The refrigeration systems were cranked up to 122 degrees Fahrenheit in at least a dozen countries.

  • L7HM77 ( L7HM77@sh.itjust.works ) 
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    Patrick Lamplmair, CTO at the Austria-based cybersecurity firm Tributech, demonstrates the Peter Principle by not understanding what a process controller is, says a simple cut-in/cut-out w/ deadband logic should’ve known better, and probably thinks this could have been prevented by removing the image of a flame from the UI of the controller.

    • Internet connected can be useful in commercial environments. When designed properly it isn’t a issue unless someone is really motivated.

      The problem is the lack of a Firewall and network partitioning. The vendor was extremely sloppy in the design and security configuration which made it trivial to attack.

    • Onomatopoeia ( Onomatopoeia@lemmy.cafe ) 
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 days ago

      I hope they aren’t, and we’re seeing the failure of securing the network they’re on.

      Companies I’ve worked for keep different stuff on different networks, and to manage those things you either have to physically be connected to that network, or go through some kind of portal (secured with it’s own credentials) then have credentials for the management systems.

      I’d bet all the attacked systems are on a fairly flat network, and the control systems (servers and management devices) are poorly secured with minimal credential policies.