Hackers reportedly changed temperature settings on refrigeration equipment used by the French Blood Establishment, EFS, from around −30°C to 110°C after targeting its cooling service provider, Coolworld.
Seems logical, but there’s a valid reason why these fridges are connected, at least for reading data (not so much for controlling).
European law dictates that things that can spoil due to heat must be stored at the right temperature. And therefore you must register the temperatures of each refrigerator at each moment to have a valid proof of compliance.
A simple supermarkt already has 50 or so appliances. And supermarkets are usually chains with hundreds of stores. So you can imagine the need of having to monitor temperatures centrally. I can imagine that for medical use, the rules are even stricter.
100% this. I work in pharma, that’s how we do it. You would use a separate system for monitoring - the plus side being is that monitoring would likely use a thermocouple which should give you better accuracy. Having an independent system also means that you can move the temperature monitoring device to wherever the “hot spot” in your freezer is based on the mapping that you should be doing.
So you pay to have someone stand around staring at a temp gauge all day? Yeah…. Sure buddy.
And a delivery of new food, temp changes. Someone leaves a door open too long, run a chill cycle. That’s why the is stuff is automated. It’s so random. The temp and fan settings are changed probably a dozen times an hour. If it’s not, spoilage will happen.
But that automation is so simple, it doesn’t need to connect to an external system. You set the target temperature once and the system regulates the cooling. No person needed, neither remote or in front of the thing.
And temperature sensors are cheap. Just have one for the regulation, and a separate one for remote monitoring.
The whole point was keeping the temperature sensor readable remotely so that you didn’t have to pay someone to stand around all day.
Yes? That was the problem with your suggesting someone go and change it. If you do that, and don’t have it automate the cooler, you STILL need someone.
Absolute worst case, add a second temp sensor for the automated chill cycles. Pretty sure temperature sensors aren’t that expensive.
So THAT one can be hacked anyways? Are you even thinking these solutions out at all? Like a little bit?
I feel like you’re not understanding what I am trying to convey. Or I am not being clear enough?
A temperature sensor being hacked is nothing to worry about. Worst case scenario, the hacked sensor will report the wrong temperature and some employee will come running over to the freezer. Upon manual inspection they will realise the temperature is in fact not +50°C despite the exposed sensor reporting that.
The freezers automated freezing/heating just runs off an other separate temperature sensor that won’t be hacked since it is not exposed to the internet.
Do you not realize all the stuff would be garbage anyways because the legal log says it got too hot? You have it automated so you can adjust or fix the issue before you just water an entire cooler of product lmfao.
You seem to not comprehend that you’re solutions accomplish literally nothing but more money and time for employees.
air gapping is a pretty standard practice in pharma IT systems. Its probably not super feasible for a supermarket chain but their problems are not as severe. A fridge with sensors but no remote controls would be plenty sufficient for the purpose of ‘prove we kept steak cool until we sold it’.
Seems logical, but there’s a valid reason why these fridges are connected, at least for reading data (not so much for controlling).
European law dictates that things that can spoil due to heat must be stored at the right temperature. And therefore you must register the temperatures of each refrigerator at each moment to have a valid proof of compliance.
A simple supermarkt already has 50 or so appliances. And supermarkets are usually chains with hundreds of stores. So you can imagine the need of having to monitor temperatures centrally. I can imagine that for medical use, the rules are even stricter.
Put the temp sensor on a separate system from the controls
100% this. I work in pharma, that’s how we do it. You would use a separate system for monitoring - the plus side being is that monitoring would likely use a thermocouple which should give you better accuracy. Having an independent system also means that you can move the temperature monitoring device to wherever the “hot spot” in your freezer is based on the mapping that you should be doing.
This. Why the hell would you need to change the setting remotely?
Temperature policy changes? So you don’t have to send a tech to each location.
Then you get what we have here. Shouldnt there be an employee at each location with a button pushing finger?
How would it adjust the temp to fix it than?
You walk over to it and make the change?
How often do these freezers need changing of temperature? My guess would be at most a handful of times a year.
Amd if the controls aren’t remotely connected you don’t have to worry about this type of issue.
So you pay to have someone stand around staring at a temp gauge all day? Yeah…. Sure buddy.
And a delivery of new food, temp changes. Someone leaves a door open too long, run a chill cycle. That’s why the is stuff is automated. It’s so random. The temp and fan settings are changed probably a dozen times an hour. If it’s not, spoilage will happen.
But that automation is so simple, it doesn’t need to connect to an external system. You set the target temperature once and the system regulates the cooling. No person needed, neither remote or in front of the thing.
And temperature sensors are cheap. Just have one for the regulation, and a separate one for remote monitoring.
Than you don’t have the logging that is required for food safety and QC.
So that one be hacked anyways and accomplish nothing?
The whole point was keeping the temperature sensor readable remotely so that you didn’t have to pay someone to stand around all day.
Absolute worst case, add a second temp sensor for the automated chill cycles. Pretty sure temperature sensors aren’t that expensive.
Yes? That was the problem with your suggesting someone go and change it. If you do that, and don’t have it automate the cooler, you STILL need someone.
So THAT one can be hacked anyways? Are you even thinking these solutions out at all? Like a little bit?
I feel like you’re not understanding what I am trying to convey. Or I am not being clear enough?
A temperature sensor being hacked is nothing to worry about. Worst case scenario, the hacked sensor will report the wrong temperature and some employee will come running over to the freezer. Upon manual inspection they will realise the temperature is in fact not +50°C despite the exposed sensor reporting that.
The freezers automated freezing/heating just runs off an other separate temperature sensor that won’t be hacked since it is not exposed to the internet.
Don’t this make sense to you? 😅
Do you not realize all the stuff would be garbage anyways because the legal log says it got too hot? You have it automated so you can adjust or fix the issue before you just water an entire cooler of product lmfao.
You seem to not comprehend that you’re solutions accomplish literally nothing but more money and time for employees.
air gapping is a pretty standard practice in pharma IT systems. Its probably not super feasible for a supermarket chain but their problems are not as severe. A fridge with sensors but no remote controls would be plenty sufficient for the purpose of ‘prove we kept steak cool until we sold it’.