7 comments

  • barbazoo2 hours ago
    &gt; In 2019, the Maduro government accused the United States of conducting a cyberattack on a hydropower plant that plunged much of the country into darkness for a week.<p>&gt; The power failures caused sporadic outbursts of looting and unrest, bringing the government close to collapse.
    • loeg1 hour ago
      Is there any particular reason to take this claim from Maduro at face value?
      • bflesch1 hour ago
        Good point. It&#x27;s easier to say you got hacked by nation state actors than to tell your boss you accidentally screwed up a major system with no way to recover. It&#x27;s not like 99% of the management could tell the difference.
        • JKCalhoun1 hour ago
          Agree. In hindsight though the claim gets a little more credibility.
      • MSFT_Edging1 hour ago
        In the 2019 book &quot;Sandworm&quot;, which discusses cyber warfare against infrastructure like this, but between Russia and Ukraine, the author begs the question in an interview with a US military&#x2F;intelligence official,<p>&quot;why doesn&#x27;t the US go after these hackers and designate targeting civilian infrastructure as a crime?&quot;<p>To which the response was essentially &quot;The US would like to reserve those types of cyber attacks for their own uses&quot;<p>These quotes are very loose, I read it last year, but essentially, the US didn&#x27;t make a stink about older grid attacks in order to save face when the US does it.<p>Additionally, much of VZ&#x27;s difficulty was due to the massive sanctions against the nation. Sanctions are effectively attacks on a nation&#x27;s citizens to pressure the government. Disabling power infrastructure is absolutely in-line with the motives of sanctions and embargos.
        • GorbachevyChase16 minutes ago
          I think perhaps nationalizing your oil companies, looting their assets for political reasons, and driving out the only people with the competencies to operate your only valuable industry might have a tiny bit to do with the state of the country.<p>I feel like Mother Goose had a cautionary tale about killing your golden goose that perhaps Venezuela’s leadership ought to read up on.
      • GrowingSideways1 hour ago
        Is there a particular reason to take any state account of anything at all at face value? At some point you either have to accept to play the game or reject all news.<p>In this case, it fits squarely in with American foreign policy, especially their orientation towards Venezuelan chavismo.
        • lentil_soup58 minutes ago
          It also fits squarely with corruption in Venezuela, specially regarding energy. Venezuela has been rationing electricity across the country since 2009 and has been involved in countless corruption scandals involving Odebrecht, PDVSA, Derwick Associates.<p>I understand the US&#x27;s foreign policy is a global threat, but let&#x27;s not let that be an excuse for the atrocities and corruption of tyrants in Venezuela and other places.<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Energy_crisis_in_Venezuela" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Energy_crisis_in_Venezuela</a><p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Odebrecht_case#Venezuela" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Odebrecht_case#Venezuela</a><p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Derwick_Associates" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Derwick_Associates</a>
    • bflesch1 hour ago
      Let&#x27;s hope those chicken never come home to roost. NSA has a history of losing offensive cyber tools.<p>IIRC both Texas and California had widespread power outages in the last few years. I am not convinced that US power grid is much better defended than the one in the EU.
      • Qem1 hour ago
        &gt; Let&#x27;s hope those chicken never come home to roost.<p>Bare minimum it gives chinese tech suppliers a great pitch to convince buyers to choose their products over US suppliers. Even if theirs are also full of backdoors, at least they have no history of taking advantage of them to kidnap heads of state far away.
        • ericmay1 hour ago
          &gt; at least they have no history of taking advantage of them to kidnap heads of state far away.<p>Ha. Someone else wrote:<p>&gt; USA is only willing to fight very asymmetrical wars.<p>I say:<p>&gt; China is only willing to kidnap defenseless people
      • ericmay1 hour ago
        Yes, you&#x27;re missing that if you mess with the power grid the US will go and kinetically strike back (read: bomb your country) or attack you with its own cyber warfare capabilities, unlike the EU. That&#x27;s why the EU is experiencing cyber attacks and cyber warfare with clear culpability from Russia, but is unable to do much about it besides give Ukraine more weapons. If Russia launched a cyber attack and shut down JFK the way it did Heathrow, the US would actually do something about it even with all the Trump is a Russian agent stuff aside.
