US Nuclear Missile Silos Use Safe, Secure 8" Floppy Disks 481
Hugh Pickens DOT Com (2995471) writes "Sean Gallagher writes that the government built facilities for the Minuteman missiles in the 1960s and 1970s and although the missiles have been upgraded numerous times to make them safer and more reliable, the bases themselves haven't changed much and there isn't a lot of incentive to upgrade them. ICBM forces commander Maj. Gen. Jack Weinstein told Leslie Stahl from "60 Minutes" that the bases have extremely tight IT and cyber security, because they're not Internet-connected and they use such old hardware and software. "A few years ago we did a complete analysis of our entire network," says Weinstein. "Cyber engineers found out that the system is extremely safe and extremely secure in the way it's developed." While on the base, missileers showed Stahl the 8-inch floppy disks, marked "Top Secret," which is used with the computer that handles what was once called the Strategic Air Command Digital Network (SACDIN), a communication system that delivers launch commands to US missile forces. Later, in an interview with Weinstein, Stahl described the disk she was shown as "gigantic," and said she had never seen one that big. Weinstein explained, "Those older systems provide us some, I will say, huge safety, when it comes to some cyber issues that we currently have in the world.""
Security through obscurity (Score:4, Insightful)
Those older systems provide us some, I will say, huge safety, when it comes to some cyber issues that we currently have in the world.
No, they don't. Claiming obsolete hardware and software is more secure is just a thinly veiled security through obscurity claim. There are other claims here; the machines are airgapped, and I suspect that the physical site security is pretty good; but the use of old software and hardware adds nothing at all to that.
Not Internet Connected (Score:5, Insightful)
The silo wins the security battle through two things:
1) Physical security
2) Not being on the Internet
Yes, it's old stuff. Who cares? Nobody can touch it, and it's not on the global network. Not much else is required.
Re:Security through obscurity (Score:5, Insightful)
You have to admit, the old hardware makes it hard for some random officer to violate the air gap by plugging in his USB-using cellphone.
Re:Security through Antiquity? (Score:5, Insightful)
Not so much. This is actually more along the lines of "If it aint broken, don't fix it".
Some systems are so deeply entrenched that replacing them often becomes a nightmare and you are not necessarily gauranteed with a more stable, robust replacement system.
Even though some of these systems are old, they are often very very stable.
Re:Security through Antiquity? (Score:5, Insightful)
Sure, it's terrible energy-inefficient, and the support costs must be through the roof, but i'm more comfortable knowing that the missile control systems are running on pre-internet (and even ARPANET?) systems. It means the many enemies of the US cannot just hack into the missile control systems and start armageddon. No internet, no hacking, no problem.
Re:Not Internet Connected (Score:5, Insightful)
The silo wins the security battle through two things:
1) Physical security
2) Not being on the Internet
3) Armed guards with instructions to shoot on sight.
They are to security what rubber hoses are to cryptoanalysis.
Secure against Cylons (Score:4, Insightful)
Re:Penis jokes aside... (Score:5, Insightful)
It was interesting, that also in BSG they claimed that the fleet did have much newer starships - the Galactica was being decommissioned due to being obsolete.
All those other starships in the fleet perished quickly due to network infiltration by the Cylons. The only remaining operational hardware was the non-networked stuff.
Re:Security through obscurity (Score:5, Insightful)
Re:Security through obscurity (Score:5, Insightful)
Actually, you're wrong.
These old networks are airgapped in so many ways, not just by removing the CAT6 to the Internet. The disks themselves are airgapped, as they're not constantly in systems which can read them; likewise, there's a huge airgap between a spy and a reader: if the disks are stolen, they need a huge honkin' machine to read them, or they need to use base facilities which have cameras and guards. Further, the media is low-density: you need to physically transport a truckload to get what fits on a modern CD-R, much less on a 64GB microSDHC.
Just as with 1000 iteration hashing, these large systems impose a time limitation on mass copy. If you want to access this top-secret file, it's merely 15kB of text stored on a 40kB disk. If you want to steal the wealth of information archived here, you must find the disks you want and then copy each of them. If you want it all, you must spend weeks if not months copying each individual disk to a portable flash drive.
