LHC Computer System Hacked

The LHC was hacked this past week as scientists at CERN began preparing the collider for its very first experiments to peer into some of the most enduring mysteries of particle physics.

A group calling themselves the Greek Security Team managed to gain access to computers controlling both CERN's LHC website and the computer in control of the Compact Muon Solenoid detector, one of the main detectors in the LHC.

Thankfully, the intrusion was detected before the hackers could gain access to the main control computers for the LHC and start banging protons together will-nilly, but they left their mark on CERN's website, proclaiming "We're pulling your pants down because we don't want to see you running around naked looking to hide yourselves when the panic comes."

The attack calls into question the security procedures CERN has in place to protect against attack. For me, the best defence would be for all the computer control components for the entire LHC to have no physical connection to outside networks at all, much like the servers of many top intelligence agencies around the world.

You can never completely predict what tools hackers will have to get through your security defences, but if they can't physically connect to your systems, then they can't even attempt to break through.

The fact that the computer system controlling one of the main LHC detectors had such a close network connection with the web server for the web page is mind-boggling from security perspective.

As it stands, the motivations behind the hacker group seem white-hat - trying to make CERN aware that the vulnerability exists before malicious hackers find out.

Hopefully CERN learns from this mistake and improves security. Find those bosons!

Large Hadron Collider's Hacker Infiltration Highlights Vulnerabilities [Wired]