        • ASalazarMX1 hour ago
          Calm down, John Rambo. Even if USA could prove that it wasn&#x27;t a false flag op, it won&#x27;t &quot;kinetically strike back&quot; against China, Russia, India, or even small allies like North Korea.<p>USA is only willing to fight very asymmetrical wars.
          • ericmay1 hour ago
            Sure, of course it&#x27;s not that simple. If China for example did a cyber attack it doesn&#x27;t necessitate an immediate kinetic response or some sort of gargantuan nation-state level warfare to take place.<p>But if one of those countries <i>shut down the US power grid</i> we absolutely would respond and you&#x27;re naive to think that the US would not respond out of some &quot;fear&quot; about only fighting very asymmetric wars.<p>Amongst some there seems to be this idea that because the US has taken military action in other countries over the years, more recent being more important, and because those countries &quot;couldn&#x27;t fight back&quot; that the US is unable or unwilling to take further action against other nation states that theoretically could fight back (India could not, for example as a weak military power with nuclear weapons), but instead I&#x27;d caution you look at those action with respect to the ability of other countries to take action.<p>In other words, it feels good to throw in zingers like the US only beats up on weaker countries or something which, let&#x27;s be frank would be every country or bloc except China, but you&#x27;re missing the fact that those countries are not even able to project power to or willingness or ability to attack other countries.
            • bflesch1 hour ago
              I only remember that if one US state loses power the other states laugh about it because obviously it is because the current governor is a black female democrat. It&#x27;d be great progress to actually detect what caused it in a timely manner and then do a proper cyber attribution.<p>Generally I think you are using a lot of big words to compensate for the fact that the US ignored the Minsk agreement.<p>The russian government has been publicly joking about Trump, broadcasting nude pictures of the first lady and boasting about possessing the Epstein tapes. Before that was the hack of Hillary&#x27;s mail server and fake news campaigns. No kinetic repercussions, even red carpet for putin&#x27;s visit in Alaska.<p>Apart from all this a modern drone war would be a big problem for the US, and countries like Ukraine, russia and china are much better prepared for such a scenario.
              • ericmay46 minutes ago
                &gt; I only remember that if one US state loses power the other states laugh about it because obviously it is because the current governor is a black female democrat.<p>Yea that&#x27;s obviously dumb, but the difference is you hear about America&#x27;s problems, but not the problems in other countries. Russia has its oil facilities regularly bombed. China has institutionalized corruption down to the local level. It&#x27;s not all peaches and rainbows in every country on earth.<p>&gt; It&#x27;d be great progress to actually detect what caused it in a timely manner and then do a proper cyber attribution.<p>Who says we aren&#x27;t?<p>&gt; Generally I think you are using a lot of big words to compensate for the fact that the US ignored the Minsk agreement.<p>Can you elaborate? What&#x27;s the broader point you want to get at here?<p>&gt; The russian government has been publicly joking about Trump, broadcasting nude pictures of the first lady and boasting about possessing the Epstein tapes. Before that was the hack of Hillary&#x27;s mail server and fake news campaigns. No kinetic repercussions, even red carpet for putin&#x27;s visit in Alaska.<p>Yes, totally. The United States should have <i>bombed</i> Russia for publicly joking about Donald Trump. Give me a break. Why even post stuff like this?<p>&gt; Apart from all this a modern drone war would be a big problem for the US, and countries like Ukraine, russia and china are much better prepared for such a scenario.<p>Who do you think is operating in Ukraine and advising the Ukrainians and learning from their drone warfare techniques and capabilities? Do you really not know how this stuff works? Are you not aware that the United States is actively testing weapons in Ukraine to prepare for drone warfare? Is that why you&#x27;re saying stuff like the US should have a kinetic response against Russia for posting pictures and joking about Donald Trump?
