SurvivalBlog.com

One advantage that we all now have in addressing a cyber attack is awareness. During heightened tensions with other countries, you will be aware of the potential risk that these devices may pose and utilize your electronic equipment sparingly. Knowledge is power.

Defensive measures have two considerations. The first thing to ask is, how should I protect myself. The second is, how should I ensure my equipment and my property is not causing damage to my country or the general population. The best defense is to eliminate dependency. Minimizing or reducing our need for electronic devices is the most practical and cost effective way to mitigate this risk. For me (and I assume most of you as well, since you are reading a blog site), these modern tools provide advantages that allow us to produce, perform, and recreate easier and faster and provide greater returns for the effort. I know I utilize my computers for work and play and do not look forward to a day where I may have to give them up. Still, it should be strongly considered, and minimizing devices as much as possible provides protection.

If you have such devices, you may be relying on your security software. While again, I am not an expert, talking to those who have an understanding, the primary functions of these programs is to prevent theft and to prevent system malfunction. These are commercial and civilian programs, and they would be of extremely limited use for sophisticated nation state supported military sponsored software. In addition, if these programs are part of your hardware or are included in your software but are having no ill effects on the system, your security software will most likely not be a target for them. We must also consider that the nation states, with significant resources available, may actually corrupt the makers of these products. China demanded access to Microsoft’s operating system, threatening to come up with an alternative and prevent Microsoft from entering the lucrative Chinese market. Microsoft, after a prolonged defiance, eventually complied and has been cooperating with the Chinese government ever since. As of 2015, the Chinese government has also announced a plan to move away from Microsoft and Apple operating systems for all government installations. Software is continually redesigned and evolving, and security software is not pre-cognizant and is always responding to the problem. While it provides a defense against rogue hackers and some criminal elements, it is very limited protection from a true cyber attack.

What are the other options aside from eliminating my devices? Richard Clarke’s book identified nation state defenses and proposed a bevy of new spending and regulation. These are all designed to protect government and infrastructure, and secondarily to protect the local citizenry by continuing active utilities and government. Most of his suggestions do not translate to the average individual, but those that did have been shared. I would love to hear comments from the other readers of this blog. I have a few ideas that I believe may mitigate some issues.

Power Down

The first is to power down and disconnect from the Internet on a regular basis, especially when you are away from your home or asleep. Most of our computers, if connected to the Internet, even while powered down may reactivate in the early morning hours to update their systems on a regularly scheduled basis in order to provide us with a better user experience. So, to truly power down, it should be disconnected from the power source, such as utilizing a power surge protector with a switch. Now, if you do have dormant malware in your system, it most likely will need an activation code to start the process for which it was designed; otherwise, these programs would be consistently revealing themselves. Powering down or disconnecting from the Internet should prevent or delay an activation code. Also, if a virus is on your system and propagating to other computers, you are minimizing the ability for it to accomplish its mission. However, I could foresee a sophisticated program that activates at a specific date or thereafter. If you have powered down your equipment and there are concerns of a global attack, be wary as you decide to engage such equipment and take appropriate precautions.

Remove Battery/Fire Risk

It should mitigate risk to remove the battery in devices. The most combustible part and key ignition source for our mobile devices is the battery. Even new desktops do not have the power override button in the back anymore, and many of these have batteries as well. Removing it from the device should render them both relatively harmless. However, if you bought a laptop recently, the batteries are no longer removable; thus, even while powered down and disconnected, I would recommend storing these devices in a place that would not create an issue if they overheated. (You might consider a kitchen counter instead of on your desk amid a pile of papers.)

One Device At a Time

Consider starting or utilizing one device at a time. If you have multiple devices and they are all powered off, do not have everyone in the house activating multiple devices at the same time. If you are in dire need of outside communication and you are activating a device, do so considerately and pay attention to it closely.

Control Access To/Disconnect From the Internet

A technique that China has developed is to disconnect from the Internet leaving China Internet operational but independent from the web. The U.S. military has a stand-alone intranet separate from the web that was infiltrated by the Russians. Disconnecting the landline in your home and disabling your Wi-Fi may mitigate risk. Unfortunately the problem is that our devices seek any and all services. If your neighborhood coffee shop has Wi-Fi that is still active, your devices may continue to communicate and be infected or create problems. Some devices have physical switches to disconnect Wi-Fi, and all have the ability to do so via software. However, it is possible that the malware may be sophisticated enough to instruct the devices to reactivate Wi-Fi communication. In more remote locations, you may be the only Wi-Fi source and therefore have a greater control, but everyone should be aware of signal sources.

Take Smartphone and Vehicles Offline (OnStar, Et Cetera)

Our smartphone devices also pick up telecommunication signals and potentially even satellite. It will be nearly impossible to disrupt these signals. As above, some devices can be instructed to go offline (airplane mode) but the same caveats about malware apply. Many of our newer vehicles are connected and some have the potential to start the ignition or unlock doors. There are multiple tutorials on how to disconnect devices such as OnStar on YouTube. You should investigate regarding the make and model of your vehicle. Again, one of the truisms often discussed here about having an older vehicle takes care of this situation.

