They tried to sound the alarm in August

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 month ago (1 child)

It's even worse, though - I read in another article that the username was "admin" and the password autochanged to the day's date every day.

That's not security… that's, like… leaving the front door open with a big sign saying "COME ON IN, NO CAMERAS!!!" lol

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 month ago*

    What if I told you some legacy control devices on protocols like modbus don’t even have the concept of users/auth. Just send a request with a valid op, in range register, and a valid crc and the device will just read or write whatever you send it. There are literally tens of thousands of these devices still online and internet accessible globally.

  • source
  • parent