                • bflesch18 minutes ago
                  &gt; Can you elaborate? What&#x27;s the broader point you want to get at here?<p>I mean that by ignoring Minsk agreement and being a bitch about weapons deliveries on top of that, the US incentivized every single country to pursue access to nuclear capabilities.<p>&gt; The United States should have bombed Russia for publicly joking about Donald Trump. Give me a break. Why even post stuff like this?<p>They started with the public humiliation after they felt empowered because there was no credible US response to all the previous hacks that you glossed over in your response.<p>Yes, the US stopped credit card payments and destroyed some payment terminals. I imagine they weaponized the apple and android devices, maybe this still continues. For a couple of days, we had those impressive russian rockets which turned around and destroyed their launcher. And of course the geofenced US weapon systems. But was US able to shut down any vital russian systems except starlink and McDonald&#x27;s?<p>Old lavrov still walks around openly with his apple watch just to farm payloads. US had to keep up social media access and steam for russians because that&#x27;s their most convenient surveillance capability. Even Porsche was able to remotely shut down their cars allover russia, last I heard the American car brands are still working within russia.<p>&gt; Who do you think is operating in Ukraine and advising the Ukrainians<p>There are observers from many countries on the ground in Ukraine, and US might even be testing some weapons. However US efforts are overshadowed by better performance of European weapons systems, both old and new. As Germany was unable to supply Taurus, European engineers stepped up and helped Ukraine design long range missiles.<p>Meanwhile the US artificially limits supply for US systems, so they get destroyed because they need to preserve ammo. I don&#x27;t see how the situation for US gets better in the future as more and more proud boys take over key positions. Look at the defense minister who can&#x27;t use a damn phone and is more interested in tattoos.<p>There is a lot of empty posturing and the results are really not speaking for the US.
          • mc321 hour ago
            Europe had Ukraine sabotage (according to European reports) its gas lines and gave it more weapons as a reward… so I guess the answer is that it’s complicated.
            • bflesch58 minutes ago
              source: toilet in google headquarters
              • mc3254 minutes ago
                German intelligence thinks so… maybe they’re garbage. Also “the island” and “the guardian” maybe they’re garbage when they report on this but not on other things.
        • tokai1 hour ago
          Russia conduct cyber attacks on US all the time. North Korea did a high profile attack too. China flew a balloon over the whole country, not bothering a single airport, without any response. US never does anything to anyone that can hit back.
          • ericmay1 hour ago
            Three points:<p>1. You don&#x27;t actually know what actions the US has taken.<p>2. The only country outside of one using nuclear bombs that could theoretically &quot;hit back&quot; is China.<p>3. Flying some balloons across the US doesn&#x27;t necessarily necessitate some sort of massive response. There&#x27;s levels.
            • tokai1 hour ago
              Oh I thought you said the actions would be kinetic.
              • ericmay1 hour ago
                No, sorry. I wrote:<p>&gt; Yes, you&#x27;re missing that if you mess with the power grid the US will go and kinetically strike back (read: bomb your country) or attack you with its own cyber warfare capabilities, unlike the EU.
        • bflesch1 hour ago
          Sounds too good to be true. I&#x27;d love to believe it.<p>Didn&#x27;t russia claim to have the full Epstein files, so how did they get them if not by hacking US government?<p>Attribution of cyber attacks is extremely difficult, and US seems to notoriously under invest into infrastructure. Unlike other countries, most of the power grid is above ground. How can you be so sure that it is safe?
          • ericmay1 hour ago
            &gt; Unlike other countries, most of the power grid is above ground. How can you be so sure that it is safe?<p>I didn&#x27;t say it was safe by virtue of defensive capabilities, but it&#x27;s safe by virtue of the US will very likely come bomb you or use its own cyber capabilities if you do something to the US. This is in contrast to the EU which was the comparison point, which is unable and unwilling to do much against cyber attacks.
