Massive pipeline may be shut down for days following cyberattack

[F6Dave]

Shortages abound!  We now have:

• Fuel shortages
• Lumber shortages
• Housing shortages
• Microchip shortages
• New car and truck shortages
• Trucking shortages
• Workforce shortages
• Ammo shortages

It's starting to feel a little like Venezuela! Maybe this is the plan to get us ready for full blown Marxism.

[F6Dave]

Shortages abound!  We now have:

• Fuel shortages
• Lumber shortages
• Housing shortages
• Microchip shortages
• New car and truck shortages
• Trucking shortages
• Workforce shortages
• Ammo shortages

It's starting to feel a little like Venezuela! Maybe this is the plan to get us ready for full blown Marxism.

After posting this I just saw the latest CPI numbers. Inflation in some categories is 2X to 3X higher than predicted. Maybe we'll have Venezuela like inflation to go with the shortages.

[Pete]

Southeast Tennessee, seeing some stations out of gas. Some stations with regular and diesel only. Lines at the more popular or cheaper priced stations. The more remote stations in less populated areas no lines.   Best of luck Carolinarider09.

[hubcapsc]

Shortages abound!  We now have:

• Fuel shortages
• Lumber shortages
• Housing shortages
• Microchip shortages
• New car and truck shortages
• Trucking shortages
• Workforce shortages
• Ammo shortages

It's starting to feel a little like Venezuela! Maybe this is the plan to get us ready for full blown Marxism.

After posting this I just saw the latest CPI numbers. Inflation in some categories is 2X to 3X higher than predicted. Maybe we'll have Venezuela like inflation to go with the shortages.

Yes, but...

U.S. to Help Needy Families Pay for High-Speed Internet

The $3.2 billion broadband aid program, which launches Wednesday,
could also be boon for internet providers.

-Mike "priorities, man!"

[signart]

There is no fuel shortage. The stations aren't hooked up to a pipeline of gasoline. I could probably empty a stations tanks with my fleet alone

[F6Dave]

Shortages abound!  We now have:

• Fuel shortages
• Lumber shortages
• Housing shortages
• Microchip shortages
• New car and truck shortages
• Trucking shortages
• Workforce shortages
• Ammo shortages

It's starting to feel a little like Venezuela! Maybe this is the plan to get us ready for full blown Marxism.

After posting this I just saw the latest CPI numbers. Inflation in some categories is 2X to 3X higher than predicted. Maybe we'll have Venezuela like inflation to go with the shortages.

Yes, but...

U.S. to Help Needy Families Pay for High-Speed Internet

The $3.2 billion broadband aid program, which launches Wednesday,
could also be boon for internet providers.

-Mike "priorities, man!"

Great! They'll have internet but no electricity for their phones and computers!

[Reb]

Gasoline shortage???

Damn the bad luck

[Jess from VA]

IF people don't go crazy panic buying, and IF they get back on line in a few days, should not be too bad.

This is not the way to haul those cans, and they appear to be in need of some bicycling anyway. 

[f6john]

If there is no rationing there’s no “shortage”. As usual WhIte House is unconcerned, everything is under control.

[Patrick]

 Venezuela ?

Yep, we're on our way, in the fast lane.

The doofus's we just elected and the morons the main doofus put in charge of certain depts. must have single digit IQs.  look whats happened since Jan., imagine what they can do in the next 3 yrs.

[Jess from VA]

The pipeline is back on line today.

[carolinarider09]

Just a reference for Jess's post.

Colonial Pipeline said Wednesday "it initiated the restart" of operations after having to shut off the conduit following a cyberattack last week.

The pipeline was set to resume operations around 5 p.m. ET, but the company said "it will take several days for the product delivery supply chain to return to normal." Colonial Pipeline Co. had to shut it down Saturday following a ransomware attack.

https://www.usatoday.com/story/money/2021/05/12/gas-shortage-gas-prices-colonial-pipeline-nc-virginia-north-carolina/5052551001/

[hubcapsc]

I saw some places, Reuters was one, that say Colonial
has no plans to pay the ransom. Good for them.

