Positive Security<p>At <a href="https://infosec.exchange/tags/38c3" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>38c3</span></a>, we presented our <a href="https://infosec.exchange/tags/BlinkenCity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BlinkenCity</span></a> research, which started as a fun art project idea, and ended up as a plausible European <a href="https://infosec.exchange/tags/blackout" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>blackout</span></a> scenario.</p><p><a href="https://www.youtube.com/watch?v=DAf-T3bFJFs" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">youtube.com/watch?v=DAf-T3bFJF</span><span class="invisible">s</span></a></p><p>Details: <a href="https://positive.security/blog/blinkencity-38c3" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">positive.security/blog/blinken</span><span class="invisible">city-38c3</span></a></p><p>TL;DR: Some European countries use unencrypted and unauthenticated <a href="https://infosec.exchange/tags/longwave" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>longwave</span></a> radio to steer parts of their renewable power, enough to potentially cause a Europe-wide blackout.</p><p>The control signals can be sent with just a <a href="https://infosec.exchange/tags/Flipper" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Flipper</span></a> Zero over short distance, or via self-built transmitters over a long distance (e.g. using a kite to lift an antenna wire).</p><p>The system is also used for street lamp control, allowing for a scaled-up “Project <a href="https://infosec.exchange/tags/Blinkenlights" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Blinkenlights</span></a>” art installation that transforms an entire city into a screen (for astronauts).</p><p>The company operating this system has threatened us with lawsuits and (now publicly) denies the risk.</p>