            • bflesch53 minutes ago
              My original post was more focused on defensive capabilities, but those things are hard to discern - you need to know about vulnerabilities in order to protect yourself from them.<p>If the damage is done, of course the US can massively retaliate. But ideally no damage is done :)
              • ericmay45 minutes ago
                Ideally yes, but there&#x27;s a cost. All I was saying was that the US is better equipped than the EU because both are vulnerable but the US actually has and is willing to use offensive capabilities, which provide a defensive deterrent to an aggressor.
                • bflesch4 minutes ago
                  If US had such amazing offensive cyber capabilities, why are bug bounties like HackerOne not already bankrupt? The NSA hackers could just easily farm all those bounties and make significantly more than they earn at the government.<p>I feel the answer to this is that most of what we call NSA offensive capabilities are not &quot;real&quot; offensive capabilities in terms of vulnerabilities and exploits, but simple backdoors in US equipment and US tech companies.<p>And I think they got really complacent because analyzing Facebook, Google and Apple data combined with credit card payments, phone call and browser history is doing the job just fine in 90% of the cases.<p>Due to large size of US traditional military, they have advanced capabilities in terms of physical network tapping that many other countries don&#x27;t possess. Maybe they have super binoculars to spy on people typing in their passwords through the window from space. But in the end it is again white-collar &quot;analysts&quot; going through the data instead of clever people actually finding novel vulnerabilities in software, which is also the skill that is rewarded in bug bounties such as HackerOne.<p>Why invest into learning how to reverse engineer a cisco router if you can just call your buddy at Cisco and tell them to commit a new backdoor to the code.<p>By not using these skills they atrophy and once you hit a &quot;real&quot; adversary who is not on Windows and permanently uploading their data to Facebook and iCloud while using a credit card with apple pay, they might struggle very much.<p>I recall things like omg cable being a revolution in red team pentesting. But why invest into these things if you can get the data just from a US tech company.
    • lentil_soup1 hour ago
      Let&#x27;s not take Maduro at his word, he&#x27;s great at playing the victim to hide their corruption. Venezuela has been in an energy crisis since 2009 with rationing still happening everywhere in the country except in Caracas [1] big part of it from the Odebrecht corruption scandal [2]<p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Energy_crisis_in_Venezuela" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Energy_crisis_in_Venezuela</a><p>[2] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Odebrecht_case#Venezuela" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Odebrecht_case#Venezuela</a>
    • lawrencejgd11 minutes ago
      According to The Guardian[1]:<p>&gt; New construction on thermoelectric power plants and other hydroelectric plants has been stalled for years, and localised power cuts are a daily occurrence around Venezuela.<p>&gt; There have also been problems with the supply from the Guri dam in the past.<p>&gt; In 2010, Maduro’s predecessor, Hugo Chávez, declared an “electricity emergency” after a drought caused by the El Niño weather phenomenon left waters at the dam dangerously low.<p>&gt; Six years later, Venezuela’s worst drought in four decades again affected the Guri dam, which then provided about 70% of the country’s electricity.<p>&gt; In May last year, a union leader representing workers in the state power corporation, was arrested by Venezuela’s intelligence service, Sebin, after warning that poor maintenance and systemic problems meant that a blackout was likely to happen.<p>I will use an extract from the Spanish Wikipedia article[2] about the 2019 blackouts because it summarizes the situation pretty well:<p>&gt; On March 9, Ángel Javier Sequea, head of office and operations in Guyana, was found dead after being detained by SEBIN.[3] Ángel Javier left a recorded audio message about the lack of maintenance on high-voltage power lines. He worked for 13 years in the powerhouse next to the turbines at the Caruachi Plant.