Florida Utilities Lobbied To Make It Illegal For Solar Users To Use Panels In Wake Of Hurricanes, Outages

from the sorry,-progress-is-illegal dept

You may have noticed that the shift to solar is happening whether traditional utilities like it or not, and attempting to stop solar's forward momentum is akin to believing you can thwart the Mississippi with a fork and a few copies of Mad Magazine. Said futility clearly hasn't discouraged Florida utilities, who have gone to numerous, highly-creative lengths to try and hinder or curtail solar use. When last we checked in with legacy Florida utilities, they were busy using entirely fake consumer groups to push a law that professed to help the solar industry while actually undermining it.

Fortunately Florida consumers ultimately saw through this effort, though this was just one of a steady stream of similar bills aimed at stalling progress. Many Florida Power and Light customers obviously lost power in the wake of the devastation caused by Hurricane Irma, despite promises by the company that endless rate hikes would help harden the utilities' lines. But customers thinking they could use the solar panels on their roofs to help keep themselves afloat until traditional power was restored were in for a rude awakening.

Thanks to the fact that Florida utility lobbyists are being allowed to quite literally write the state's energy laws, many locals discovered they weren't able to use their solar panels in the wake of the storm lest they violate state law:

"FPL's lobbying wing has fought hard against letting Floridians power their own homes with solar panels. Thanks to power-company rules, it's impossible across Florida to simply buy a solar panel and power your individual home with it. You are instead legally mandated to connect your panels to your local electric grid. More egregious, FPL mandates that if the power goes out, your solar-power system must power down along with the rest of the grid, robbing potentially needy people of power during major outages.

In the broadband industry, we consistently let giant incumbents like Comcast and AT&T write shitty protectionist state laws -- then stand around with a dumb look on our collective faces wondering why U.S. broadband is shitty and expensive. The same problem plagues the utility sector across countless states. In Florida, the average household spends $1,900 a year on power, 40% higher than the national average. Yet incentives or other measures designed to spur solar power adoption are either absent or illegal, in large part thanks to utility lobbying.

Needless to say, Irma appears to be acting as a wake up call to Florida utility customers unfamiliar with how the American lobbying and political system actually works:

The problem, again, is that legacy companies across numerous sectors are very effective at using partisan patty cake to convince consumers to root against their own best self interests. That's why Florida, a state perfectly suited to take advantage of solar power, remains well behind the curve when it comes to solar adoption. And again, that's courtesy of folks like State Representative Ray Rodrigues, who takes notable campaign contributions from utilities like FPL, then consistently fields bills that profess to aid the solar revolution while covertly sabotaging what should be the obvious path forward.

Filed Under: florida, hurricane, lobbying, net metering, power grid, solar

Weird California Incident Last Year Points To The Real Threat To The Power Grid (Hint: It's Not Cyberattacks)

from the uncommon-common-sense dept

Via Bruce Schneier's blog, we learn of the following intriguing story published in Foreign Policy:

Around 1:00 AM on April 16, at least one individual (possibly two) entered two different manholes at the PG&E Metcalf power substation, southeast of San Jose, and cut fiber cables in the area around the substation. That knocked out some local 911 services, landline service to the substation, and cell phone service in the area, a senior U.S. intelligence official told Foreign Policy. The intruder(s) then fired more than 100 rounds from what two officials described as a high-powered rifle at several transformers in the facility. Ten transformers were damaged in one area of the facility, and three transformer banks -- or groups of transformers -- were hit in another, according to a PG&E spokesman.

Oil then leaked from the transformers, causing them to overheat and shut down. However, there were no major power outages, and no long-term damage. The Foreign Policy post gives a good summary of what we do and don't know, and is well-worth reading in full. As Schneier comments:

The article worries that this might be a dry-run to some cyberwar-like attack, but that doesn't make sense. But it's just too complicated and weird to be a prank.

Anyone have any ideas?

