Re: More on SCADA
I mostly agree, but my point is that John Random Hacker is not going to know anything about gas turbine fired power stations. A disgruntled insider or an engineer who worked on the systems *would* know enough to do lots of damage, but in that case would they need to hack in?
The pool of people who can usefully hack into systems, SCADA or otherwise, is small. The pool of people who know how to tweak SCADA systems in a bad way is also small. The intersection of these is necessarily even smaller - and (thankfully? hopefully?) the number of those who actually wish to cause harm is even smaller.
Also, a malicious SCADA hacker who knows how to mess up sewage plants probably can't affect traffic lights, or nuclear plants. We're just lucky enough that the intersection of two rare skill sets and malicious intent is pretty small.