<p>&gt; Between the night of March 11 and the early morning of March 12, 2019, SEBIN agents arrested and raided the Caracas home of journalist Luis Carlos Díaz, who was then transferred to the Helicoide.[4] Díaz was accused of inciting the blackout.[5] On the night of March 12, 2019, he was released after a hearing in the Caracas courts, in which, according to the organization Espacio Público, he was charged with the crime of “incitement to commit a crime” and was required to appear in court every eight days and prohibited from leaving the country, speaking to the media, and participating in public demonstrations[6]. On March 22, Francisco Alarcón Orozco, secretary of the Corpoelec union, was found hanged under strange circumstances[7]. Govany Zambrano, a Corpoelec worker, was arrested after participating in a press conference[8]. “Our infrastructure at the national level is in a state of neglect, vandalism, abandonment, and terrible conditions...” The government never accepted failure due to lack of maintenance as the main cause, as explained in 2010 by José Aguilar, an expert in electrical risk and international advisor[9].<p>As a Venezuelan, I can say that the national electrical system is in a terrible condition, with constant blackouts and power surges that damage household appliances and industrial equipment. Depending on the time of year, blackouts become more and more intense. It&#x27;s very common to see news reports of areas that have lost power, and it can take weeks for CORPOELEC (the national electricity company) to fix the problem and depending on the location, even months.<p>No one here doubts that the blackouts of 2019 and all those that followed have been the government&#x27;s fault due to lack of maintenance, failure to renew equipment, and failure to build new power plants.<p>Years ago, there were plans to install renewable energy sources such as windmills on the coast, but all the money disappeared thanks to the typical corruption around here[10].<p>[1] <a href="https:&#x2F;&#x2F;www.theguardian.com&#x2F;world&#x2F;2019&#x2F;mar&#x2F;13&#x2F;venezuela-blackout-what-caused-it-and-what-happens-next" rel="nofollow">https:&#x2F;&#x2F;www.theguardian.com&#x2F;world&#x2F;2019&#x2F;mar&#x2F;13&#x2F;venezuela-blac...</a><p>[2] <a href="https:&#x2F;&#x2F;es.wikipedia.org&#x2F;wiki&#x2F;Apagones_de_Venezuela_de_2019" rel="nofollow">https:&#x2F;&#x2F;es.wikipedia.org&#x2F;wiki&#x2F;Apagones_de_Venezuela_de_2019</a><p>[3] <a href="https:&#x2F;&#x2F;www.aporrea.org&#x2F;ddhh&#x2F;n339228.html" rel="nofollow">https:&#x2F;&#x2F;www.aporrea.org&#x2F;ddhh&#x2F;n339228.html</a><p>[4] <a href="https:&#x2F;&#x2F;www.europapress.es&#x2F;nacional&#x2F;noticia-detenido-caracas-periodista-hispanovenezolano-luis-carlos-diaz-20190312114146.html" rel="nofollow">https:&#x2F;&#x2F;www.europapress.es&#x2F;nacional&#x2F;noticia-detenido-caracas...</a><p>[5] <a href="https:&#x2F;&#x2F;elpais.com&#x2F;internacional&#x2F;2019&#x2F;03&#x2F;12&#x2F;actualidad&#x2F;1552388271_564743.html" rel="nofollow">https:&#x2F;&#x2F;elpais.com&#x2F;internacional&#x2F;2019&#x2F;03&#x2F;12&#x2F;actualidad&#x2F;15523...</a><p>[6] <a href="https:&#x2F;&#x2F;www.elmundo.es&#x2F;internacional&#x2F;2019&#x2F;03&#x2F;13&#x2F;5c888f29fc6c833e398b48d0.html" rel="nofollow">https:&#x2F;&#x2F;www.elmundo.es&#x2F;internacional&#x2F;2019&#x2F;03&#x2F;13&#x2F;5c888f29fc6c...</a><p>[7] <a href="http:&#x2F;&#x2F;www.venezuelaaldia.com&#x2F;2019&#x2F;03&#x2F;23&#x2F;muere-otro-trabajador-de-corpoelec-en-extranas-circunstancias&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.venezuelaaldia.com&#x2F;2019&#x2F;03&#x2F;23&#x2F;muere-otro-trabajad...</a><p>[8] <a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20190713213240&#x2F;http:&#x2F;&#x2F;puntodecorte.com&#x2F;geovanny-zambrano-detenido-cicpc&#x2F;" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20190713213240&#x2F;http:&#x2F;&#x2F;puntodecor...</a><p>[9] <a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20100816181129&#x2F;http:&#x2F;&#x2F;www.el-nacional.com&#x2F;www&#x2F;site&#x2F;p_contenido.php?q=nodo%2F149312%2FEconom%C3%ADa%2FPersisten-fallas-en-el-Guri-a-pesar-de-que-termin%C3%B3-la-sequ%C3%ADa" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20100816181129&#x2F;http:&#x2F;&#x2F;www.el-nac...</a><p>[10] <a href="https:&#x2F;&#x2F;climatetrackerlatam.org&#x2F;historias&#x2F;la-paralizacion-del-parque-eolico-la-guajira-refleja-el-desinteres-por-las-energias-renovables-en-venezuela&#x2F;" rel="nofollow">https:&#x2F;&#x2F;climatetrackerlatam.org&#x2F;historias&#x2F;la-paralizacion-de...</a>
