have no credibility with anyone by now. There have been far too many false stories about Russian hacking published for them to carry weight.
https://www.us-cert.gov/ncas/alerts/TA18-074A
and has more interesting technical details.
It's true that both this and previously reports technically involved "anonymous officials in the DHS", in the sense that alert doesn't name any specific officials, but the phrase "anonymous officials" is usually associated with leaks, not official announcements...
I’ve seen unsecured electrical substation and industrial controls, but not actively compromised.
…I was writing a rather long comment that tried to defend the Post story as, in retrospect, probably true, in light of the current report and other more recent showing a pattern. (In particular, the current report actually shows a VNC connection to some kind of generator system, though presumably not Burlington Electric's.) However, the Post's own followup report [1] suggested that (contrary to the company's original statement) the government had not found any indicators on the Burlington Electric laptop that were uniquely linked to Grizzly Steppe:
U.S. officials are continuing to investigate the laptop. In the
course of their investigation, though, they have found on the device
a package of software tools commonly used by online criminals to
deliver malware. The package, known as Neutrino, does not appear
to be connected with Grizzly Steppe, which U.S. officials have
identified as the Russian hacking operation. The FBI, which declined
to comment, is continuing to investigate how the malware got onto
the laptop.
Initially, company officials publicly said they had detected code
that had been linked by the Department of Homeland Security to
Grizzly Steppe.
I still don't think this does much of anything to invalidate the current story. It seems like that was mainly a mistake on the company's part, as they incorrectly treated indicators that were non-uniquely linked to a hacking campaign as evidence it was targeted by that campaign. They then reported this to various authorities, and the information apparently found its way via the state police to one of the state's US senators - probably without the details being vetted by anyone with relevant experience. But both the the US-CERT report and the Symantec report provide evidence of an ongoing, targeted campaign against energy facilities (which, for that matter, was active at the time of the Post report). And one would expect that both reports originate from people that do basically know what they're talking about.[1] https://www.washingtonpost.com/world/national-security/russi...
US utilities and US officials have been in Ukraine for a while working with these utilities on the assumption that what happens in Ukraine will eventually happen on their home turf.
This is actually a thing and it's an important move that officials are calling people out now.
https://www.wired.com/2016/03/inside-cunning-unprecedented-h...
https://www.wired.com/2016/01/everything-we-know-about-ukrai...
Er, no. The story was retracted because what the original version said that authorities claimed was not what authorities actually claimed. It was a journalistic backtrack (WaPo retracted their original reporting), not a government backtrack.
An erroneous media report of the government making an accusation is not an example of the government making the accusation that would, then, invalidate a description of the government later actually making a similar accusation as being unprecedented.
Here's an example paragraph:
Rep. Peter Welch (D-Vt.) said the attack shows how rampant Russian hacking is. “It’s systemic, relentless, predatory,” Welch said . “They will hack everywhere, even Vermont, in pursuit of opportunities to disrupt our country. We must remain vigilant, which is why I support President Obama’s sanctions against Russia and its attacks on our country and what it stands for.”
and another
Officials said that it is unclear when the code entered the Vermont utility’s computer, and that an investigation will attempt to determine the timing and nature of the intrusion.
What US officials are claiming here is very straightforward - the journalists simply quoted them directly in many cases, even the anonymous ones. And the story makes clear this story came from many different sources.
So no, it wasn't a simply journalistic error. The government made precise, clear claims multiple times from multiple officials - and then the story was retracted. But only after many people had seen it.
> So no, it wasn't a simply journalistic error.
Yes, it was.
Not exactly what you said, they hacked a utility computer but not one connected to the grid.
>> story sourced to anonymous officials in the DHS
This is Reuters so odds are that someone @DHS made that claim. Even if Reuters screwed up, DHS would probably call AP and deny the claim.
What should be said is that USA almost certainly does the same, and it makes sense to be able to shut down your adversary once "war" starts.
They never carried weight for me. The "evil Russians" angle has always been about disinforming and misdirecting the public.
I suppose it's monetarily/mechanically true, but it's almost like saying you can afford a new car when your life insurance pays out.
Russia has been working on strategies for limited use of nuclear weapons; they don't believe in MAD. It's called Escalate to De-escalate:
https://www.usni.org/magazines/proceedings/2017-02/escalate-...
https://www.defensenews.com/smr/munich-security-forum/2018/0...
https://thebulletin.org/why-russia-calls-limited-nuclear-str...