Use Surge Protectors

Surge protectors may have some value in this situation, and again I would like to know what the readers think about this issue. I don’t know how much transient voltage a device could create. The concern from surges would actually be from cyber attacks on the grid targeting generators and eliminating protective devices. This would obviously be a non-issue if you provided your own power and were not connected to the electrical grid. Whole house and individual device surge protectors would then be a secondary protection, but this would be from the effects of the attack and not protection from the software attack.

Software and Hardware

Choice of operating systems appears to be of no benefit.

I know people who build their own computers and that may ensure some hardware security, but there is still potential to have compromised components. Knowing your own computer would allow you to confirm disconnection from electric and Internet. I have not found U.S.-made CPU’s for sale anywhere, but it is my understanding there is a push to do so for government use. A difficult effort would be to understand programming, but that would take significant time away from other activities.

If anyone had additional thoughts I would enjoy reading them. The books and articles that I have been reading are more directed to corporate or governmental protection and policy than the concerns of individuals. This may be one of the newer and graver geopolitical threats that is rapidly evolving and could potentially impact everyone connected to the Internet.

Finally, I would like to close as I opened, with references to an EMP. Again, I did not go through all the preparations we would have for an EMP, and all of those would help. Also, much like an older model car without computer components at all, a Ham radio (while still requiring electricity) may be your best consideration for communications. Lastly, you may not be able to trust an “EMP protected device” and therefore require physical copies. If you are putting that off, these physical copies can be used without devices or electricity. As always, do your own homework, make your own decisions, and God bless.

As a regular follower of this blog, I, and as I imagine most readers, are very familiar with the results of an EMP. This is one of the most discussed topics in the survivalist blogosphere, for good reason. Electricity brings all of us a much easier life, and to prepare for the loss of such is difficult both physically and mentally, not to mention costly. With my electronic devices, those that I continue to use daily, my preparations lie between letting them become paper weights with the effects of an EMP to properly protecting those that are of value and having back-up copies of important documents (electronically and physically). From my understanding of an EMP or a similar event, like a strong solar flare, my limited preparations on this front should protect my key data with some devices reverting to expensively purchased junk.

What I had failed to take into consideration is the breakout of cyber warfare. An overview of the nature of cyber warfare is warranted, although before I start I would like to say my knowledge of such is limited. The majority of my previous knowledge came from corporate cyber attacks. However, I just finished reading Richard Clarke’s 2012 book Cyber War: The Next National Threat and What To Do About It Richard Clarke is the former National Coordinator for Security, Infrastructure Protection, and Counter-terrorism for the United States. Clarke worked for the State Department during the presidency of Ronald Reagan and has a good understanding of this subject. This book is an enlightening read (although politically slanted towards Democrats), and while I wanted to highlight a couple of key points it does not make the leap to the potential impact of the average individual. To summarize, cyber warfare is the directed attack against a nation from one or other nations or other collected rogue groups (such as ISIS or Anonymous). These attacks will take many forms, including denial of services, theft of knowledge, turning off critical infrastructure, and sabotage, but all of it will be the result of technical interference to our extremely wired world. Another good summary I just found yesterday is online.

At this time, the government is frantically trying to keep the genie in the bottle and has regular cyber attack exercises:

• http://thehackernews.com/2017/01/protect-critical-infrastructure.html
• https://www.dhs.gov/xlibrary/assets/preventing-and-defending-against-cyber-attacks.pdf
• http://www.nationalpost.com/hackers+bombarding+bank+canada+with+cyber+attacks+crack+bank+armour+employees/12787790/story.html

While the government is working to protect themselves and critical infrastructure, such as utilities and banking, the average citizen must rely on commercially available security and the Geek Squad at Best Buy. Many of these attacks will not be emanating directly from the foreign enemy but from Trojan programs, such as Logic Bombs, already implanted in domestic computers and similar devices, including all of the ones that we individually own. (Even if you claim to be off grid, you are reading this post somehow on some device.) These programs are implanted through multiple nefarious means from participation in websites, email, and every sort of inter-connectivity to the Internet.

The threat that I found more surprising is the self-destruct programs that may potentially be implanted in devices as well. Many routine household devices– phones, security, and appliances– and automobiles are becoming connected to the Internet. While this allows the usefulness of these devices to be increased, such as the ability to check your home security while out of town or something as simple as preheating your oven on the way home from work, there are also significant security breaches that are very rarely mentioned. Mr. Clarke provides an excellent, and from his understanding a completely feasible, example regarding cyber warfare. Imagine a copier within a company, which is bidding on a job. The copier, through an illegally implanted program using basic recognition software, is sending copies of any document with specific wording referencing the job off-site. At a certain point, those who are stealing the information believe they have enough to sabotage the bid and then send directions to the machine to overheat and start a fire with secondary effects of setting off the sprinkler system or worse.

