Category Archives: Security

Homicide and Cupcakes

Mission Local discusses a new map that overlays cupcake shops with gang territory

Gangs and Cupcakes Map

I am disappointed that the overlay does not have homicide data mapped, since that is the underlying data that makes the story interesting.

Is the occasional shoot-out bad for business? To the clientele of the St. Francis Fountain, four blocks east on 24th and a hangout for the young and hip: No.

“This is the best place in town for breakfast,” said Tex, a small man in denim work clothes drinking coffee Thursday morning at the counter.

He feels safe in the Mission as a whole, though he’s been warned to be careful to not seem especially gay anywhere around the intersection of 24th and Mission. “What I was told was, there are these gangs from El Salvador, and to be in the gang you have to kill a queer.

The data on crime is publicly available, as I have written before. It might be easiest to map cupcakes to the 3D maps already created to show areas with peak crime.

Siemens Security Advisory (SSA-625789)

The Siemens CERT has posted a formal response to two CVSS level 7 vulnerabilities found in the SIMATIC S7-1200 CPU

  1. Replay attack. An attacker can sniff the traffic and then send it again to issue a command to the same controller.
  2. Denial of service for Firmware Version 02.00.02. Scanning the communication interface causes it to stop.

S7-1200

Workarounds, until the firmware is updated, are to disable unnecessary services and segment the network.

As a temporary measure, it is recommended to disable the web server. The ability to disable the web server is available in TIA Portal Version 11. In addition, it is important to ensure your automation network is protected from unauthorized access using the strategies suggested in this document or isolate the automation network from all other networks using an air gap.