  • amadeuswoo2 hours ago
    Stuxnet was 15 years ago. This isn’t crazy news, it’s just the first time it’s being reported openly
    • nozzlegear1 hour ago
      I think I just got Mandela-Effected, I had to look this up. For some reason I thought Stuxnet was something that happened in the 90s, not late 2000s.
      • bflesch1 hour ago
        It happened to 90s systems which were used in the 2000s so you are still technically correct ;)
        • swores22 minutes ago
          The opposite of technically correct - there&#x27;s some logic to their thinking of it as being about the 90s, but technically it very much did not happen &quot;in the 90s&quot;.
          • bflesch14 minutes ago
            Ok so we settle for technically incorrect ;)
    • ironyman1 hour ago
      Because cyber is not a flashy capability like a new jet or missile but it&#x27;s an area where the US has the clear edge: <a href="https:&#x2F;&#x2F;www.iiss.org&#x2F;research-paper&#x2F;2021&#x2F;06&#x2F;cyber-power---tier-one" rel="nofollow">https:&#x2F;&#x2F;www.iiss.org&#x2F;research-paper&#x2F;2021&#x2F;06&#x2F;cyber-power---ti...</a>
      • bflesch1 hour ago
        US cyber capabilities have an edge because they can analyze all of our data stored with US tech companies and they have interception points on all major internet cables.<p>Their human intelligence is much better prepared to &quot;convince&quot; someone to act against their own interest if they can look at your last ten years of communication, family pictures, and web browsing history before they even meet you.<p>Imagine working in a foreign country where death penalty is applied to certain crimes, like blasphemy or homosexuality. They just need to find one person in the target organization who has a secret twitter account that talked badly about god and then they hit them up and tell them to plug in a certain USB stick to a certain system. Cyber operation succeeded because they have a shell.
      • swores10 minutes ago
        Other than Americans wanting to feel superior (no offence intended, I&#x27;m sure most countries want to feel that when possible!) is there actually any public evidence that&#x27;s the case?<p>Even when it comes to superiority of physical military forces, different people (with a range of different biases) have different opinions on stuff like whether a hot, all-out (but non-nuclear) war between USA and China would prove one or the other to be stronger, and while you may read that and think &quot;I know which side is better and anyone who disagrees is just buying into delusional propaganda&quot; at least to form that view you&#x27;ve had the ability to follow a lot of publicly available details on military developments over the years, learning about current and next gen fighter jets, drones, ships... etc.<p>But when it comes to cyber stuff, both offensive and defensive, it&#x27;s generally a lot more secretive in terms of stuff that&#x27;s actually been done (see for example the speculation in this thread that US power grid failures in recent years might have been caused by foreign adversaries - there&#x27;s no evidence that&#x27;s true, but if the US and China had both spent the last decade trying to take offline as many of the other country&#x27;s power grids as possible we likely wouldn&#x27;t have heard about it). Yet alone for hypothetical but saved for war capabilities. If a hot WW3 broke out tomorrow, who actually knows what hacking tools any country (from superpowers to smaller players) actually has, waiting to be used? Presumably they all spend a lot of effort trying to learn about each other&#x27;s capabilities, and maybe they&#x27;re successful enough that they actually do all know most of what everyone else can do - but they don&#x27;t then announce that the way we hear about North Korea testing a new missile or about America developing a new fighter jet. I feel like we the general public just have no idea how advanced or not wartime capabilities might be. Am I wrong? (I may well be, as I&#x27;m in no way an expert in this field; I just believe that things like the document you linked are massively influenced by both the politics of the authors and the information available to them.)
