cross-posted from: https://lemmy.zip/post/74351721
The refrigeration systems were cranked up to 122 degrees Fahrenheit in at least a dozen countries.
Euros finding out why the “S” in “IoT” stands for “Security”
They weren’t even protected with a wireguard tunnel? 🤔
They considered it but were concerned Israel would attack them claiming they were Hamas tunnels
Stop connecting basic thermostats to the web. Holy crap they worked fine before.
From what I understand, there are SOME reasons to have industrial freezers online, so they can be centrally monitored for maintenance issues or try and maximize efficiency by adjusting setting remotely or whatnot.
But, you’d think they could have a fucking airplane mode where they could just run as fucking freezers.
even to the extent that’s true they could be send-only and two managers could do a little actual labor if anything goes out of spec
These are on the internet for things like cold chain auditing (consumer protection/health inspection stuff) and dynamic power grid balancing (as in, sun is shining extra hard today, so set all the grocery fridges a couple degrees lower temporarily to act as a solar battery). I.e., for good reasons that we like. Grocery fridges amount to something like 1% of all the energy used in any given country, so this isn’t nothing.
There haven’t been many details about these attacks other than the “password of the day” backdoor, and it’s reasonably likely that these were only visible on an intranet that was breached by hacking someone’s laptop or something.
The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.
The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.
This is what keeps me up at night 😭
I understand the web access on these devices is to allow remote access by technicians. It should be only enabled when actively needed but that’s a lot to ask apparently.
Maybe they should stop using hunter2 as their password.
Why the fuck can someone do a cyber attack on freezers wtf
So that they can control everything from a single location instead of having trained personnel at the stores who could handle it
Cheaper that way!
What’s funny is everyone’s like, “Why are fridges on the internet‽” Wait till y’all find out about scada.
Shhhh! Don’t let people know you can connect it to the internet!
A good chunk of SCADA attacks have involved access to the hardware but there have been more and more notable remote attacks too.
Lol they’re still out there on dial-up even.
Why would you connect the fridges to the internet! Just don’t do that! You’ve created a vulnerability that just didn’t need to exist!
I get there are SOME practical reasons to have industrial freezers hooked up to wifi.
But, you’d think they could have like, an offline mode, where they just work like normal freezers.
