• NarrativeBear@lemmy.world
    link
    fedilink
    English
    arrow-up
    94
    arrow-down
    5
    ·
    21 hours ago

    Attacking a countries food supply and food reserves really seems like a act of war.

    The term “hackers” really downplays the severity of these kinds of cyber attacks IMO. It makes it kind of sound like a teenager in a basement somewhere, as opposed to some foreign state cyber warfare group or something along those lines.

    Also it’s madness that systems like these are connected directly to the internet without read-only permissions implemented. Controls should only be accessible locally on some kind of airgap or local seperate VLAN.

    • tiramichu@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      42
      ·
      21 hours ago

      The disconnect between how systems “should” be and how they actually are is disappointingly enormous.

      Retailers are surprisingly enough just like consumers and want things to “just work” without caring about security.

      And so they get Internet-connected fridges, and it’s all fine, until the very moment it isn’t.

      I hope this is a learning experience and they beef-up their systems.

      • tmyakal@infosec.pub
        link
        fedilink
        English
        arrow-up
        15
        ·
        18 hours ago

        I hope this is a learning experience and they beef-up their systems

        I hope this is a learning experience and they realize that commercial refrigerators don’t need to have internet access.

    • AlteredEgo@lemmy.ml
      link
      fedilink
      English
      arrow-up
      20
      arrow-down
      8
      ·
      18 hours ago

      Please stop with the acts of war or terrorism BS. The article also mentions “in-store pricing powered by electronic shelf labels” so lets not ignore this is about multi-billion companies trying to suck every penny out of our pocket. If these companies design and manufacture and buy stupid hardware that is susceptible to such hacking, they really deserve it. I mean they really do.

      Second, this is a good thing. Systems will be hardened now. You think there would be any other fucking way they would upgrade their security unless something like this happens? Beatings will continue until security improves. This is why even chaotic hackers that cause damage and inconvenience are ultimately a positive force on our IT infrastructure. Think of it as an ecosystem and evolutionary pressure. Free marketplace of security models.

    • HaraldvonBlauzahn@feddit.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      19 hours ago

      Also it’s madness that systems like these are connected directly to the internet without read-only permissions implemented.

      Water systems in the US are, too. And they have been hacked.

    • eligibly@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      1
      ·
      14 hours ago

      Given the simplicity of this attack and complete disregard for security by the vendor, it is likely to just be a teenager in a basement somewhere

    • tabarnaski@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      17 hours ago

      I’m sure the admins managing this infra did implement strict permissions… Separate vlans are safe until you find a vulnerability in the switch OS, or find a way to access the admins account.