It's so disheartening to explain this over and over working in critical infrastructure cybersecurity full time. It's because everyone demands cheap, fast remote support and AI enabled real time telemetry and control. We’ve worked ourselves into this corner through demanding connectivity and I see next to nothing truly airgapped anymore. In fact, it’s impossible to convert some critical systems back at this point.
A lot of our power infrastructure is so complex with microgrids and renewables and real time billing and buy backs that it can’t be switched to manual anymore. A lot of industrial vendors won’t provide warranty support if their remote access is removed.
And this is all happening in super low maturity environments with limited if any cybersecurity resources or tools.
We’re trying, but the state of things is pretty dire, the barrier to basic disruptive attacks is lowering rapidly, and we can’t find enough people who understand the industrial environments and cybersecurity on thirty year old computers fast enough to hire close to enough people.
@hacks4pancakes
The other issue will be reporting and documention requirements for commercial freezers and fridges
Their temperatures would need to recorded regularly so as to demonstrate that the food (or whenever) is being kept at the correct temperature.
Doing that at scale, reliably for any number of fridges and freezers would be manually expensive and error prone. Possibly with a temptation to hide errors with falsified manual recordings.
Remote, centralised recording and monitoring makes good sense. It has to be done securely though which is where cost and convenience wins out over security 🫤🤷♂️
Who would possibly want to tamper with a fridge containing blood products? A failure of immigration coupled with cost cutting is a dangerous combination 🫤