Profile cover photo
Profile photo
Antti Pitkänen
126 followers
126 followers
About
Antti's posts

Post has attachment

Post has attachment

Post has attachment

Post has attachment

Post has attachment

Post has attachment

Post has attachment

Post has shared content
#geeky and #OMG
QUOTE: [Craig S Wright ] says: I was contracted to test the systems on a Boeing 747. They had added a new video system that ran over IP. They segregated this from the control systems using layer 2 - VLANs. We managed to break the VLANs and access other systems and with source routing could access the Engine management systems.

The response, "the engine management system is out of scope."

For those who do not know, 747's are big flying Unix hosts. At the time, the engine management system on this particular airline was Solaris based. The patching was well behind and they used telnet as SSH broke the menus and the budget did not extend to fixing this. The engineers could actually access the engine management system of a 747 in route. If issues are noted, they can re-tune the engine in air.

The issue here is that all that separated the engine control systems and the open network was NAT based filters. There were (and as far as I know this is true today), no extrusion controls. They filter incoming traffic, but all outgoing traffic is allowed. For those who engage in Pen Testing and know what a shoveled shell is... I need not say more.

Post has shared content
I'm already tired of all the Steve Jobs talk, so thought I'd push out a few videos tonight to give me something else to do than read all about him. Here's the first, yet another in my series of how work is changing thanks to new collaborative tools.

Team inbox with chat: Flowdock

Flowdock advertises itself as a team inbox with chat, so I wanted to get a closer look. Here's founder and CEO Otto Hilska showing it to me. http://flowdock.com/ for more.

Post has attachment
Wait while more posts are being loaded