We are dropping the ball |

I sometimes (ok, oftentimes) wonder why folks keep letting things fall through the cracks. Sure, I can blame it on the Turtle, who wants no legislation passed, just wrong wing judges appointed. But, even he must care about folks who live in his state. Or, not, given the conditions that obtain in Kentucky right now…

Way, way back in 2001, right after the terrorist attacks, we were gung ho about hardening our infrastructure against attack. Of course, we routinely see how well that’s worked out for our power system. (Not to mention the Texas Railroad Commission [that is IT’S name] that monitors [certainly does not regulate] the power utility. Who let the entire Texas grid fall apart during a storm, leaving folks powerless and without drinking water.)

It turns out over the past 20 years, we’ve made part of this problem even worse. Most of our water systems are now digitally connected, and the water processes are automated. And, municipalities are following the GOP way (down the tubes is more like it) of farming out the management to private industry.

Which means security is no longer the purview- or the responsibility- of the municipality. Nope, that’s also handled by private industry. Who doesn’t want to spend any money that would detract from their bottom line.

Oldsmar Florida Water Plant

Which would explain how The Oldsmar, Florida water plant manager was surprised a month or so ago to see a stranger adjust the water system to add sodium hydroxide (lye) to the drinking water- 100X the proper dosage. That would maim someone who touched the water or killed those who drank from it.

At least this operator recognized the danger and disconnected the hacker from the water system.

The problem is the Pinnellas Park facility is not an anomaly. This is the way it goes all around America nowadays. Moreover, this wasn’t the first time a utility was hacked.

No, Israel recognized that some enemies had managed to infiltrate the national water treatment systems in 2020. So, the National Cyber Directorate ordered all water systems to develop new, more secure passwords immediately.

Back in 2001, I noted reservoirs in Portland (OR), Washington (DC), and about 10 others that had small fences to keep out visitors. Like me throwing a container of poison over the fence into the reservoir would be deterred by a fence. (Or the fact that I could ride my bike right up to the end of the runway at National Airport in DC and stand there for hours with nary a security agency coming to ask what I was doing. (Imagine if I had a missile…)

It’s why we were supposed to install sensors in our distribution networks. To see if power is being degraded, if the water quality is not of sufficient quality- before the customer (i.e., citizen) is negatively impacted.

Ok, Joe… It’s time to get those infrastructure rules and systems going now.