Comment on Hacking Rooftop Solar Is a Way to Break Europe’s Power Grid

30p87@feddit.org ⁨6⁩ ⁨days⁩ ago

• thelucky8@beehaw.org ⁨6⁩ ⁨days⁩ ago

  This is a good question. There’s is no reason why this -and a lot of other things imho- must be connected.

  source

  • Hirom@beehaw.org ⁨6⁩ ⁨days⁩ ago

    In addition to not connecting stuff unnecessarily, connected devices that consume/produce lots of power need safeguards.

    Like a random 0-60sec shutdown timer for remote power on/off operations. 50000 panels powering down over 60sec is easier to handle than if they do that simultaneously.

    source
  • Buelldozer@lemmy.today ⁨6⁩ ⁨days⁩ ago

    How do you have a SmartGrid if the nodes aren’t able to communicate with each other or log data?

    source
• Radiant_sir_radiant@beehaw.org ⁨6⁩ ⁨days⁩ ago

  In principle it makes sense to give various electrical things in your house a way to talk to each other. For example we have a PV system with a small battery, a boiler with a supplemental electrical heating coil and a wallbox. Before any excess sun is pushed back into the grid, our house will first charge the battery, heat our water (saving oil) and ask the car if it would like to be topped up. Additionally there are several smart power meters to keep an eye on the grid and various parts of the house. In theory we could also tell our washing machine to prefer homemade electricity, though when we want our laundry done we want it done now, so that’s not going to happen.

  These are all systems from different manufacturers and need a LAN connection to talk to each other.
  In our case that network segment is isolated from the internet, though that requires some above-average skills and dedication. Most PV owners just want a nice app with lots of shiny diagrams and can’t be arsed to set up their own IT infrastructure. Most manufacturers want the dumbest possible devices connected to a cloud solution because a) it moves most things that could break (buggy software) from the customer’s premises to them (never mind what happens if/when their cloud breaks), b) it makes it very easy for their app to access all data, c) it gives them a copy of the data, and d) it lets them sell you subscriptions.

  So in a nutshell, it’s the same problem as everywhere a computer is involved - until after something really bad has happened, security is just that annoying thing that doesn’t add any value but makes things more expensive and more complicated.

  source
• EmilyIsTrans@lemmy.blahaj.zone ⁨6⁩ ⁨days⁩ ago

  I briefly worked for a company who worked on household power technology. Their product would attempt to predict energy prices, weather patterns, and usage to sell your excess energy at peak prices. Like discussed in the article, this company collected usage data and controlled the sale of energy back to the grid centrally. They did this because it meant they could better train their prediction models and run them on more powerful hardware. The controllers would have needed internet connectivity anyway to query energy prices, and putting the prediction on device would have just made them more expensive and worse. Even when I worked there (back in 2015 I think), they were already very aware of the threat vectors discussed by this article and took some measures to prevent it.

  In my opinion they were (/are, still exist) a responsible company run by competent people. They did not collect the data out of “greed”, and I strongly suspect that the people in these comments implying that the data is collected to be sold have never actually worked in the industry and have very little idea of the specific value of energy usage data. I can’t really speak authoritatively for other companies, but I would guess that, like the one I worked for, their products are internet connected simply because it improves the product. For example, people expect things to be controllable or viewable from an app from anywhere, and that requires internet connectivity.

  source
• luckystarr@feddit.org ⁨6⁩ ⁨days⁩ ago

  Because of the greed (and/or lazyness) of the companies selling the inverters. They want all your data and want to control all the sold devices.

  source