Stop relying on remotely controlled freezer. If it doesn't have a separate alarm and a locally controlled override then its shouldn't be allowed to be sold.
post
WTF do freezers need to be connected to the internet?
Right?
Think maybe THIS will get all these places (any that have been hacked) to start taking isolation and security seriously?
I mean, the reports of people hacking into home temperature control units, fish tanks, etc. years ago apparently wasn't enough warning.
I suppose they would file an insurance claim and not give a fuck. It’s no money out of the pocket of the bean counter who decides infosec costs more than it saves. OTOH, hopefully insurance companies would react by charging a higher premium to grocers who have cloud-controllable refrigeration and no proper infosec. And then maybe /that/ would turn this around.
I read somewhere that mentioned the freezer temperatures are controlled from the head office, via the network. If that's true, that's why VPN tunnels with access control are so important!!!
As I understand it, they had critical infrastructure, open to world+dog, all locked behind... (checks notes)... a username and password.
Lemmy: Why was this shit on the internet?!
Me: Why didn't they simply lock it down after the first hack?!
I get corporate IT, been there, done that. But they could have locked access to a single IP or group of IPs. MFA anyone? How about a VPN between the freezers and home base or no access? These are easy and nearly free fixes given some IT labor.
I bought a refrigerator that talks to the internet, why doesn't it always work? My mother tells me of ice-boxes which would have a large block of ice, placed on it, once a week. By a human deliverer. Fuck.

no comments (yet)