How Computers Kill People: Marine Systems
Michael DeVolld, Austin Reid
DEF CON 33 · Day 1 · Main Stage
In an era dominated by discussions of nation-state hackers, ransomware, and AI-driven threats, Michael DeVolld and Austin Reid from ABS Consulting, joined by Chris Stein, delivered a sobering talk at DEF CON that reframed the most critical cyber risk facing the maritime industry: not external adversaries, but the insidious threat of poor software quality and engineering practices. Titled "How Computers Kill People: Marine Systems," the presentation starkly illustrates how flawed code, misunderstood design, or inadequate testing in increasingly automated and digitized maritime systems can lead to real-world physical harm, environmental disasters, and even loss of life. This isn't a futuristic dystopia but a present danger, a "Trojan horse" already embedded within the critical infrastructure that underpins global trade.
AI review
Solid maritime OT security talk anchored by a genuinely compelling simulation: a manipulated cooling set point takes a RoPax vessel from full ahead to complete blackout in under 90 seconds on a Kongsberg simulator. The speakers have the operational credibility to back it up—DeVolld investigated the Costa Concordia, Reid has worked automated terminal ops, and Stein built some of the systems being discussed. The central argument (poor software quality is a bigger kill chain than nation-state attackers) is both defensible and undersold in most ICS security discourse.