[grc] More on EAS Vulnerabilitiies

[David Klann]

Hi Folks!

Apologies for the wide cross-posting of this information.

In a post at Krebs On Security on August 12, 2022, Brian Krebs reports
more details on the recently announced EAS vulnerabilities. I'm guessing
that at least some of the EAS device manufacturers are going to scramble
to update their firmware after (or before) this weekend's DefCon session...

The article gets quite technical, but the bottom line is that it's
likely there are still vulnerabilities in your EAS device -- even IF
you've updated to the latest available version.

Details and links in the article at
https://krebsonsecurity.com/2022/08/sounding-the-alarm-on-emergency-alert-system-flaws/

I recommend building "EAS Update" into your station's policies! Since
they happen irregularly (unlike some computer operating systems), you
need to subscribe to your vendor's announcement channel in order to be
notified of firmware updates.

Shout out to WCCO TV in Minneapolis for providing thei
r viewers with an
explainer video on EAS!

   ~David Klann
    Broadcast Tool & Die
    broadcasttool.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 855 bytes
Desc: OpenPGP digital signature
URL: <http://maillist.peak.org/pipermail/grc/attachments/20220812/fb2359a3/attachment.sig>