Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Shop freezers in seven European countries hit by cyber-attack. Millions of euros worth of food had to be thrown away. Some US military bases possibly impacted by the same attack.

⁨33⁩ ⁨likes⁩

Submitted ⁨⁨4⁩ ⁨days⁩ ago⁩ by ⁨daveyOsborn@infosec.pub⁩ to ⁨cybersecurity@infosec.pub⁩

https://www.bbc.com/news/articles/cq1kd1nee80eo

source

Comments

Sort:hotnewtop
  • MehBlah@lemmy.world ⁨4⁩ ⁨days⁩ ago

    Stop relying on remotely controlled freezer. If it doesn’t have a separate alarm and a locally controlled override then its shouldn’t be allowed to be sold.

    source
    • IAmYouButYouDontKnowYet@reddthat.com ⁨4⁩ ⁨days⁩ ago

      But if they do that how are the going to convince people to allow constantodern surveillance of their digital lives? Remember it’s a business, it not for humanity.

      source
  • The_Che_Banana@beehaw.org ⁨4⁩ ⁨days⁩ ago

    WTF do freezers need to be connected to the internet?

    source
    • OwOarchist@pawb.social ⁨4⁩ ⁨days⁩ ago

      It might be nice to have an internet connection to monitor the freezer. Check temps, keep a temperature log so you can tell if it ever thawed out due to a temporary power outage or something.

      But I see absolutely no reason why a freezer’s control circuitry needs to be connected to the internet. There’s no reason you’d ever need to turn it on or off remotely … or even really change the temperature remotely. Any time you need to turn it on or off or change the temperature, it’s because you’re taking food in or out of it … which has to be done manually, with physical access to the machine, so you might as well adjust the temperature manually while doing that.

      source
      • The_Che_Banana@beehaw.org ⁨4⁩ ⁨days⁩ ago

        In restaurants there needs to be a thermometer installed and a routine check of temp. recorded manually…if anything that would be a redundancy that corporate wants to have to keep the middle managers busy

        source
    • Onomatopoeia@lemmy.cafe ⁨4⁩ ⁨days⁩ ago

      Right?

      Think maybe THIS will get all these places (any that have been hacked) to start taking isolation and security seriously?

      source
      • The_Che_Banana@beehaw.org ⁨4⁩ ⁨days⁩ ago

        I mean, the reports of people hacking into home temperature control units, fish tanks, etc. years ago apparently wasn’t enough warning.

        source
      • daveyOsborn@infosec.pub ⁨4⁩ ⁨days⁩ ago

        I suppose they would file an insurance claim and not give a fuck. It’s no money out of the pocket of the bean counter who decides infosec costs more than it saves. OTOH, hopefully insurance companies would react by charging a higher premium to grocers who have cloud-controllable refrigeration and no proper infosec. And then maybe /that/ would turn this around.

        source
    • marighost@piefed.social ⁨4⁩ ⁨days⁩ ago

      I read somewhere that mentioned the freezer temperatures are controlled from the head office, via the network. If that’s true, that’s why VPN tunnels with access control are so important!!!

      source
  • shalafi@lemmy.world ⁨4⁩ ⁨days⁩ ago

    As I understand it, they had critical infrastructure, open to world+dog, all locked behind… (checks notes)… a username and password.

    Lemmy: Why was this shit on the internet?!

    Me: Why didn’t they simply lock it down after the first hack?!

    I get corporate IT, been there, done that. But they could have locked access to a single IP or group of IPs. MFA anyone? How about a VPN between the freezers and home base or no access? These are easy and nearly free fixes given some IT labor.

    source
    • mycodesucks@lemmy.world ⁨4⁩ ⁨days⁩ ago

      Image

      source
  • notsure@fedia.io ⁨4⁩ ⁨days⁩ ago

    I bought a refrigerator that talks to the internet, why doesn't it always work? My mother tells me of ice-boxes which would have a large block of ice, placed on it, once a week. By a human deliverer. Fuck.

    source