It's as crazy as it sounds; a miscalculation could destroy humanity. Consider that their ability to significantly influence foreign publics through social media could be valuable for the de-escalation portion. No doubt we'll see people claiming (false) equivalency between Russia's and the U.S.'s actions - 'they bombed Japan, we bombed Ukraine'.
With the cults-of-personality in place throughout Russia, China, North Korea, and the US, I'm nowhere near believing that such a person is in the right place, but I suppose that's the difference between hope and fact.
I think I have an idea of who will be invading, escalating, and hoping there won't be consequences.
Would having a single known enemy make for a more unified and ultimately productive world?
Probably sounds ridiculous to anybody steeped in the current wave of anti-Russian hysteria in the American media (or the earlier wave in the 80s). Why somebody might be producing warmongering propaganda against Russia I don't know, but clearly I'm supposed to take it as an unquestioned first principle that of course Russia is out to get us (as if we weren't busy "getting" ourselves) and of course Putin is the bogeyman -- Putin, a guy who has something like an 80% approval rating among his people and whose every public speech seems to be about conciliation, cooperation and peacemaking. Something isn't quite right. (Probably both sides are full of shit.)
Anyway no one has ever invaded Russia and won, including Napoleon and Hitler. Russians are proud of that. Their navy is about 2/3 as big as the US, but if what you're defending is most of Asia (an ocean of dirt) maybe that's not the biggest concern. Anyway if China does join in, their navy is comparable to the US's, and together with Russia's, it'd be bigger.
The Russian air force is tiny (same for China) but given that all our aircraft carriers are basically sitting ducks for all the various Russian carrier-busting missiles they have nowadays, our air superiority might not matter as much as we'd like to think. Also they tend to stretch money further. Their jets are fairly cheap, indestructible metal cans with loose tolerances... kind of like flying AK-47s... while ours are exquisite and expensive (because they're made out of porkbarrel) and you have to walk the airfield and pick up every little bitty piece of debris before you take off, otherwise it might suck something in and choke... so the equivalent of a flying AR-15 that always jams.
This is way off. The USN is about 4x the size of the Russian navy and about 5x that of China.
That's clearly not true, as recent history shows, unless one has a fairly broad definition of what Russia’s “own territory” is.
No, it wasn't, though much of it was politically, through conquest, part of Russia for a couple centuries (and a bit more of of it for just over one century) prior to the formation of the USSR, and there was certainly an intense effort by Russia to colonize Ukraine with Russians to break it's distinct culture during that period where much of it was under the Russian imperial rule.
Clearly, you view Russia’s own territory as anything that has ever in the past been subjugated by Russia independently of where modern nation-states lie, and in that respect, sure, Russia may be primarily concerned with fighting wars to re-establish empire in those places.
But that's not a sign of a peace-loving nation, but instead of a warmongering imperialist one that prioritizes restoring it's “glorious” past.
Pride in this myth is one of the reasons often given for why the New Chronology and the associated conspiracy theory of how all of what is held to be history prior to the middle ages is a fabrication (and much of that of the middle ages, too), since that allows the idea that the Mongol invasion never happened.
> Anyway if China does join in, their navy is comparable to the US's, and together with Russia's, it'd be bigger.
Numerically, maybe, but numerical comparisons aren't comparisons of capability. (Ditto with the comment on Russia’s Navy.)
Except the Mongols.
It is much cost-effective and efficient to engage in low-intensity sabotage while making an innocent face, scaring the population, and balancing in the gray zone.
The false equivalencies appear on every issue that casts the Chinese or Russian governments in a bad light. Speaking of the Cold War, IIRC my history, the KGB liked to use them in their propaganda.
[1]https://en.m.wikipedia.org/wiki/1954_Guatemalan_coup_d%27éta...
[2] https://en.m.wikipedia.org/wiki/1953_Iranian_coup_d%27état
The US looks great when compared to Stalin era USSR. When compared to modern day Russia, it's hard to argue we have the unquestionable moral high ground.
It's very easy. Putin is a dictator and the Russians have no democracy, undermine others, poison people, etc. The U.S. doesn't have clean hands, but there is no comparison.
As for your other two issues, the US has had no issue undermining elections for years, and runs a public assassination program in addition to anything that remains secret. There is a comparison, and both sides are awful.
Yes it does. Democracy (the concept) is moral because it gives self-determination and liberty to people. Of course, everything, including democracy, is very imperfect in execution.
> the Russian election. And though they're obviously rigged, the US one isn't some glorious opportunity for the will of the people to be heard either.
Again, there is no comparison. It's like saying Hitler and the U.S. both used internment camps in WWII, therefore they are morally equal.
>Again, there is no comparison.