-Mike

[Patrick]

I saw some places, Reuters was one, that say Colonial
has no plans to pay the ransom. Good for them.

-Mike

Read that too, good. The attack came from somewhere in Russia ?  Seems everything bad has come from Russia. Lets see if they're held accountable.

[Bret SD]

I saw some places, Reuters was one, that say Colonial
has no plans to pay the ransom. Good for them.

-Mike

Read that too, good. The attack came from somewhere in Russia ?  Seems everything bad has come from Russia. Lets see if they're held accountable.

Yeah.. it's always those wascally Wussians 

Timing of this is suspect to say the least, it's helping to jump start inflation.. there are NO coincidences.

[..]

https://finance.yahoo.com/news/colonial-pipeline-paid-hackers-nearly-141548661.html

[Rams]

https://finance.yahoo.com/news/colonial-pipeline-paid-hackers-nearly-141548661.html

While I don't agree with paying the ransom, it's probably the lessor of evils compared to potential loss of income and repair/restructuring their system.   Although, it would appear that their system needs restructuring anyway.   Don't pay the bastards, we'll figure it out how to survive with less gas.

Edited:   Just saw this:  A defender’s view inside a DarkSide ransomware attack
https://news.sophos.com/en-us/2021/05/11/a-defenders-view-inside-a-darkside-ransomware-attack/
Rams

[Serk]

As an industry insider with many friends and colleagues at various enterprises, both private and governmental, this issue is FAR more common than you think, most places just try to keep it quiet....

IMHO, at some point we need to start using special forces teams to take these lowlife scum out, that's the only thing that might stop them, or at least make them think twice about it.

[The emperor has no clothes]

As an industry insider with many friends and colleagues at various enterprises, both private and governmental, this issue is FAR more common than you think, most places just try to keep it quiet....

IMHO, at some point we need to start using special forces teams to take these lowlife scum out, that's the only thing that might stop them, or at least make them think twice about it.

That’s going to be kind of hard when most of it is done with the tacit approval and defense of Putin. It seems by paying them off we just encourage more of it.

[scooperhsd]

I've got a better question - what can be done to defend against your files being encrypted in the first place ?

Obviously - you need to shutdown SSH, TTY, and other remote access protocols for originations outside the network (goodbye remote access - or at the least it needs to be hardened greatly so it can't be spoofed). RSA (both fob and non-fob) could help, but is not a perfect answer either. (Can you tell I've worked in the industry before ?).

[Rams]

I've got a better question - what can be done to defend against your files being encrypted in the first place ?

Obviously - you need to shutdown SSH, TTY, and other remote access protocols for originations outside the network (goodbye remote access - or at the least it needs to be hardened greatly so it can't be spoofed). RSA (both fob and non-fob) could help, but is not a perfect answer either. (Can you tell I've worked in the industry before ?).

Either that or, you worked in a Chinese or Greek restaurant at some point.   Yeah, I don't get out much.

Rams

[Serk]

I've got a better question - what can be done to defend against your files being encrypted in the first place ?

Obviously - you need to shutdown SSH, TTY, and other remote access protocols for originations outside the network (goodbye remote access - or at the least it needs to be hardened greatly so it can't be spoofed). RSA (both fob and non-fob) could help, but is not a perfect answer either. (Can you tell I've worked in the industry before ?).

And in the era where people are more and more working remotely that's just not feasible (I live ~1000 miles form the data centers I work at).

It's a layered approach, there is no one magic bullet: Good, staggered backups, good basic security policies, access levels being restrictive so that people only have as much access as they need, good network surveillance and scanning, as you mentioned a two factor authentication system (Like RSA tokens, text back systems, physical smart card IDs, etc) and the one that's most often overlooked until recently, and is getting to be annoying now is training of your employees...

(Annoying in that many places hire fake spear phishers to try to trick employees into clicking the link, if you click the link congratulations, you just got yourself two days of mandatory security training...)

Many of these get in with spear phishing, and many people have happy mouse and click way too easily, giving "them" the entrance into the network they need.

