WTF do freezers need to be connected to the internet?
Shop freezers in seven European countries hit by cyber-attack. Millions of euros worth of food had to be thrown away. Some US military bases possibly impacted by the same attack.
Submitted 4 days ago by daveyOsborn@infosec.pub to cybersecurity@infosec.pub
https://www.bbc.com/news/articles/cq1kd1nee80eo
Comments
The_Che_Banana@beehaw.org 4 days ago
OwOarchist@pawb.social 4 days ago
It might be nice to have an internet connection to monitor the freezer. Check temps, keep a temperature log so you can tell if it ever thawed out due to a temporary power outage or something.
But I see absolutely no reason why a freezer’s control circuitry needs to be connected to the internet. There’s no reason you’d ever need to turn it on or off remotely … or even really change the temperature remotely. Any time you need to turn it on or off or change the temperature, it’s because you’re taking food in or out of it … which has to be done manually, with physical access to the machine, so you might as well adjust the temperature manually while doing that.
The_Che_Banana@beehaw.org 4 days ago
In restaurants there needs to be a thermometer installed and a routine check of temp. recorded manually…if anything that would be a redundancy that corporate wants to have to keep the middle managers busy
Onomatopoeia@lemmy.cafe 4 days ago
Right?
Think maybe THIS will get all these places (any that have been hacked) to start taking isolation and security seriously?
The_Che_Banana@beehaw.org 4 days ago
I mean, the reports of people hacking into home temperature control units, fish tanks, etc. years ago apparently wasn’t enough warning.
daveyOsborn@infosec.pub 4 days ago
I suppose they would file an insurance claim and not give a fuck. It’s no money out of the pocket of the bean counter who decides infosec costs more than it saves. OTOH, hopefully insurance companies would react by charging a higher premium to grocers who have cloud-controllable refrigeration and no proper infosec. And then maybe /that/ would turn this around.
marighost@piefed.social 4 days ago
I read somewhere that mentioned the freezer temperatures are controlled from the head office, via the network. If that’s true, that’s why VPN tunnels with access control are so important!!!
shalafi@lemmy.world 4 days ago
As I understand it, they had critical infrastructure, open to world+dog, all locked behind… (checks notes)… a username and password.
Lemmy: Why was this shit on the internet?!
Me: Why didn’t they simply lock it down after the first hack?!
I get corporate IT, been there, done that. But they could have locked access to a single IP or group of IPs. MFA anyone? How about a VPN between the freezers and home base or no access? These are easy and nearly free fixes given some IT labor.
mycodesucks@lemmy.world 4 days ago
notsure@fedia.io 4 days ago
I bought a refrigerator that talks to the internet, why doesn't it always work? My mother tells me of ice-boxes which would have a large block of ice, placed on it, once a week. By a human deliverer. Fuck.
MehBlah@lemmy.world 4 days ago
Stop relying on remotely controlled freezer. If it doesn’t have a separate alarm and a locally controlled override then its shouldn’t be allowed to be sold.
IAmYouButYouDontKnowYet@reddthat.com 4 days ago
But if they do that how are the going to convince people to allow constantodern surveillance of their digital lives? Remember it’s a business, it not for humanity.