ORbituary

This article is idiotic.

$5 cost. 25,000 pounds. BUT OVER WHAT FUCKING DISTANCE?

$5 gets me 23 miles in my Delica. It gets me 100 miles on my motorcycle. It gets me 30 miles in my Porsche 914. But the article says nothing about distance.

I don’t need attraction, just the illusion thereof.

10 people per site, per incident, at 50-70 hours/week.

It’s thankless work and the people in control don’t typically take on contractors. They underpay the actual IR staff. That’s why I left the industry. It’s a big buddy-system network. Really fucked.

Whatever. I worked the fucking case. The infiltrators were Russian. After that, it’s a political or financial negotiation.

I am repeating what I said elsewhere on a different comm:

I call FULL bullshit on this being Iran.

I personally worked on the cybersecurity incident that happened to St Paul municipal and water systems last year as the Incident Response Technical lead.

The threat actors were not Iranian then. They were Russian.

I personally rebuilt most of their networks, VMware hosts, storage, and servers. The majority of the VMware environments did not have config backups and were running 5 and 6 branches of VMware, only two had 7+.

Their network was insecure. They had IPSEC VPNs between the various location, but there was no further security in that respect. Their firewalls were not being kept up. AAAAND… I warned them that we thought they were still compromised.

In fact, the forensics team called them out as being clean on a group call one week into the incident, but while we were on the call with leadership, they got RE-infected.

I had my team compile a massive set of recommendations for them and I wrote the report. Water Systems specifically. They did not listen to us, apparently. The forensics team also did this.

They had FBI, national guard (fucking incompetent), and law enforcement (useless) in all meetings.

If they got into Water, they’ll get back into city and municipal again. I guarantee it.

This is not Iran. It’s the fucking incompetence of city government and Russian threat actors.

Waterfox. LibreWolf. Fennec.

Just use a fork; rawdogging Firefox is already a bit crazy.