frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Fridges in French supermarkets hit by cyber attack

https://www.bbc.com/news/articles/crq5nzxv9q4yo
46•cataflam•2h ago

Comments

cataflam•2h ago
Looks like that specific vulnerability was found this summer, disclosed in coordination with the vendor and at least some models were patched [0] (unclear if all models were), but from early reports:

- they either didn't warn their customers this was a critical security patch, - many of these fridges/freezers were directly accessible on the internet with their own 3G/4F SIM cards without further protection!

Crazy stuff

[0] https://www.claroty.com/team82/research/freeze-the-controlle...

Delphiza•52m ago
That is a shocking read! check_code_of_day WTAF! How did Danfoss not go around to all customers and hand-install a patch for this.
stackskipton•47m ago
Do you know how much that costs?!? What about our executive bonuses?
kingleopold•2h ago
no more french fries!!!
ciupicri•30m ago
> While they may be known across the world as ‘French fries’, there’s nothing French about them. The name ‘friet’ comes from patates frites, Belgian-French for ‘fried potatoes’. One possible explanation for the association could have been formed in the First World War, when American soldiers were introduced to ‘fried potatoes’ in Belgium, but thought they were in France because that was the language spoken in that region. Whether you call them Flemish or Belgian, our delicious fries are made from bintje potatoes per tradition, and are the tastiest you’ll find anywhere on the planet.

Source: https://www.visitflanders.com/en/discover-flanders/culinary-...

bronco21016•2h ago
This is pretty interesting as the Danfoss vulnerability was suspected to be related to a similar situation that occurred across US military bases in late August 2026.

https://signalandsilence.substack.com/p/i-think-someone-hack...

Could this be the same group? Or someone inspired by reading that article? Or just entirely unrelated?

snapcaster•59m ago
immediately thought of this article as well. really interesting. I could imagine someone using options/futures or other obscure financial instruments to make some money off this. hard to think of other motivations
deepfriedchokes•26m ago
Perhaps they’re motivated by Europe’s support for Ukraine and the recent data center attacks in Russia?
nraynaud•18m ago
I think Russia is doing random stuff of the kind, my understanding is it’s just about sawing general chaos, not doing a strong action that would be discussed at a diplomatic level.
Delphiza•57m ago
Previous discussion https://news.ycombinator.com/item?id=50055304
kstrauser•53m ago
Good. I’m not happy that this happened. That’s a large financial loss. I don’t like thinking about all the good, edible food thrown away instead of nourishing people. But the infosec thing that keeps me up at night is the utter lack of SCADA security. “Relax! This dam won’t collapse as long as no one guesses our public IP address!”

Lots of industrial controls haven’t been updated since they were deployed in the 90’s. “And why should they be? If it ain’t broken…” Well, because they’re freaking broken!

So I’m glad that this happened in a tangible, public way people can easily understand without it involving something much more drastic. If your family asks about this, explain that you’re glad no one blew up a gas pipeline… yet.

Silhouette•10m ago
There is certainly a need to raise awareness of the danger of connected/online devices. If something is connected to the public Internet then it can be attacked. If something has built-in wireless connectivity then it can be attacked. Unfortunately it really is as simple as that. Safeguards are needed accordingly.

Connected vehicles are the example that terrifies me the most. There have been numerous examples of lax security in this area already and a fleet of rogue cars or delivery trucks could obviously cause huge amounts of damage, injury, and loss of life.

There's a legacy of openness in car tech and software that was never designed with robust security and isolation of critical components in mind. I've heard that this has started to change more recently and that's reassuring if true. But this still feels like an area with far too little regulation or oversight given the past choices of vehicle manufacturers and far too much rush to connect everything up remotely even for minor convenience reasons.

In some cases there also now seems to be legally mandated connectivity for things like automated emergency calls after an accident. This should at least have a genuine benefit in the unfortunate situation that it's needed - but until vehicle security looks more like Fort Knox than a sandcastle it might still prove to be a bad choice in the end.

chrisjj•37m ago
> The software allows retailers to manage their cold units remotely.

Will they never learn?

card_zero•19m ago
If they didn't do it that way, some bad things would happen: sometimes a fridge would fail and the food in that fridge would spoil.
Freak_NL•14m ago
* Fridges are welcome to send a panic message.

* Fridges are read-only through their remote interface.

Both of these can be true if you must connect them to the internet.

lxgr•16m ago
To not control any industrial processes remotely? I hope you realize that requiring that would make solar and wind farms completely non-viable, among many, many other things.
lightedman•29m ago
Of all the things to put on a network, this ranks as one of the dumbest, ever. You don't need control of the unit done over a network, just the data on whether it is working or not. Anything else is simply asking for someone else to come along and break your stuff.