  • buildbot1 hour ago
    It would be funny in this case if it was really just an open SCADA for their entire power grid that they clicked “off”, then “on”.
    • yabones1 hour ago
      The reality probably isn&#x27;t far off... I know in the past the &quot;breaches of critical infrastructure&quot; breathlessly reported by the media have actually just been wide-open SNMPv2 services using the default community string. I&#x27;m sure something similar happened here. Turns out you can just connect to port 161, press &quot;power off,&quot; and be reported in the news as an &quot;advanced persistent threat actor&quot;
    • qingcharles1 hour ago
      Is it that, or is it more likely they paid some anti-Maduro electric company worker to walk into HQ and shove a dongle in the back of a PC somewhere on their internal network, ala Stuxnet?
    • KaiserPro1 hour ago
      I work in electricity, it wouldn&#x27;t be one, but yeah essentially it&#x27;s probably an unpatched RDP&#x2F;vnc&#x2F;remote desktop exploit. Or the password is contraseña123
      • bflesch51 minutes ago
        I can see how a team of cyber bureaucrats is required to type in the fancy n you are using in your password. At least it is safe against brute forcing attempts with standard settings.
  • zarflax2 hours ago
    <a href="https:&#x2F;&#x2F;archive.is&#x2F;rUYS4" rel="nofollow">https:&#x2F;&#x2F;archive.is&#x2F;rUYS4</a>
    • deanc1 hour ago
      I’m stuck Ina captcha loop with this site today
  • flipped2 hours ago
    Third world countries lack the resources to secure their ICS and SCADA. Corrupted US govt doesn&#x27;t even need NSA&#x27;s capabilities for this.
    • baxtr1 hour ago
      Not sure if that’s the right way to divide the world.<p>Actually, poor countries can leverage cyber to pose a much bigger threat than they could traditionally.<p>Or in other words: Cyber can be used for asymmetric warfare. In relative terms, poor countries cause a lot more damage than rich ones.
      • hojofpodge1 hour ago
        There&#x27;s also great potential to build misattribution in. Just pause between combining the attacks from the Internet and renaming variables to watch a Dolph Lundgren movie.
      • alephnerd1 hour ago
        This. Also do <i>not</i> underestimate developing countries internal security budgets. Most middle income countries can now afford DACH sized cybersecurity procurement deals.
    • toomuchtodo2 hours ago
      China should help them.<p><i>Beijing tells Chinese firms to stop using US and Israeli cybersecurity software</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=46618949">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=46618949</a> - January 2026
      • alephnerd1 hour ago
        It&#x27;s a performative announcement - most American and Israeli cybersecurity vendors either don&#x27;t sell in China or white label a Chinese product for the Chinese market.<p>I know 2 companies in that list that have done that very thing because otherwise it would have put their FedRAMP and CMMC pipelines at risk.
        • trollbridge1 hour ago
          I worked at a place that faced exactly that.<p>I initially was in the Huawei client engagement where they wanted copies of all of our source code. We said “no, nobody gets that”. They just keep asking over and over.
          • bee_rider1 hour ago
            On one hand, that seems like a sure way to get your product copied. On the other, they’d be totally nuts to run a cybersecurity product without the source code, right?<p>Seems like a situation where getting the interests to align is just very difficult.
