Air Gap Dreams E
The supposedly isolated plant keeps making exceptions for thumb drives, vendor laptops, and maintenance connections. The air gap survives in the assurances long after someone has bridged it.
← ALL MUSIC
OT / ICS EXPLICIT
Air Gap Dreams
We thought we were isolated.
Loud, playful OT cybersecurity stories about flat networks, travelling thumb drives, vendor assurances, and confidence that does not survive contact with the wiring.
MARCH 19, 2026 / 11 TRACKS / ZERO DAY RECORDS
The album started with an old-school group-rap idea and an arc from confidence through cracks, intrusion, and exhausted response. The supposed air gap is the opening promise; the rest of the record keeps finding ways across it. Call-and-response, swagger, and technical jokes make the assurances memorable before the consequences arrive. The released sequence is the record shown below; the writing sessions explored other tracks and titles along the way.
Track by track
THE RECORD, IN ORDER.
Flat Network Funk E
One VLAN, every device, and no awkward questions about segmentation. The coffee pot, HMI, and PLC all share the same cheerful lack of boundaries.
Sneaker Net Hustle E
A person carrying a thumb drive becomes the connection an isolated network supposedly does not have. Convenience and borrowed trust walk straight through the gap.
Don't Touch That E
A faded warning label carries more history than a curious visitor realizes. One casual switch flip turns a harmless-looking cabinet into a plant-wide problem.
Vendor Said It's Fine E
A support assurance becomes a substitute for checking the evidence. Hardcoded credentials, open remote access, and deferred patches are explained away as normal.
No Logs, No Problems E
The absence of telemetry is mistaken for the absence of trouble. It is easy to keep the dashboard reassuring when nobody collects the awkward evidence.
Pivot to the PLC E
An attacker follows the access connecting the office to the control environment. Shared trust and missing boundaries turn an inbox compromise into a path toward the PLC.
Talkin' in Tongues E
The HMI, field device, and historian disagree about the same signal. Protocol translation, old settings, and mismatched values produce several different realities.
Red Team Blues E
The attacker barely needs to be clever: reused credentials, open paths, and missing logs do most of the work. The blues belong to the defenders who thought those doors were shut.
Blue Team Hangover E
The defenders inherit cold coffee, repeated alerts, and incomplete logs. Each new clue makes the story less certain rather than neatly closing the incident.
Yank It Out E
With alarms sounding and no clear picture, pulling the cable looks decisive. The question is whether the response stopped the threat or simply stopped production.