http://xs-sniper.com/blog Thoughts on Security in an Uncivilized World… Mon, 16 Jan 2012 04:36:16 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://xs-sniper.com/blog/about-billy-rios/comment-page-1/#comment-1954 Security researcher blows whistle on gaping Siemens’ security flaw ‘coverup’ | shadowgroup.co.cc Sat, 24 Dec 2011 01:50:30 +0000 #comment-1954 [...] The flaw is an authentication bypass that allows anyone to log in to a Siemens SIMATIC industrial control system by using the password “100″ or by predicting a “random” string of session-authentication numbers that actually change by only one digit from session to session, according to a posting in the personal blog of security specialist Billy Rios. [...] [...] The flaw is an authentication bypass that allows anyone to log in to a Siemens SIMATIC industrial control system by using the password “100″ or by predicting a “random” string of session-authentication numbers that actually change by only one digit from session to session, according to a posting in the personal blog of security specialist Billy Rios. [...]

]]>