"Disconnect our fridges from the internet — NOW" is kind of the simplest policy to implement, yet many companies and hospitals failed to do just that for months, so these fridges keep getting manipulated by script kiddies.
That's the story.
0 Boosts
0 Likes
@jwildeboer There are different stories....
@jurjen_heeck I know them all. I was there, talking with customers, when the whole Siemens PLC story unfolded and networks were redesigned to mitigate the risks. That was some 5-7 years ago. Good CISOs learned from that. So no, I have zero sympathy for the cheapskates that decided to ignore the whole issue because they convinced themselves that no one would ever care about their exposed fridges ...
@jwildeboer But why are they failing to implement such simple policy? Can it be that they dependent on such fridges to be connected?
PS: Are those fridges really on the internet? At least from the experience I made with retailer, they are behind a VPN (that hundred of underpaid support workers in different countries have access to)
@jwildeboer "we don't have the money for a firewall in that location but we need connectivity for the legally mandated temperature check protocol and the documentation for it"
Now what?
@Laird_Dave @jwildeboer in our shop we walk around writing down the temps for the morning using eyes, pen and paper. Legally mandated ✅
Hackable (bribable), Hmmm, how much are we talking.....😆
@mrshsaxon @jwildeboer one shop != an entire chain, one chain != each and every retailer
Especially in retail margins are slim and many, many owners, managers and others try to cut costs wherever possible, thereby generating (often unnoticed) risks.
@Laird_Dave And they got their first wake up call a few weeks ago. A second one now. If they keep on ignoring the problem, they will be next and face far higher costs to fix it and in addition a big hit to their reputation. That's called risk calculation. Make the wrong decision and you risk going out of business. @mrshsaxon
@jwildeboer I'm visiting my parents this week.
One of their first technical requests was asking if I could get their new fridge connected so they'd get filter reminders.
We had a talk.
@jwildeboer But how do you disconnect that WLAN cable?! 🙀
@jwildeboer
Die Preisetiketten an den Regalen sind auch digital und werden zentral gesteuert. Die Kassensysteme und Scanner auch.
Kühlschränke sind das geringste Problem.