In my limited dealings with cyber attacks, it is well known that hackers can penetrate and disable equipment from remotely operating someone’s camera to tapping into the electrical grid and other utilities, creating an EMP-like event. It has been also proven that many foreign organizations, most noticeably China, has made a concerted effort on corporate espionage and has been routinely stealing secrets. A good example of this is the Sony hack in 2014, where hackers demanded Sony’s release of the comedy film The Interview because the main plot was to assassinate the leader of North Korea, Kim Jong-Un. This hack was a wake-up call to the impact that nation states can have on cyberspace. It is disturbing to say the least.

Another aspect of cyber warfare is hardware modification. In the same book as referenced above, the U.S. intelligence agencies, through a Soviet defector, became aware of a list of sophisticated weapon components that the KGB was looking for. (The names used identify the timeframe.) Instead of preventing the KGB from acquiring the items, the CIA instead worked to funnel them the items on the list but with modifications that would be extremely difficult for anyone to interpret until the item was utilized, whereupon it would malfunction. While this plan was successful for the CIA, it has also become a known espionage tool, and it is impractical to believe that enemies would not utilize this tool or take it to the next level. This is relatively easy to do when some of the silicon chips today are imprinted with minute details. It is no secret that the majority of our commercial hardware, whether directed towards private citizens or government agents, is procured through China. While some may dismiss the potential change to every computer, only one change has to be made downstream and all computers are modified. It is more difficult to determine detrimental designs when they all look the same and work.

Additionally, in June of 2016, the U.S. government gave up authority over IANA (International Assigned Naming Authority) to a private company ICANN (Internet Corporation for Assigned Names and Numbers) without a great deal of fanfare from the media. Senator Ted Cruz opposed this transfer and as part of his press released suggested the plan would “allow 160 foreign governments to have increased influence over the management and operation of the Internet.” This was done by the Obama administration after a known hacking penetration of his presidential campaign by China. In September of 2016, this letter provided by the Free Beacon identifies the concerns of key intelligence officers in Washington regarding this transfer.

Walking through these various examples, it is not difficult to take a small leap and in the event of a hostile or open war with a foreign country, we could find those tools that we rely upon for information– our computers and televisions– to be interfered with, creating and replicating malware, and in a worst case scenario starting on fire or causing surges to the power grid. If it is possible to create a program that can wipe out your system or cause a fire, which I believe it is, why wouldn’t hostile governments try to implant into every device globally and activate as necessary. My own devices have software that detects virus and bugs on a regular basis. Larger corporations have hundreds to thousands of breeches on a weekly basis.

This has radically changed my thought process on electronic devices. Think of a government designing super weapons. A Chinese intelligent agent devises a plan that utilizes America’s weaknesses (dependency on television for information and foreign manufacturing of such devices) that would be fully activated in any emergency situation to propagate and disseminate attacks on government and primary civilian targets with a final blow to disable the device itself and hopefully creating secondary damages and further straining an already strained system. All of this could be accomplished at a fraction of the cost of a nuclear device but be significantly more devastating without poisoning the ocean or your atmosphere with a radioactive cloud. It would also have a crippling effect on communications and morale. It sounds like a game changer for any war. Any device that connects to the Internet, whether it is your smart phone, computer, or refrigerator, at some level must be considered compromised. It can be utilized for false propaganda, and it is not difficult to imagine all of our devices turning on at the same time and having communist-friendly, Hollywood bimbo share with us the advantages of cooperation and the benefit of the People’s Republic. It can be used as a surveillance device, utilizing recording and locating technology; however, even something without these recording and locating capabilities can still infer data. A television that is connected without any other technology can identify if you are watching something (i.e. somebody is there), that you still have power, and what you are watching. Finally, it can be utilized as a weapon, either propagating programs that are affecting someone else’s computers or potentially cause issues of their own.

So, I started this article discussing EMP; many of you are probably wondering why, at this point, as it has no reference to EMPs at all. A devastating cyber attack could result in an EMP scenario in two ways. First, the attack ultimately disables the grid, resulting in a power outage, or the attack is so disabling that the government mandates the temporary shutdown of the grid. Many of our preparations for an EMP, such as alternative communications, physical documents vs. electronic, protected devices, et cetera are equally useful for a cyber attack as well, and while some may need to be reviewed we can instead focus on preparations specifically designed around cyber attacks. In addition to an EMP thought process, a cyber attack may leave the grid operating but in a weakened state. It would be anticipated that certain functions will be targeted, such as government, banking, media, and logistics– all of which are very dependent upon cyberspace. The general motto of this site to be prepared should help insulate you and your family.