Category Archives: Security

Coal Risks

I recently read a 58 page report by the U.S. Government Accountability Office from May 2008 related to the Tennessee Valley Authority that calls them vulnerable to disruption by cyber attack:

Until TVA fully implements security program activities, it risks a disruption of its operations as a result of a cyber incident…possibly resulting in loss of life, physical damage, or economic losses.

Apparently only one in four of their workers was given the required security training, while almost nine million people in the Tennessee Valley depend on the TVA for energy. You will often hear me bring up these details in presentations about the NERC Critical Infrastructure Protection (CIP) standards.

Meanwhile, I just noticed that the first action by President Obama’s Environmental Protection Agency (EPA) Administrator Lisa Jackson is on the TVA for a Coal Ash spill:

The December spill spurred increased attention to coal-waste issues around the country. The 1.1 billion gallons of slurry flooded more than 300 acres of land and damaged homes in the area surrounding the Tennessee Valley Authority pond, and clean-up could cost up to $825 million.

That is ten times the Exxon Valdez spill. What is most amazing about the new direction of the EPA is that it actually seems to be talking about these environmental issues in terms of National Security:

“Environmental disasters like the one last December in Kingston should never happen anywhere in this country,” said EPA Administrator Lisa Jackson in a statement. “That is why we are announcing several actions to help us properly protect the families who live near these facilities and the places where they live, work, play and learn.”

After the TVA spill the New York Times ran a “Collapse of the Clean Coal Myth” story last January.

It was an accident waiting to happen and an alarm bell for Congress and federal regulators. Senator Barbara Boxer of California noted that coal combustion in this country produces 130 million tons of coal ash every year — enough to fill a train of boxcars stretching from Washington, D.C., to Australia. Amazingly, the task of regulating the more than 600 landfills and impoundments holding this ash is left to the states, which are more often lax than not.

Compare and contrast the GAO report with the coal ash issues and you start to see how security is really a process and a state of mind influencing behavior more than any particular technology or control. Let’s hope the GAO warnings on Cyber Security, along with the NERC compliance deadlines, give enough traction to TVA security management to prevent an even larger disaster.

A car that can fly

CNET News has reported that a start-up is really taking off. March 6th saw the maiden voyage of a car that can actually fly:

Terrafugia describes its Transition vehicle as a “roadable aircraft” and is pitching it in part as giving private pilots an easy travel alternative when bad weather makes flying a bad idea, or simply to avoid having to take a separate car to the airport. Also, in the eyes of the Federal Aviation Administration, the vehicle falls into the light sport aircraft category.

Delivery could start as early as 2011. It will be interesting to see how regulators figure out the safety standards for these vehicles, since they seem to struggle over things like the number of doors and seats in conventional cars. Unfortunately it’s a gasoline engine, but otherwise seems like yet another reason to finish my pilot’s license this summer.

PodCast: Cyber Security and NERC CIP 002 through 009

My second podcast has been posted, discussing security and compliance in the context of North American Bulk Power Cyber Security Standards.

In related news, the cover story in the April 2009 Popular Mechanics is “Cyber Attack: Weapon of Mass Disruption”

Hackers could use the very computer systems that keep America’s infrastructure running to bring down key utilities and industries. Just how worried should we be?

[…]

The next world war might not start with a bang, but with a blackout.

Hope you enjoy the podcast.

Wizard of Oz Secrets

The BBC has picked up the “secret” story of the Wizard of Oz:

Baum published the book in 1900, just after the US emerged from a period of deflation and depression. Prices had fallen by about 22% over the previous 16 years, causing huge debt.

Farmers were among those badly affected, and the Populist political party was set up to represent their interests and those of industrial labourers.

The US was then operating on the gold standard – a monetary system which valued the dollar according to the quantity of gold. The Populists wanted silver, along with gold, to be used for money. This would have increased the US money supply, raised price levels and reduced farmers’ debt burdens.

Since originally I am from Kansas, and enjoy reading history, I have always been fascinated by the code and how few people were able (willing?) to crack it, even with a publicly available reference.

This is how I always knew the story. So whenever someone brings up the 1939 film version with those strange red slippers I feel compelled to explain to them why a ruby standard makes no sense.

…Littlefield’s theory has been hotly debated. He believed the characters could represent the personalities and themes of the late 1800s, with Dorothy embodying the everyman American spirit.

US political historian Quentin Taylor, who supports this interpretation, says: “There are too many instances of parallels with the political events of the time.

“The Tin Woodman represents the industrial worker, the Scarecrow is the farmer and the Cowardly Lion is William Jennings Bryan.”

Great stuff. Perhaps the strangest chapter of all is more recent. Bob Dole, the son of staunch populists in rural Kansas, ran for President as a conservative Republican who favored corporate wealth and trickle-down economics, the opposite of his roots.

Update: the ruby slippers from the film are going to be auctioned for a lot of money to someone who probably doesn’t know and/or doesn’t care that they are meant to be silver.