frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

https://www.nytimes.com/2026/08/01/us/politics/iran-cyberattack-water-systems.html
39•jbegley•1h ago

Comments

malcolmgreaves•51m ago
> “I think Minnesota is behind it,” Mr. Trump said on Friday in response to a reporter’s question about Iran’s possible involvement,

What a coward and a traitor to the American people.

baron816•37m ago
He knows he brought these attacks with his war, but he doesn’t take the blame for anything.
AnimalMuppet•10m ago
Either he knows and doesn't want to take the blame, or he doesn't know. I'm not sure which one is worse.
jeroenhd•7m ago
He stopped going to security briefings before, maybe he simply doesn't care to know.
puttycat•3m ago
> he brought these attacks with his war

I'm no Trump supporter and this war was a big mistake, but justifying a nation poisoning another's civilian water supply is a bit upside down.

vjvjvjvjghv•16m ago
It was probably the same (imaginary) people who damaged the lining of the Reflecting Pool.

I think we should think about making blatant lies by politicians a crime.

lysace•51m ago
The Federal Bureau of Investigation (FBI) and Environmental Protection Agency (EPA) are issuing this Public Service Announcement (PSA) to warn critical infrastructure asset owners and operators that malicious cyber actors (MCAs) are conducting cyber attacks targeting Operational Technology (OT) devices, including Rockwell Automation/Allen-Bradley Programmable Logic Controllers (PLCs), specifically MicroLogix 1100 and 1400 series. Since 27 July 2026, Water and Wastewater Sector (WWS) utility companies in at least seven states have reported incidents to the FBI, and some of that activity degraded water operations. While the FBI has only observed this behavior with the referenced Rockwell PLCs, similar considerations should also be made with other branded PLCs.

After remotely accessing internet-facing devices, the actors changed the IP addresses and passwords, resulting in a loss of monitoring and control functionality. To reduce the risk of compromise, the FBI and EPA recommend removing PLCs from direct internet exposure via secure gateway and firewalls, setting up strong, unique passwords, and utilizing an access control list (ACL) to allow only authorized communication between expected control system devices.

https://www.fbi.gov/investigate/cyber/alerts/2026/malicious-...

radicality•12m ago
Did they literally just leave the water supply plant management software out available on the open internet? Hard to even call this a hack!
BoardsOfCanada•37m ago
https://archive.is/fa2Xj
phendrenad2•25m ago
Is this the true reason for the cyclosporasis outbreaks?
mannanj•23m ago
If I was in a power position, I could theoretically channel this water into my own private reservoirs and locations like private land, bunkers, etc to weather a disruption, and blame Iran and it would be really hard to validate.

I mean if I was in a power position I would have also disrupted those in positions who would be validating me, made journalism much harder and have algorithms with LLM-enhanced astroturf accounts running to label any questioning of the official narrative as conspiratorial or tin-foil hat.

I would probably be on sites like this downvoting people who said things like this. Yes. That's how I would do it. edit: Oh I might even consider channeling that water to my data center friends!

maxerickson•18m ago
You know water is kind of big right?
irishcoffee•16m ago
I understand being mad, I also get mad.

This is a bit unhinged.

firefax•20m ago
Wasn't there a Defcon or Derby talk about this years back? (The insecurity, not the Persian angle)

Struggling for a source.

Guy had the energy of that one Simcity 2000 character who bugs out if you cut back on funding that you'll regret it. Early twenty aughts IIRC?

bradly•9m ago
Not sure about defcon, but Buckminster Fuller wrote waay back in the sixties about the New York's vulnerability to a fresh water supply attack.

If you haven't read it Operating Manual For Spaceship Earth is one of my favorite books.

https://archive.org/details/operatingmanualforspaceshipearth...

https://archive.org/details/operatingmanualforspaceshipearth...

cineticdaffodil•15m ago
I think this landscape is littered with simulated systems as honeypot. Once you have it a normal adversary would stop searching, besides regular checks that the gun still works.
krautburglar•11m ago
They always point to a state actor to skirt liability for their own shitty IT work. Then the dim evil journalists swallow it whole, later regurgitating it for their eager little baby bird subscribers.

If there were actual penalties for rawdogging a PLC (or any other control system) on the internet, shit like this wouldn’t happen.

dylan604•5m ago
<adjustsTinFoilHat> The Trump plan in Iran is not working. Gotta make them look like the evil bogeyman to get people to support further action.
neves•6m ago
In this war initiated by USA and Israel, it isn't Iran who's attacking civil targets.

