disorderly comments on Supermarket Freezers Across Europe Hit With Another Cyberattack

[–] Psi9@kbin.earth 53 points 4 days ago (15 children)

which once again begs the question. why the fuck is your freezer connected to the internet

permalink

fedilink

source

hideshow 15 child comments

[–] disorderly@lemmy.world 8 points 4 days ago (4 children)

Nit: it doesn't beg the question (a logical fallacy also known as tautology), it raises it.

But yeah, is it really that helpful to network something you only want to set one time?

permalink

fedilink

source

parent

hideshow 4 child comments

[–] shalafi@lemmy.world 2 points 4 days ago (2 children)

You want to monitor and perhaps automatically fix temp fluctuations? Maybe these things are smart enough to report parts about to fail? 🤷🏼‍♂️ But in any case it would be child's play to make these things bulletproof.

One example: Set the local firewall to block all WAN traffic, all ports, to the freezer group (VLAN) except where the origin packet is the monitoring IP. I suck at networking and could work this out in an afternoon. Give me a week and I'll have a deployment script for all the local firewalls, tested and ready to push the button. And again, I suck.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] disorderly@lemmy.world 8 points 4 days ago (1 child)

You don't need an Internet connection to have a control system keep temperature around a setpoint, though. That's usually handled by a lower level circuit that will continue to operate in the case that the high level interface is not responding.

Observability is nice, but you don't need to expose controls to do this, you could just have a Prometheus endpoint.

I suspect it's because the manufacturer is trying to sell RaaS (refrigeration as a service) and to ensure they get their monthly dues, they "offer remote maintenance and monitoring" or something.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] njordomir@lemmy.world 3 points 4 days ago

I suspect your suspicion is accurate. Scanning with BLE or a flipper shows the coolers at my local grocery also. It's like the cars, they won't secure it until someone makes it and even then they'll secure it against their customers freedom, not hackers.