alt Hacker NewsIf you believe some of the emerging comments out there - try "Danfoss CVE" - you'll see that some of the suspects are 15-20 year old controllers like the Danfoss SM800 (EOS 2021) and SC355 (EOS 2016).
Why don't they just--- no margin. But there were CVEs-- no margin.
The laptop class doesn't always grok that the shift-work labor class has nothing in terms of luxuries like security reviews and gear replaced on cycles and other basics taken for granted.
But I'd setup Tailscale and-- would you, the grocery store manager running on 3% margin, really? What if you're part of a chain and it's centrally controlled elsewhere, like all the other decade-old tech you use but have to call and wait for a dispatched tech to handle?
Secure-by-default laws will eventually help, but there's always going to be groaning infrastructure particularly in commodity industries, and we still haven't onboarded most of the disaffected men to the Internet that will commit innumerable more hacks and disruptions.
Replies
> The laptop class doesn't always grok that the shift-work labor class ...
I think it's more than this. Industrial control system upgrades are serious business and (at least if you're doing them properly) require a lot of planning and consideration. Particularly when the subsystem being replaced is decades old already.
I think the overwhelming majority of people (including on hn) have no understanding of how complex industrial systems are - even as-built, but particularly after decades of evolution. Doing proper engineering in these spaces is expensive.
You can reasonably blame supermarket chains for being insecure, but we certainly aren't currently enabling them (or anybody else) when it comes to fixing these issues.
So what you're telling us is that there is tremendous opportunity for a startup to disrupt the space with new Refrigeration-as-a-Service (RaaS) products controlled by AI. That way we can replace those legacy microcontrollers with modern, secure GPUs and vibe-coded AI agents.
Thank you for saying this. It's quite frustrating to read some comments here that have obviously lost touch with the reality of the vast majority of people and businesses across the world.
I’d be willing to bet many more HN users work for companies who are the ones creating unnecessarily network connected smart devices than work in infrastructure, trades, retail-adjacent positions that implement/use many of these network connected devices.
Lots of completely out of touch comments
Target learned the security lesson the hard way, but they definitely learned it. When I was there, security was one of the rare parts of the tech org I found legitimately impressive. (But also: I am not a security guy! Maybe their actual practices were compelling but flawed! But the organization as a whole was legitimately serious about it )
It's not entirely clear which comments/criticisms you're responding to when pointing out the lack of margin. Whose excuse is that? And what's it an excuse for?
Security isn't optional just because margins are low. If eg FedEx decided to disregard security because they only made 3% of the value of the packages they ship in profit, they'd lose most of that business fast. But yes, let's not shame folks for failing to preempt theoretical-yet-unseen threats, if that's what you mean.
Framing IT vs OT differences as a class struggle?
Sir, I think you just invented entirely new type of technomarxism. Sunrise, parabellum!
...
As fun as it is, this has nothing to do with laptops and everything to do with someone not implementing Purdue model right.
Doesn't sound all that convincing to me. There is no need for network controlled fridges in the first place. And it's not like setting up that network control was free. This is not about saving money, this is about ignoring what IT people preach since multiple decades now, spending more for the attack vector and then loosing a lot of money when that attack vector gets used. Margins? If it were about margins the problem wouldn't exist.
(I can see the need for remote monitoring, that the freezer actually worked. Controlling the temperature is the issue.)