[Reb]

As an industry insider with many friends and colleagues at various enterprises, both private and governmental, this issue is FAR more common than you think, most places just try to keep it quiet....

IMHO, at some point we need to start using special forces teams to take these lowlife scum out, that's the only thing that might stop them, or at least make them think twice about it.

Deere John requires several training courses on the "what to do" if a ransom for information is ever requested. We get several Phishing email sent to use monthly for training purposes. I wonder just how many times this happens to various companies in the US on a weekly or monthly basis.

[scooperhsd]

When I was doing this - everybody in IT admin HAD 2 days of security training before they could start doing production work, and those who admined the security systems (Sophos and more) got more than that.

But in general - the approach really hasn't changed in 5 years - it's just that the bad guys are getting in easier (through the user community).  Better training of the user community would help alot. SOmething like running a petroleum pipeline should be air-gapped from the internet. There's a world of difference between operational and admin functions in a business like that.

[Wizzard]

I work for a very large company and we get training all the time. And IT sends out fake phishing emails just to see who clicks on it and who reports it.
Very effective

[..]

Ripple effect will affect a lot of Maggie Valley this weekend.


CANCELED due to gas supply problems.

May 14 & 15 KKOA Icons of Hotrodding Festival

The 1950s and 1960s Hotrod and Custom Car, Truck & Van event for 1969 and older models, 50s & 60s music, Automotive & Vintage Vendors, Pin-stripers, Food Vendors, Judging with Awards & Trophy presentation.

That's a lot of $$$$$ vanished for the local community.

[Wizzard]

Just saw on the news that colonial paid 5 million in ransom.
https://www.msn.com/en-us/news/us/colonial-pipeline-paid-hackers-nearly-5-million-in-ransom-sources-say/ar-BB1gHobz?li=BBorjTa&ocid=U508DHP

[F6Dave]

I read that gas sales were far above normal after the shutdown was announced, as people topped off their tanks and filled up every gas can they could find. There was actually enough fuel in storage at stations and other locations to get through the week if people had followed their normal buying patterns. So if there wasn't so much media attention few if any stations would have run out.

This should be no surprise as most shortages are caused by panic buying and hoarding.

[hubcapsc]

This should be no surprise as most shortages are caused by panic buying and hoarding.

Ammo 

-Mike

[F6Dave]

This should be no surprise as most shortages are caused by panic buying and hoarding.

Ammo 

-Mike

Definitely.  There aren't any more people shooting at the range around here.  Maybe it's all getting used up on the streets of Chicago.

[Bighead]

This should be no surprise as most shortages are caused by panic buying and hoarding.

Ammo 

-Mike

Yeah I was at local dealer last Saturday and he had .223 and .556 with no limit. I bought 200 rounds but the guy in front of me bought 8 cases of 500! I know he aint shooting that much. 

[F6Dave]

This should be no surprise as most shortages are caused by panic buying and hoarding.

Ammo 

-Mike

Yeah I was at local dealer last Saturday and he had .223 and .556 with no limit. I bought 200 rounds but the guy in front of me bought 8 cases of 500! I know he aint shooting that much. 

What did you pay?

[LTD]

If its the Russians doing this I was trained in 1961 to get under my little wooden desk so the nuclear explosion wouldnt get me.  This is how I feel how moronic and ridiculous the current administration that is in charge now.  God help us we will need it from these fools.

[hubcapsc]

If its the Russians doing this I was trained in 1961 to get under my little wooden desk so the nuclear explosion wouldnt get me.  This is how I feel how moronic and ridiculous the current administration that is in charge now.  God help us we will need it from these fools.

I was reading an article today about how good it would feel to send some
cruise missiles over there. But, realistically, we don't need to start a war
because some people had to wait in a gas line. The article went on to say
that while the Russian government probably enjoys seeing the Russian
hackers cause trouble for us, they would not look favorably on the hackers
doing something so obnoxious that our government was force to retaliate.

"Russia’s version of SEAL Team Six is more likely to come bursting through
the door than ours is."

-Mike