January 23, 2012, 11:49AM
Ryan Naraine on the Koobface Expose and SCADA 0-Day Disclosures
2 Comments
Dennis Fisher talks with long-lost Threatpost editor Ryan Naraine about the intricacies of the disclosure of the identities of the alleged Koobface gang members, whether we’ll see more of that kind of action and whether the recent trend toward disclosing 0-days in SCADA systems will continue.
*Podcast audio courtesy of sykboy65
Subscribe to the Digital Underground podcast on 
Recommended Reads
Commenting on this Article will be automatically closed on April 23, 2012.
Most Commented Stories
Newsletter Sign-up
Take Our Poll
Do researchers have a moral responsibility to withhold SCADA vulns?
Yes, they shouldn't be published until vendors fix them.
7%
Vendors should be notified, and given a reasonable amount of time to resolve.
51%
Forget vendors, let's break the Internet.
2%
SCADA vulns are FUD.
0%
You can't blame researchers for pointing out shoddy software.
41%
Total votes: 61
Follow Threatpost
 |  |  |  |
| Tumblr |
Comments
The Reuters quote was mistaken. They did not ask the correct RU group that was investigating the Koobface crew anyway. It's like asking the Sacramento police if they are working the RSA APT crew.
Reuters doesn't know what they are doing when tracking down foreign LE.
Agreed, ICS-CERT is doing a fine job.
Municipalities should be demanding that Siemens, GE and the rest start hiring vuln researchers to review their SCADA code and designs. Clearly, they are sitting on their hands, pockets full of cash.
Post new comment