To boot, refrigeration has been wholly automatic for decades. It literally runs itself. It doesn't need any network connectivity other than to say "I work" and "I'm broken" and that's it. Allowing control commands to be sent over the network is, yet again, just asking for trouble.

darth_avocado•16m ago
Dupe: https://news.ycombinator.com/item?id=50057956

GLM-Legal: Advancing Agentic Legal Intelligence

https://z.ai/blog/glm-legal
121•ilreb•1h ago•74 comments

A Modern Web App in C

https://prophitt.me/writing/a-modern-web-app-in-c
55•prophittcorey•1h ago•26 comments

The Making Of Super Mario 64 – full Giles Goddard interview (2001)

https://pixelatron.com/blog/the-making-of-super-mario-64-full-giles-goddard-interview-ngc/
153•gregsadetsky•1d ago•56 comments

Launch HN: Agent37 (YC F26) – Low-cost agent sandboxes for running agents

5•vishnukool•36m ago•0 comments

Turn a WiFi 7 Router into a 320Msps Software Defined Radio Receiver

https://github.com/h0m3us3r/w1700k-sdr
47•djfergus•4h ago•10 comments

Show HN: PS2 games statically recompiled to WebAssembly

https://github.com/snuri00/ps2-web-recomp
196•deadxwarrior•10h ago•103 comments

Fingerprints are the new cookies

https://royfish.dev/fingerprints-are-the-new-cookies
616•royfish•18h ago•301 comments

Kevin Kelly's 2016 AI Predictions, 10 Years Later

https://taylor.town/kk-ai-2026
7•surprisetalk•2h ago•1 comments

Fridges in French supermarkets hit by cyber attack

https://www.bbc.com/news/articles/crq5nzxv9q4yo
48•cataflam•2h ago•19 comments

Type-safe HTML templating in Zig

https://lalinsky.com/2026/10/11/type-safe-html-templating-in-zig.html
201•lukaslalinsky•12h ago•75 comments

Incident with Actions, Pull Requests and Issues

https://www.githubstatus.com/incidents/93njd414rpbx
121•dkpk•4h ago•109 comments

French supermarkets suffer fridge shutdown after 'unprecedented' cyberattack

https://uk.finance.yahoo.com/news/french-supermarket-chains-cyberattack-forced-115141288.html
124•thinkcontext•1h ago•94 comments

Total Annihilation, rebuilt for modern computers

https://nanolathe.gg
628•jttnr•23h ago•238 comments

Living in the Weimar Era of Ruby

https://blog.julik.nl/2026/10/the-weimar-of-ruby
60•julik•6h ago•19 comments

Muse Wonder

https://research.meta.ai/blog/muse-wonder
69•meetpateltech•34m ago•27 comments

An Unmade Film Shaped Hayao Miyazaki

https://animationobsessive.substack.com/p/an-unmade-film-shaped-hayao-miyazaki
40•vinhnx•2h ago•5 comments

Secret of Orange Cats Revealed After 60-Year Search

https://www.sciencealert.com/secret-of-orange-cats-finally-revealed-after-60-year-search
151•bookofjoe•1d ago•129 comments

Calculus with Julia

https://jverzani.github.io/CalculusWithJuliaNotes.jl/
217•subset•2d ago•41 comments

I Found a $90k Remote Code Execution Vulnerability in Google

https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce
73•soeckly•9h ago•35 comments

Running the unmodified Linux amdgpu driver on an iPad

https://github.com/Geramy/LemonSeed-Studio
71•joshcsimmons•1d ago•19 comments

Choreographic Programming in Rust

https://github.com/hibanaworks/hibana
44•o8vm•1d ago•30 comments

QGIS: No A contributions permitted

https://github.com/qgis/QGIS-Enhancement-Proposals/pull/387
330•bwnkl•6h ago•356 comments

Bag of Decisions Reranker

https://softwaredoug.com/blog/2026/10/08/bag-of-decisions.html
60•zdw•2d ago•10 comments

Terence Tao: Math 2.0 [pdf]

https://teorth.github.io/tao-web/slides/math-2-0-caltech-2026.pdf
482•Anon84•1d ago•474 comments

Hackers heat French supermarket fridges, sparking fires and food losses

https://www.reuters.com/business/retail-consumer/french-supermarket-chain-intermarche-hit-by-cybe...
25•salaryman777•2h ago•3 comments

Cartographers of North Korea (2019)

https://cartographers-nk.wonyoung.so/
306•edent•21h ago•62 comments

Reverse engineer anything with agents, from app behavior down to native binaries

https://github.com/morluto/rea
6•taytus•51m ago•0 comments

Doory – Open-Source Canva

https://github.com/shaongitbd/doory
184•acley•16h ago•68 comments

Ask HN: Do you want a router that has DD-WRT pre-installed?

113•Ixander•1d ago•124 comments

Deep dive into Azure Maia 300 architecture

https://azure.microsoft.com/en-us/blog/deep-dive-into-azure-maia-300-architecture/
16•azhenley•2h ago•2 comments