I'm reading posts around fedi saying that fridges have no need to be controllable from the internet, and with some caveats I quite disagree.
-
@laumapret I believe that supermarkets, especially supermarket chains, are in a powerful enough position to be able to avoid those antifeatures when buying their appliances.
Now, it is possible that the fridges that were hacked weren't kept up to date because the producer wasn't providing a reasonable way to do it, but I also wouldn't be surprised if the supermarket management decided to skip on doing so to save money.
My experience with industrial hardware producers tells me that it was definitely somebody being cheap somewhere, but whether it was at the producer's side or the supermarket side is equally likely.
-
@gemlog yeah, our fridges (plural, two households) in the new house are pretty old, and we have plans to look for new ones in the near future, but we will carefully look for ones that have zero smart features, because the producers for consumer appliance can't definitely be trusted with those.
The only thing that we plan to do is to attach them to a carefully selected smart plug that will send power usage data to *our* network and measure which one is the one that needs to be changed first. But as soon as we have collected enough data the smart plug will go back to its box to be used elsewhere for similarly short periods of time as needed.
-
btw, I'm not sure whether the news has gone around the world, or just remained on european newspapers, this is mostly about the fact that a few French supermarket chains got their fridges hacked and all of their frozen and refrigerated food spoiled.
it had been known for years that that model of fridge was easily found on shodan, and could be accessed with username admin (iirc) and a trivial password.
-
Some 20 years ago, while writing a book about the Interne and its risks, I found the remote maintenance panel of a Caterpillar 797¹ somewhere in South America freely accessible after just a search on Google for some phrases contained in the interface.
I don't even try the usual passwords, but this means a script kiddie can heavily damage a $5,000,000 truck just for the lols.
-
@GustavinoBevilacqua on a few years ago people were easily able to find control panels for hydroelectric plants on shodan. with those you can probably also kill quite a few people, not just damage expensive machinery. -
G gustavinobevilacqua@mastodon.cisti.org shared this topic
-
@valhalla un termometro connesso al mio home assistant é considerato come "collegato a internet"?
-
@alorenzi dipende, il termometro ce l'hai messo tu o il produttore? e hai la certezza che i dati vadano solo al tuo home assistant e non anche al produttore del termometro?
(e al tuo home assistant si arriva da fuori la rete locale, anche tramite vpn?)
-
@valhalla
Ou, it feels that there is some new supermarket fridge hacking drama I didn't know about? Interesting. -
-
@valhalla I understand the need to monitor, but less so the need to control remotely. If something begins to go wrong with temperature outside opening hours, presumably most of the time someone needs to get to the location anyway to check what's up.
-
@JankaWessman being able to control the temperature for all supermarkets (or all supermarkets in the same region or something) from a single place can have value, if they need to finetune the precise temperature they are set at (and the times at which they are set at that temperature, depending on whether the shop is open and the fridges are being constantly opened and closed or not)