Cursor removed cost information from the usage page and CSV export

https://forum.cursor.com/t/usage-page-to-token-amount-what/167153
71•EugeneOZ•1h ago•26 comments

The Art of 64-bit Assembly

https://nostarch.com/art-64-bit-assembly-v2
81•0x54MUR41•2h ago•40 comments

I ♥ RSS – A directory of people who love RSS

https://andrewshell.org/2026/07/i-%e2%99%a5-rss/
9•speckx•10m ago•5 comments

RipGrep musl binaries occasionally segfault during very-large searches

https://github.com/BurntSushi/ripgrep/issues/3494
167•throwaway2037•4h ago•96 comments

Explorative modeling: Train on the best of K guesses

https://alexiglad.github.io/blog/2026/explorative_modeling/
18•DSemba•1h ago•2 comments

Pgtestdb's template cloning approach to testing is fast

https://brandur.org/fragments/pgtestdb
16•brandur•1h ago•3 comments

Kaisel – Routes as Values. Dart 3 Native Router for Flutter

https://kaisel.dev/
5•TheWiggles•17m ago•0 comments

I Fired My AI Assitant

https://chreke.com/posts/i-fired-my-ai-assistant
5•speckx•24m ago•0 comments

A Surveillance Treaty in Disguise: Canada Signs UN Cybercrime Convention

https://www.michaelgeist.ca/2026/07/a-surveillance-treaty-in-disguise-the-trouble-with-canadas-qu...
137•iamnothere•2h ago•69 comments

DNS propagation checker that shows the results as a box of 24 donuts

https://donutdns.com
3•axeldelat•10m ago•2 comments

Elevators

https://john.fun/elevators
1509•Jrh0203•1d ago•376 comments

Register deprivation: spills and runtime under forced register scarcity

https://rjp.io/blog/2026-07-19-register-deprivation
6•surprisetalk•2d ago•0 comments

Linux on ESP32

https://github.com/GrieferPig/esp32-s31-linux
39•boveyking•3d ago•14 comments

Charlie Stross – On the non-use of AI in my writing process

https://www.antipope.org/charlie/blog-static/2026/08/on-the-non-use-of-ai-in-my-wri.html
60•jwx48•4h ago•52 comments

Study uncovers lost 'golden age' of languages

https://news.yale.edu/2026/07/23/study-uncovers-lost-golden-age-languages
25•gmays•2d ago•10 comments

Kontigo (YC S24) Is Hiring

https://www.ycombinator.com/companies/kontigo/jobs/xAo6tMt-founding-engineer
1•jecastillof•5h ago

Manual: •.,:;?·

https://type.today/en/journal/dots
88•behnamoh•2d ago•15 comments

Flint: A Visualization Language for the AI Era

https://microsoft.github.io/flint-chart/
221•vinhnx•14h ago•64 comments

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

https://www.nytimes.com/2026/08/01/us/politics/iran-cyberattack-water-systems.html
39•jbegley•1h ago•23 comments

GitHub has alternatives, but no replacement

https://lalitm.com/post/github-alternatives/
63•lalitmaganti•1h ago•76 comments

Ask HN: Any tips for a college freshman enrolled in computer science?

21•NotParth11•1h ago•33 comments

RamenHaus

https://ramen.haus/
167•oler•8h ago•82 comments

Solid Queue 1.6.0 now supports fiber workers

https://github.com/rails/solid_queue/releases/tag/v1.6.0
68•earcar•9h ago•24 comments

qm – Multiplayer agent harness for work

https://github.com/yc-software/qm
627•tosh•22h ago•146 comments

A tiny holdout building in the middle of Macy’s is back in view

https://ephemeralnewyork.wordpress.com/2026/07/27/hidden-by-billboards-for-over-100-years-the-tin...
145•donohoe•3d ago•41 comments

Ten advances in mathematics and theoretical computer science

https://openai.com/index/ten-advances-in-mathematics/
324•milkshakes•9h ago•209 comments

Astro Loop

https://pubdeer.com/
21•BaseBaal•4h ago•4 comments

How to Exist

https://www.raptitude.com/2026/07/how-to-exist/
315•walterbell•16h ago•186 comments

Software for One

https://www.ajwaxman.com/writing/software-for-one
195•awaxman11•3d ago•199 comments

The First Idempotency Key

https://hatchet.run/blog/first-idempotency-key
28•abelanger•4d ago•5 comments