Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Hass and Associates International Reviews | Researchers Hack Building Control System at Google Australia Office

123 views

Published on

Two security researchers recently found that they could easily hack the building management system for the corporate giant’s Wharf 7 office overlooking the water in the Pyrmont section of Sydney, Australia.
Google Australia uses a building management system that’s built on the Tridium Niagara AX platform, a platform that has been shown to have serious security vulnerabilities. Although Tridium has released a patch for the system, Google’s control system was not patched, which allowed the researchers to obtain the administrative password for it (“anyonesguess”) and access control panels.
The panels showed buttons marked “active overrides,” “active alarms,” “alarm console,” “LAN Diagram,” “schedule,” and a button marked “BMS key” for Building Management System key.
There was also a button marked “AfterHours Button” with a hammer on it.
The researchers did not test the buttons or disrupt the system, which was running off of a DSL line, but reported the issue to Google.
“We didn’t want to exercise any of the management functionality on the device itself. It’s pretty fragile, and we don’t want to take that thing down,” said Billy Rios, a researcher with security firm Cylance, who worked on the project with colleague Terry McCorkle.
hass and associates international reviews
Further Info:
http://www.wired.com/threatlevel/2013/05/googles-control-system-hacked/

  • Be the first to comment

  • Be the first to like this

Hass and Associates International Reviews | Researchers Hack Building Control System at Google Australia Office

  1. 1. Researchers Hack Building ControlSystem at Google Australia OfficeHass and Associates International Reviewshttp://www.wired.com/threatlevel/2013/05/googles-control-system-hacked/
  2. 2. Two security researchers recently found that they could easilyhack the building management system for the corporategiant’s Wharf 7 office overlooking the water in the Pyrmontsection of Sydney, Australia.Google Australia uses a building management system that’sbuilt on the Tridium Niagara AX platform, a platform that hasbeen shown to have serious security vulnerabilities. AlthoughTridium has released a patch for the system, Google’s controlsystem was not patched, which allowed the researchers toobtain the administrative password for it (“anyonesguess”)and access control panels.http://www.wired.com/threatlevel/2013/05/googles-control-system-hacked
  3. 3. The panels showed buttons marked “active overrides,” “active alarms,”“alarm console,” “LAN Diagram,” “schedule,” and a button marked “BMSkey” for Building Management System key.There was also a button marked “AfterHours Button” with a hammer on it.The researchers did not test the buttons or disrupt the system, which wasrunning off of a DSL line, but reported the issue to Google.“We didn’t want to exercise any of the management functionality on thedevice itself. It’s pretty fragile, and we don’t want to take that thingdown,” said Billy Rios, a researcher with security firm Cylance, who workedon the project with colleague Terry McCorkle.hass and associates international reviewshttp://www.wired.com/threatlevel/2013/05/googles-control-system-hacked

×