Yes, there is. On basic principle, the choice between two is not far better than one choice. Beyond that, some of the things done to rig American elections are worse than what Putin does. For example, in 68 Nixon interfered in Vietnam peace talks to ensure election. What would have happened without that is unclear, but it potentially cost hundreds of thousands of lives.
Yeah and it even has its own yankee response meme called "whataboutism". If we want to go peak "whataboutism" here, the founding of the US was based on the ethnic slaughter and enslavement of millions of aboriginal and african peoples. American culture and corporations have a hand in nearly every corner of the world. If you want to get into the head of Russian paranoia towards the US and the anglosphere in general, look at the US for what its ruling elites have historically demonstrated itself to do, to dominate everything that exists by any means necessary which includes wiping out inconvenient peoples both culturally and literally.
> If you want to get into the head of Russian paranoia towards the US and the anglosphere in general, look at the US for what its ruling elites have historically demonstrated itself to do, to dominate everything that exists by any means necessary which includes wiping out inconvenient peoples both culturally and literally.
That's quite a statement. The Americas are generally free, independent democracies, including U.S. neighbors Canada and Mexico. The places conquered by the US in WWII soon became, free, prosperous and completely independent allies, Germany and Japan being the leading examples.
In fact, at the end of the war the US was the only nuclear armed power, had half the world's GDP (!) with a fully functioning economy while competitors were physically and economically devastated, and had a massive military spread around the globe. They could have chosen to become dictators to the world; instead they withdrew and helped form international institutions, such as the UN, World Bank, IMF, GATT/WTO, and others, to promote international peace and prosperity.
Yes, the US also did bad things, but the parent's statement is false and, of course, Russia does not compare.
https://www.us-cert.gov/ncas/alerts/TA18-074A
As with virtually every other accusation of "Russian hacking", there is actually nothing presented suggesting that it was Russians that performed these hacks, let alone conclusively proving that. The line of "reasoning" used to accuse Russia of being responsible is, yet again, the same bit of tired tripe. It boils down to, "this attack uses methods that we suspect Russians have used in the past, and we assert that Russians would have liked to do this hack, therefore we have proof that it was Russians".
>Malicious email campaigns dating back to late 2015 were used to gain entry into organizations in the United States, Turkey and Switzerland, and likely other countries, Symantec said at the time, though it did not name Russia as the culprit.
In other words, these were generic fishing attacks that could have been performed by anyone. Since anyone and everyone uses these fishing attacks, we had no idea who it was in 2015. However, now that everyone is blaming everything on Russia, we can safely do so without even casual scrutiny of our claims.
Wouldn't it be more productive to say "Here is why this is probably the Russians, or check out this report that captured source IP addresses and patterns and it matches up with the Russian hacking groups attack behavior".
When I first looked over this post, there were 3-4 comments, all seemingly pro-russia. I see some points being made that are remarkably similar to official Russian positions on issues. Its really similar to when I see a post about China. A whole bunch of users surface abruptly with lots of comments favorable to China. Both of these countries have large, well documented operations to comment extensively on Western media sources. And I'm sure that many HN users like Russia and like China. But it's hard to shake the feeling that there is some astroturfing going on.
Its extremely unfortunate that skepticism of government and/or media declarations are being characterized as "Pro-Russian". Exercising basic critical thinking skills and demanding evidence for accusations is something that we should all practice, in every case, but especially when serious accusations are leveled. I welcome you to re-read my post. I'm not pushing a "Pro-Russia" position. I'm pushing a "pro-intelligent person" position. I linked directly to the evidence they offered to support their assertions. I looked at the evidence they offered, did you? No evidence they presented suggested or concluded that Russians were responsible. Rather than responding intelligently by pointing to evidence that you think rebuts my assessment, you resort to questioning my motives.
If the west now can't even defend its technical discussion forums from totalitarian disruption, heaven help it.
Has a tendency to breed confused, alarmist, emotional and untechnical conversation.
Here's the truth: Russia isn't evil. Neither is the United States. But they are enemies. The people are getting caught in a propaganda war, which has shifted conversation from the venue of technical to ideological. (Propaganda, in practice, breeds ideological self-affirming thinking.)
The breakdown of conversation isn't the fault of the "traitors who support the evil Russians" or the fault of the "domestic saboteurs who support the US mass propaganda apparatus" but the fact that the two countries can't get their shit straight and work toward a post-Cold War without throwing acid at each other.
(I'm rewriting the last sentence of this over and over because I realize its going to attract ever-yet more comments of the form "but Russia's evil and they started it and you can't really compare the US and Russia - can you?". Screw it.)