There are some real difficulties involved in stealing this much data in this form. That provides a layer of security by requiring high-visibility or excessively slow methods of data access, both of which sharply increase risk in espionage. You are more likely to catch and interrupt any significant espionage attempt in this model than in a model where we put all our stuff on a USB drive that's taken to a modern machine in a secure room.
Needs an update badly (Score:3, Insightful)
This is way out of date. We need to put our missiles in The Cloud, and re-do the launch control UI so it looks pretty. Get on it right away, I expect nothing less than $10 billion spent for a non-working system. Boy though, the guy wearing the fedora will think it's the best thing in the world. It is good for him too. It'll pay off most of his student debt.
Re:Security through Antiquity? (Score:4, Insightful)
This sounds a whole lot like security through obscurity. Not that obscurity isn't good if it makes things harder, but it would be a mistake to rely upon it in any way.
Given the agents you are trying to secure against - i.e. foreign governments - the resources to acquire and develop for 70s and 80s era equipment are easily obtainable.
If the technology being old leads to a lack of developers familiar with the equipment and software, it could quickly become a significant hindrance to good security.
Re:Sounds like we have a new phrase... (Score:4, Insightful)
Instead of "Security through obscurity", we now have "Security though obsolescence."
Actually, obsolete is in the eye of the user. Sure, you wouldn't want that as a computer you use for watching videos; but if it reliably does its designed job than it is not obsolete. Old hardware has an advantage; it has been tested and debugged and known to work as planned. Replacing it would involve a lot of work for little gain if the old stuff works; and you run the risk of introducing new bugs and problems that could cause serious problems. A system designed today probably wouldn't rely on ancient hardware; however as long as you can keep it working replacing it is neither cost nor operably beneficial. Security is an added benefit.
Re:Penis jokes aside... (Score:4, Insightful)
Correlation != Causation. You could just as easily say that he cured the budget deficit and created more jobs than any president in the previous hundred years because he had a better equipped office.
Re:Not Internet Connected (Score:5, Insightful)
Those silos are protected by the most dangerous weapon system in the US Military inventory: A bored 18 year old with an automatic weapon.
Re:Security through Antiquity? (Score:5, Insightful)
Its not security via obscurity because the real security doesn't rely on the lack of 8" floppies. The real protection is a) not being hooked up to the internet, b) lots of doors & guys with weapons standing between you and the control station. But I guess if some airforce commander throws a few bones to a dumb journalist and has a laugh about it back at the club with the boys, is that obscuring the real security?
Re:Security through obscurity (Score:5, Insightful)
At least they are no longer using a clay tablet reader.
I'll say one thing for clay tablets: few other formats just shrug when somebody burns your civilization to the ground...
Re:Penis jokes aside... (Score:4, Insightful)
If you take all that old stuff apart, little of it looks very hard to manufacture. And that's if you need to... most can probably be reconditioned or simply acquired from spares. Injection molded plastic will certainly get brittle, but making new 70s-era injection molded parts is not rocket science... if you even need them to be injection molded plastic. Machinable or rapid prototyped materials probably would work just fine. Remember that they don't need consumer-level cost effectiveness here.
Reality (Score:5, Insightful)
You find it surprising to find that a fictional world is built to accommodate the plot set in it? Seriously, fiction is a very, very, bad way to evaluate things for the real world.
Disclaimer: While I don't play a nuclear weapons technician on TV, I was one in real life. (Fire Control Technician (Ballistic Missiles) Second Class (Submarines), USN Submarine Service 1981-1991.) I've worked with weapons system components (both installed and spare) that were years and decades old, and have studied the issues as a civilian as well.
Actually, there's a number of downsides, most of which should be obvious with a few minutes serious thought:
Etc..., etc...
The USAF claiming that older tech makes them more 'safe' is just making lemons into lemonade. (And the situation is mostly a product of how far the missiles are from being a priority.) Mostly, I evaluate the claims as a way to deflect attention from the number of serious incidents they've had recently and from their significant personnel problems.
Re:Not Internet Connected (Score:5, Insightful)
Re:Security through Antiquity? (Score:5, Insightful)
Since it is secure via remote hack and secure again a USB drop, then your only remaining option is a local intrusion.
That is when the guys with guns come in handy, and the military is good at that. :)
Are places like Ft. Hood secure? No. Is a nuclear missile silo secure? I dam well hope so...
If not, then I'd agree there is a problem.