cross-posted from: https://lemmy.zip/post/74351721

The refrigeration systems were cranked up to 122 degrees Fahrenheit in at least a dozen countries.

all 16 comments

sorted by: hot top controversial new old
[–] 5 points 3 hours ago (1 child)

They weren't even protected with a wireguard tunnel? 🤔

  • source
  • hideshow 1 child comment
  • [–] 7 points 5 hours ago

    Maybe they should stop using hunter2 as their password.

  • source
  • [–] 10 points 6 hours ago

    Euros finding out why the "S" in "IoT" stands for "Security"

  • source
  • [–] 17 points 7 hours ago* (1 child)

    These are on the internet for things like cold chain auditing (consumer protection/health inspection stuff) and dynamic power grid balancing (as in, sun is shining extra hard today, so set all the grocery fridges a couple degrees lower temporarily to act as a solar battery). I.e., for good reasons that we like. Grocery fridges amount to something like 1% of all the energy used in any given country, so this isn’t nothing.

    There haven’t been many details about these attacks other than the "password of the day" backdoor, and it’s reasonably likely that these were only visible on an intranet that was breached by hacking someone’s laptop or something.

    The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.

  • source
  • hideshow 1 child comment
  • The real problem is that they’re still using the firmware with the manufacturer backdoor. That’s crazy.

    This is what keeps me up at night 😭

    I understand the web access on these devices is to allow remote access by technicians. It should be only enabled when actively needed but that's a lot to ask apparently.

  • source
  • parent
  • [–] 27 points 8 hours ago (2 children)

    Stop connecting basic thermostats to the web. Holy crap they worked fine before.

  • source
  • hideshow 2 child comments
  • [–] 13 points 7 hours ago (1 child)

    From what I understand, there are SOME reasons to have industrial freezers online, so they can be centrally monitored for maintenance issues or try and maximize efficiency by adjusting setting remotely or whatnot.

    But, you'd think they could have a fucking airplane mode where they could just run as fucking freezers.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 12 points 7 hours ago

    I get there are SOME practical reasons to have industrial freezers hooked up to wifi.

    But, you'd think they could have like, an offline mode, where they just work like normal freezers.

  • source
  • [–] 16 points 8 hours ago (2 children)

    What's funny is everyone's like, "Why are fridges on the internet‽" Wait till y'all find out about scada. hahaha

  • source
  • hideshow 2 child comments
  • [–] 2 points 3 hours ago (1 child)

    Shhhh! Don't let people know you can connect it to the internet!

    A good chunk of SCADA attacks have involved access to the hardware but there have been more and more notable remote attacks too.

    https://www.opb.org/article/2023/12/03/iran-linked-cyberattacks-threaten-equipment-used-in-u-s-water-systems-and-factories/

  • source
  • parent
  • hideshow 1 child comment
  • [–] 16 points 8 hours ago (1 child)

    Why the fuck can someone do a cyber attack on freezers wtf

  • source
  • hideshow 1 child comment
  • [–] 14 points 8 hours ago

    Why would you connect the fridges to the internet! Just don’t do that! You’ve created a vulnerability that just didn’t need to exist!

  • source