The governments of both sides say they want cooperation but are are annoyed at each other's behavior and actions. However I don't think the people of either country treat the other as "enemy", like they did during the cold war. Back then each side was afraid that the other one may attack them preemptively out of ideological reasons.
But Putin is a hostile who's popularity, having ruined the economy, depends on endless conflict and so will never be appeased. Even the extremely pro Putin White House is repeatedly embarrassed by the one sided-ness of the relationship.
But that's a side issue here. If one wanted to save a free discussion site from de-facto censorship and vandalism by totalitarian shills, one would need to apply the ban-hammer with ruthless zeal. Possibly viewing threads like this one as a honeypot to locate them.
One would not, for example, cater to that censorship by penalizing news of cyber attacks off the front page. Which, among other things, eliminates discussion of mitigation strategies.
Sure you can blame them and blame yourself. It doesn't have to be either or.
Depending if you think internet is a safe small town neighborhood or a hostile place full of bad actors constantly trying to gain entry into your systems. In the first case, nobody would say you're irresponsible because well it is unprecedented for burglary to happen there, in the second case the perpetrator would be guilty, but you'd be laughed at and ridiculed for being irresponsible as well.
If you happen to hold someone else info (cough Equifax cough) you might even be sued, though ... you probably also have friends in the government and tons of lawyers to not really be bothered by it.
Yes, you can and should.
For all intents and purposes, that thief may as well be a crocodile who slips in during the night and eats your children. We can put it on trial or negotiate with it about as effectively.
Was Equifax blameless in the events leading up to their breach? They could have prevented it, but they didn't. Or do we only expect responsibility from criminals and corporations?
I'm not advocating a crocodile hunt FFS, only that if they aren't going to play by our rules then maybe we should take responsibility for our own security by locking shit down, and stop acting like pointing the finger at the bad guy of the day somehow shields us from the consequences of mal-intent.
I agree that companies should do more about securing or disconnecting their networks, but I don't get to shoot someone just because they're so silly as not to be wearing a bullet proof vest.
Sure you can! Robbing is not something that happens by accident, and neither is hacking. I agree that the US should invest heavily in improving security, but taking the view that "pfff, who cares who did it!" is a terrible idea.
Yes.
To think otherwise removes the social construct that theft is wrong.
I'm hopeful that cold-war warriors don't dominate the policies to come. If we (they and us) take that tack, we're in for a bad stretch. I'm hoping the current administration is capable of bucking the Russophobia the Dems are so attached to and committed to, mostly for internal political reasons.
Let's get real, deal with Russia as the adversary it is, but in a level-headed manner. Let's face it, they do not care about sanctions. One Bit. They will survive with or without the rest of the world but we get to deal with their blow back.
Obama granted N Korea's Kim more respect than he did Putin. I think that was a grave mistake on his part and we're now paying for this slight with these passive-aggressive moves.
Clearly, these are meaningful events in the context of American-Russia relations as well as NATO-Russia relations, you can't just handwave them away by saying it's one parties political problem.
[1]https://en.wikipedia.org/wiki/Malaysia_Airlines_Flight_17 [2]https://en.wikipedia.org/wiki/Budapest_Memorandum_on_Securit... [3]https://www.cnn.com/2017/01/10/politics/comey-republicans-ha... [4]https://www.npr.org/sections/parallels/2018/03/15/594062887/... [5]https://www.cnn.com/2018/03/14/europe/theresa-may-reprisals-...
Maybe a wall that is ten feet higher. Certainly not an armed invasion.
But Obama wanted to thumb his nose at Russia and ignored that to Russia (as well as the USSR) a deep water port on the black sea is a must.
The separatists are often labeled as Russian military in the MSM, but I gather they were essentially militias who overran Ukraine depots and then later got some Russian leadership help. The MSMs though, present them as Russian regulars.
The Russian troll factory for most of its existence was to troll Ukrainians not The West.
It'd be like expecting us (the US) to give up San Diego as a strategic harbor and let it silt up. It is not gonna happen.
That would be strange, especially if they were able to get weapons issued only to Russian military at Ukrainian depots.
>It'd be like expecting us (the US) to give up San Diego as a strategic harbor and let it silt up. It is not gonna happen.
Are you claiming San Diego is a part of another country? Because if it were a part of Mexico and it was annexed tomorrow I'd have very similar concerns.
Who is providing the evidence of the weapons, Ukraine?
https://www.bellingcat.com/news/uk-and-europe/2015/02/17/ori...
Here’s direct evidence of one episode of invasion:
https://www.theguardian.com/world/2014/aug/14/russian-milita...