Really begs the question... Why are they connected to the internet at all??
post
Patrick Lamplmair, CTO at the Austria-based cybersecurity firm Tributech, demonstrates the Peter Principle by not understanding what a process controller is, says a simple cut-in/cut-out w/ deadband logic should've known better, and probably thinks this could have been prevented by removing the image of a flame from the UI of the controller.
What's that in normal European (and everyone else) units?
which once again begs the question. why the fuck is your freezer connected to the internet
Supermarkets allow their freezers to connect to the internet so that maintenance and monitoring can occur remotely.
Yeah. And VPN connections exist so maintenance and monitoring can take place without direct exposure. But alas...
Yeah but that’s expensive to set up and C-Suites need more bonuses so
Expensive? I bet it's less expensive than losing all your frozen inventory.
I know you're being sarcastic. But for anyone coming here with a damaged irony sensor: no. Setting up a VPN comes at zero software costs (it's all open source software, unless you're keen on getting ripped off by some proprietary product) and a reasonably low cost in man hours for setting it up (we're talking single-digit to low double-digit hours here).
Yeah, but you would think they would have gotten them off the Internet after the first time this happened, even if it means having to hire an extra person to keep an eye on them.
Nit: it doesn't beg the question (a logical fallacy also known as tautology), it raises it.
But yeah, is it really that helpful to network something you only want to set one time?
Actually, "beg the question" is a linguistic fossil from a time when "beg" didn't mean quite the same thing it does today.
You want to monitor and perhaps automatically fix temp fluctuations? Maybe these things are smart enough to report parts about to fail? 🤷🏼♂️ But in any case it would be child's play to make these things bulletproof.
One example: Set the local firewall to block all WAN traffic, all ports, to the freezer group (VLAN) except where the origin packet is the monitoring IP. I suck at networking and could work this out in an afternoon. Give me a week and I'll have a deployment script for all the local firewalls, tested and ready to push the button. And again, I suck.
You don't need an Internet connection to have a control system keep temperature around a setpoint, though. That's usually handled by a lower level circuit that will continue to operate in the case that the high level interface is not responding.
Observability is nice, but you don't need to expose controls to do this, you could just have a Prometheus endpoint.
I suspect it's because the manufacturer is trying to sell RaaS (refrigeration as a service) and to ensure they get their monthly dues, they "offer remote maintenance and monitoring" or something.
Exactly! It should have a single non-internet connected computer per supermarket controlling the temps.
Really, this is worth just 5 minutes of research. This is not like the stupid Samsung fridge you keep in your home. In commercial settings you may have hundreds of refrigeration units to track and manage in order to keep food safe. And it’s quite plainly very efficient to do this with remote management software, and yes this can be deployed locally with a local server to manage everything but it can also be done over the internet to cloud services and that can be much more feasible for someone who is trying to run a grocery and isn’t a network engineer or experienced server administrator.
I know someone will just say come on, it’s not that hard. To which I say fine, but the question here was why would anyone ever do this. There is actually an answer.
So they saw the first freezer attacks and said 'nah' to doing anything to secure them
Why the hell freezers able to heat up to 50°C and connected to internet?
Regarding the heat up thing, usually the devices sold are dual purpose and can be used to keep things warm (Since they're just a insulated container with a temperature coil), but the connected to the internet part is just stupidity.
50c isn't really a safe temperature for food, but I guess some places do it.
The Swedish media reported it as "de-icing mode". If you have a large freezer in a store, you can't defrost it quickly enough with passive airing, especially with the top-loading freezers.
Nothing wrong with connecting to the internet for centralized monitoring and control! But the lack of simple network security was absurd, especially after this happened once already.
My last job had all AWS resources firewalled off for every source but our inhouse VPN's IP and the home IPs of the DevOps team. You couldn't hit those resources from inside the office without the VPN. Easy money. Setup a similar deal at my previous job. Yeah, RDP was open, but only from my home IP. That port might as well not exist from the outside.
The coils need to defrost, so they are able to heat up to do so. Typically this happens for a very short period of time. Bit if the defrost cycle stays on for an extended period of time then the whole thing heats up.
It's almost as if the longer we don't riot and push the corrupt officials off a cliff, consequences for their actions always seems to fall onto us. Huh... weird...
Simple fix: Stop. Connecting. Everything.
Sounds like this guy thinks we should connect more freezers.
I’m on it boss. We’re resetting the system and adding a connection so that the plumbing and lights can be controlled through the Wi-Fi. The admin password is now the factory default 1234. Here’s a manual for your fridges. If you need anything else, I’ll be on my way.
Literally more secure than the (now patched) access to the freezers:
https://ironhackers.es/en/danfoss-ak-sm-800a-cve-2025-41450/
Yes. But in the meantime this guy is costing working class in food prices.
Why do we need freezers connected to the internet?
So they can get security updates.
Why do they need secutity updates?
Because they are connected to the internet.
They do it to minimize having to send out maintainance for problems that can be fixed remotely, as theres a cost and time attached to said action.
Having the ability to monitor temperature remotely is useful.
However at that point the system should alert a staff member in the store to a potential issue so they can physically check.
At this point if anyone gives any of their corporate systems internet access then we must all assume they consciously and intentionally are waiting for something bad to happen so they can benefit from insurance fraud and media publicity while claiming plausible deniability.
The refrigeration systems were cranked up to
122 degrees Fahrenheit50 degrees Celsius in at least a dozen countries.
most of the world doesn't use freedumb units and this is supposed to be worldnews
The fact that they haven’t named the culprit leads me to the conclusion it’s probably Israel or the United States.
If they had even the slightest rumour that it was Russia then it would be plastered all across news in Europe
Of course, because it would be yet another attack from them on our democracy.
We know that, because it has been proven time and time again.
Almost like they want to dismantle the entire EU and NATO so they can invade every European country on their TO-DO list without resistance.
Those other countries don't attack us 24/7, so we need to be sure before calling them out.
I told them to Disconnect these things from the Internet last time this happened (like a week ago.)
Why are freezers connected to the Internet? They don't get cyber attacks offline and freeze just as well.
Also why do people buy battery operated automated soap dispensers for their home bathrooms? How much of an inconvenience is it to pump soap into your hand? You don't have to worry about the soap pump being sanitary either because you have soap on your hands to wash everything off.
What shit security and recovery. Probably tons of bad guys now looking at what all they can do to this company.
all 14 comments