Feel free to theorize in the comments about what happened last April. Absent further information, I'd like to focus here on the following perceptive analysis from the article:

At the very least, the attack points to an arguably overlooked physical threat to power facilities at a time when much of the U.S. intelligence community, Congress, and the electrical power industry is focused on the risk of cyber attacks. There has never been a confirmed power outage caused by a cyber attack in the United States. But the Obama administration has sought to promulgate cyber security standards that power facilities could use to minimize the risk of one.

This fixation on "cybersecurity" is something that Techdirt has been pointing out for a while. It seems largely driven by canny defense and security companies hungry for profitable contracts, which are able to take advantage of politicians intimidated by technology and worried about seeming "soft" on "cyberterror." Kudos, then, to Jon Wellinghoff, the chairman of the Federal Energy Regulatory Commission, who seems to have more common sense than most of his colleagues:

A shooter "could get 200 yards away with a .22 rifle and take the whole thing out," Wellinghoff said last month at a conference sponsored by Bloomberg. His proposed defense: A metal sheet that would block the transformer from view. "If you can't see through the fence, you can't figure out where to shoot anymore," Wellinghoff said. Price tag? A "couple hundred bucks." A lot cheaper than the billions the administration has spent in the past four years beefing up cyber security of critical infrastructure in the United States and on government computer networks.

Quite.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+

Filed Under: cybersecurity, physical security, power grid, security, threats

If Phishing Email Can Kill NY Power Grid, Lack Of Cybersecurity Legislation Is Not The Problem

from the oh-come-on dept

We've been talking about the faux urgency to pass some cybersecurity legislation coming from the federal government, with plenty of fear mongering from politicians who never seem to want to point out any factual basis for why we need such new laws. Instead, it's all been about Hollywood movie script-style scenarios about planes falling from the skies. It appears that the White House is heavily involved in this bogus fear mongering as well, having recently set up a "simulated cyberattack on New York City's power supply" to convince elected officials to move forward on the legislation.

During a classified briefing in the Office of Senate Security, Homeland Security Secretary Janet Napolitano and White House counterterrorism adviser John Brennan showed lawmakers how a hacker could breach control systems of the city’s electric system and trigger a ripple effect throughout the population and private sector, according to a source familiar with the scenario.

“The fact that we could be subject to a catastrophic attack under the right circumstances and we now know some of the things that would help us to protect against such an attack, that’s why it’s important now for the Congress to take this up,” Napolitano said in an interview with POLITICO.

Now that's interesting. Just how could a hacker breach control systems of the power grid? Apparently with an email phishing attack:

During the simulation, the hacker gains access to the electric supply’s control system through a simple “spearphishing” attack, in which a worker merely clicks on a link in an email that appears to be from someone they know.

Um, there's your problem. If the NYC power grid is attached to the public internet in such a way that it can be taken down, then um, shouldn't we take it off the internet? This isn't about cybersecurity, this is about common sense, where things like the power grid should not be accessible via the internet -- and I'm pretty sure they're not (back here in reality). But in the world where we need fear, uncertainty, doubt and the ability for the federal government to spy on private networks, we have to pretend such a scenario is likely.

Of course, I also question why the White House chose NYC as the showcase for the simulation and suggested that there would be deaths and other massive harm from such a power grid takedown. After all, it was just about a decade ago that the power grid in the Northeast did, in fact, fail. It was an inconvenience for many people, certainly, but it was hardly damaging in the way the White House seems to have implied with this scare tactic.

So, once again, can we take a step back and ask some simple questions: what's the real threat and the real risk here? If it's that the NYC power grid is accessible by a simple password over the public internet, then the problem isn't cybersecurity, it's whoever was stupid enough to connect the power grid to the internet. Let's fix that. But let's not regulate and spy on large segments of the public internet to cover for a few bad decisions.

Filed Under: cybersecurity, fear mongering, hype, nyc, phishing, power grid, terrorism, white house