Colonial Pipeline stopping all operations due to cyberattack

Status
Not open for further replies.
So, “they” are saying it’s Ransomware? An employee watching pornographic videos online? I have a hard time believing anything anymore. I have my theory however, posting it will surely shut down this thread.

You're thinking of malware. Ransomware is something used by hackers to hold a database, server, or whatever hostage and demand a ransom to release it.
 
You're thinking of malware. Ransomware is something used by hackers to hold a database, server, or whatever hostage and demand a ransom to release it.

Malware is a pretty broad category that includes viruses, worms, and ransomware. My dad freaked out when the laptop I bought for him (a long time ago) stopped working due to ransomware. I told him it would make more sense to just buy a new machine than pay someone $250. It was eventually cleared out and worked again.
 
Folks if I have to remove another post for political commentary or conspiracy theories this will be locked.
There wasn’t anything conspiracy about my post at all. Nothing really political either minus the President being briefed on it, which was the last sentence of my post and not the main point.

If me posting about high gas prices was conspiracy as well as the hackers causing the line to be shut off, I guess I’m at a loss.
 
Does anyone understand why they had to shut the pipeline down? The threat I assume was to shut the line down through hacking, so the solution was to shut it down? Also why are these things on the internet anyway, is it required, or is it just fashionable?
If you have a CNC milling machine in your shop, you have complete control over it, no one on the internet has access to it's operation.
 
although I'm not sure how it gets there since it's across a narrow body of water.
Directional drilling UNDER the water. Saw them drill under the Ohio R several years ago, the drill went down on the Ohio side and came up on the Kentucky side. Missed the X on the ground by 1 FOOT!
 
How about Kinder Morgan/Plantation?
It took me a while to open that attachment, not sure why.
That's the same pipeline. Kinder Morgan just schedules on it, just like several other oil refineries in Texas.
There are actually two lines that make up the majority of the Plantation, a gasoline side, and a distillate side. It's possibly, but not economically sound to run gasoline behind jet fuel, but if your pushing it with a batch of LSD, your much safer product wise.
 
Does anyone understand why they had to shut the pipeline down? The threat I assume was to shut the line down through hacking, so the solution was to shut it down? Also why are these things on the internet anyway, is it required, or is it just fashionable?
If you have a CNC milling machine in your shop, you have complete control over it, no one on the internet has access to it's operation.
This is USA, I'd bet $20 it is to avoid liability lawsuit in case there's a spill.
 
It took me a while to open that attachment, not sure why.
That's the same pipeline. Kinder Morgan just schedules on it, just like several other oil refineries in Texas.
There are actually two lines that make up the majority of the Plantation, a gasoline side, and a distillate side. It's possibly, but not economically sound to run gasoline behind jet fuel, but if your pushing it with a batch of LSD, your much safer product wise.

It's not the same pipeline, but it does go roughly the same route. I found a map that shows it, with Colonial in blue and Plantation in red.

main.png
 
This is USA, I'd bet $20 it is to avoid liability lawsuit in case there's a spill.
They already had a nice gasoline spill just a few years ago, being on the internet didn’t seem to stop it. As small fry, it really makes no difference what we think does it. It’s just wasting time while the weeds need pulling in the yard. $20?
 
Does anyone understand why they had to shut the pipeline down? The threat I assume was to shut the line down through hacking, so the solution was to shut it down? Also why are these things on the internet anyway, is it required, or is it just fashionable?
If you have a CNC milling machine in your shop, you have complete control over it, no one on the internet has access to it's operation.

So they have "damages" in case they find who's responsible.
 
So they have "damages" in case they find who's responsible.
Don't get it. They turned the line off not the hackers. They didn't have to shut the line down, it was "precaution." All done, too much time, small fry talking aren't changing anything.
 
They already had a nice gasoline spill just a few years ago, being on the internet didn’t seem to stop it. As small fry, it really makes no difference what we think does it. It’s just wasting time while the weeds need pulling in the yard. $20?
Nope, that's a spill in the past, they want to avoid another spill like PG&E shut down the grid when there's a high risk of wild fire due to high wind, they cannot get a waiver from the CPUC so they just shut down the grid to avoid another fire risk.
 
Don't get it. They turned the line off not the hackers. They didn't have to shut the line down, it was "precaution." All done, too much time, small fry talking aren't changing anything.
They don't lose much if they shut down the line, people will still want to fill up gas eventually and use their pipeline to transport. If they just push through the line and something happen, they will be sued and their insurance premium will go up.

So, nothing to lose with nothing to gain, which one would you pick if you were the company?
 
Why doesn't everyone ask this question?
Physical security is the BEST - and pat engineers down for jump drives.
A very securely ran system wouldn't even allow any thumb drive to work in any USB port on any computer on the system, or even allow thumb drives in the secure area.

As far as it having to be "on the internet" ... unless you have a stand-alone network, or have some insane encryption security system then a network can be vulnerable in some way. And employees are a weak link in the system ... all it takes is someone clicking on an email phishing link on the wrong system to introduce some malware.

Seems to me that every major infrastructure system needs to be audited for security, and there should be security standards that they all should follow.
 
They don't lose much if they shut down the line, people will still want to fill up gas eventually and use their pipeline to transport. If they just push through the line and something happen, they will be sued and their insurance premium will go up.

So, nothing to lose with nothing to gain, which one would you pick if you were the company?

It doesn't necessarily sound as if the physical infrastructure itself has shown any sign of being compromised. They seemed to have retrieved about 100 gigs of data that they're threatening to release. Not sure what it would really be other than trade secrets. I'm pretty sure that they have failsafes that allow them to manually shut down the operations or perhaps bring up limited sections online. Some reports are that they've started shipments again in a limited manner - North Carolina to Maryland. I would think they would want a working IT infrastructure that they would need to account for customer pickups.

I can't access their press release (they must be getting swamped) but I found an archive of it. Sounds as if they're able to deliver fuel that's already located at a fuel terminal/tank farm.

We can now report that Line 4, which runs from Greensboro, N.C., to Woodbine, Md., is operating under manual control for a limited period of time while existing inventory is available. As previously announced, while our main lines continue to be offline, some smaller lateral lines between terminals and delivery points are now operational as well. We continue to evaluate product inventory in storage tanks at our facilities and others along our system and are working with our shippers to move this product to terminals for local delivery.
 
Status
Not open for further replies.
Back
Top Bottom