• AwesomeLowlander@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    33
    ·
    2 days ago

    Honestly, it’s for the best that this crap is happening now, instead of at some point in the middle of a conflict. Hopefully the idiotic companies start figuring out security matters.

    • CapuccinoCoretto@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      Some MBA twat: “IT layoffs saved us €400,000/yr”

      Some CEO twat: “…but cost the company €25,000,000 this year alone.”

      • SapphironZA@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        9
        ·
        1 day ago

        Nah, that CEO agrees with the MBA twat and appears entirely clueless that this loss was cause by his bad policies in procurement and IT governance.

        • it_wasnt_arson@awful.systems
          link
          fedilink
          English
          arrow-up
          2
          ·
          9 hours ago

          The stockers at the stores must have plugged them in wrong. Next year, we’re spending €600,000 on training to get entry-level employees up to speed on company values so they don’t do this again.

          • SapphironZA@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 hours ago

            And they will have the training registers to prove it. No policy changes of course. Just another auditor sign-off sheet that says they are in compliance with “best practice”

  • eicker@lemmy.worldOP
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    2
    ·
    2 days ago

    We’ve built a continent where a supermarket freezer can be remotely turned into a sauna. The scary part isn’t just sabotage: it’s how many essential services have become internet appliances without an equally serious plan for what happens when the internet turns hostile.

    • it_wasnt_arson@awful.systems
      link
      fedilink
      English
      arrow-up
      3
      ·
      9 hours ago

      Honest question: Do you write these top-level comments with LLM assistance? The 2-3 sentence structure in restating a summary of the post is remarkably consistent.

      • lawks@aussie.zone
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 hours ago

        Running it through a detector gave a 100% AI match. If it’s not slop, it imitates it perfectly.

    • SapphironZA@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      That’s the real breach. The fact that a fridge was made with no manual override control.

      Every piece of industrial machinery has 3 settings on a large accessible control panel. OFF, AUTO and ON.

      The lack of the ON and OFF functions should be illegal for all equipment.

    • jagermo@feddit.org
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 day ago

      Scada-systems were always held together by hope and prayer. I wrote about this 15 years ago, same issues. Shodan will happily show you internet connected control systems and has shown them for 2 decades.

      Companies do not care about security as long as they are not being held liable.

  • stoy@lemmy.zip
    link
    fedilink
    English
    arrow-up
    15
    ·
    2 days ago

    I suspect that we will start seeing a shift back from putting critical equipment in the cloud or running them directly connected to the internet, to a more secure onprem solution.

    The cloud ain’t going anywhere, but some equipment will disconnected from it, and have an onprem box that monitors it, with the ability to send alert emails but little else access outside the building, there will be more investments into network security by sectors that hasn’t really dealt with that before.

    • eicker@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 days ago

      💯 The future probably isn’t cloud versus on premises, but deciding which systems should never accept commands from outside the building. A freezer can email you that it’s failing without giving someone on another continent permission to defrost it. Apparently that’s now a cybersecurity strategy.