        • bflesch1 hour ago
          Even with white labeled products so they stay legally compliant, is it really justifiable to increase the risk? They&#x27;re having people flying in and out for &quot;sales meetings&quot;, shared office spaces, devices, maybe even staff overlap.<p>I understand it&#x27;s a good way to make money but it comes with some tail risk.
          • alephnerd1 hour ago
            Basically, a Chinese MSSP or SI is selected and given the American&#x2F;Israeli company&#x27;s logo and makes a revenue share agreement, and an airgapped environment using a distinct fork is deployed.<p>That said, most companies decide not to operate in the Chinese market - the TAM is too small for the headaches that it entails (losing Gov and NATO+ defense procurement opportunities).
            • bflesch49 minutes ago
              Makes sense, thanks for elaborating. Just the logistics of it sound like a lot of overhead.
    • bschne1 hour ago
      unlike rich countries, which only lack the will and care to secure their ICS and SCADA &#x2F;s
      • marcosdumay1 hour ago
        Or the US in particular that applies a lot of resources into willfully keeping every ICS and SCADA out there insecure, including their own.
    • victor1062 hours ago
      &gt; Corrupted US govt<p>and Venezuela govt is not corrupt?
      • ceejayoz1 hour ago
        &quot;Murder is bad!&quot;<p>&quot;So rape isn&#x27;t?!&quot;<p>Come on.
      • flipped2 hours ago
        Every govt is. But whoever has most power is most corrupted.
        • bflesch1 hour ago
          You&#x27;re using &quot;false equivalence&quot; bias. Not every government is bad, especially if you still have russia, iran, and others as ongoing contenders for worst crimes against humanity.<p>So saying &quot;every government is bad&quot; is simply a bad faith argument and you should shamefully sink towards the planet core for using it. Andorra is not as bad as russia or iran.<p>Just yesterday there was a video where russian soldiers tie an anti tank mine around the torso of a black African mercenary soldier from Mali before forcing him on a suicide meat assault towards Ukrainian positions. Some countries are evil on another level.
  • msie1 hour ago
    Is the US attacking Russia and China and India as well because they’re the biggest threats?
    • Arun20091 hour ago
      India has neither the ability nor the desire to attack the US. The very idea is silly.<p>The country has its hands full enough coping with its state of quasi-chaos and belligerent nuclear-armed neighbors without taking on the worlds leading superpower for absolutely no reason at all.
      • mosura1 hour ago
        &gt; India has neither the ability nor the desire to attack the US.<p>Extraordinarily wrong on the first part.<p>Some countries have even outsourced some of their cyberattack capability to Indian companies in the past, and not for cost reasons.
        • IlikeMadison51 minutes ago
          You need to give some details and arguments on your extraordinary claim because what can be asserted without evidence can also be dismissed without evidence.
    • mlacks59 minutes ago
      <a href="https:&#x2F;&#x2F;www.cybercom.mil&#x2F;About&#x2F;Mission-and-Vision&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.cybercom.mil&#x2F;About&#x2F;Mission-and-Vision&#x2F;</a> This is a 4-star command.
    • loloquwowndueo1 hour ago
      No: 1) big bully only bullies little guys. 2) big guys have nuclear deterrent.
    • AnimalMuppet1 hour ago
      The US is almost certainly <i>ready</i> to attack China, Russia, India, and every other country. Currently attacking? No, at least not on this scale.<p>Also: Why is India on your list? &quot;Biggest&quot;, certainly, but in what way are they a threat?
      • joribu1 hour ago
        I read GP as a commentary of BRICS. There may&#x2F;may not be interference there by the US and&#x2F;or Five Eyes.
    • bediger40001 hour ago
      Almost certainly not. The first impeachment trial revealed that Trump&#x27;s foreign policy was for his personal benefit. It&#x27;s pretty obvious Trump has figured out that nations, corporations and oligarchs will pay him for favors. I think the dots are connectable.
  • sylware2 hours ago
    javascript only
    • fidotron2 hours ago
      They can only do JS cyberattacks?<p>Maybe they need to use RISC-V assembly ;).