https://programmerhumor.io/networking-memes/the-ultimate-fir...
My fucking fume hood on my stove has Bluetooth, because Samsung just can’t help themselves apparently.
But they don't need to be cloud-connected through some big corp's cloud. I want them local and firewalled, ideally.
Can you turn that off or do you just have to put up with the noise?
> Danfoss told AFP in a statement that most of the affected equipment was "legacy" products which "no longer receive software or security updates".
They sell fricken refrigerators for God's sake. Maybe I can understand planned obsolescence for a cell phone, but a fridge? And especially to grocery stores that operate on razor thin margins to begin with, the idea that they'll just dump their old working refrigerators because the manufacturer refused security updates is a guaranteed recipe for stuff like this.
They use cold cases and have rooftop or outdoor condensing units and evaporators inside of the cold cases/freezers/etc. There’s refrigerant piping running all over the place and there’s a bunch of sensors and relays that are automated to manage the refrigeration system.
My assumption is the Danfoss control system they’re using is EOL, it’s the grocer’s responsibility to upgrade their automation equipment if it’s unsupported.
I could see remote monitoring (of temps) and logging on the system (cycle time etc) but does one really need to control the defrost cycle? It's probably just a web interface on a single controller that used to be accessed by HVAC techs only.
> > "legacy" products which "no longer receive software or security updates".
Because it's the EU I have to wonder if they will finally mandate that software go into escrow and be released if support stops.
Otherwise, this sort of spoilage could easily happen by accident as well.
There is a ton of refrigerant piping, multiple condensing units, multiple evaporators, relays, and sensors connected to a controller that automates the refrigeration system. Not standalone refrigerators.
I shouldn’t need to list the benefits of remotely monitoring a system that can cause tens or hundreds of thousands of dollars if it fails.
Why, so you can turn it on from your smartphone when you're out of town, of course!
mneil•1h ago
On the bright side I'm sure the manufacturer and others will have an increased security posture going forward.
psychoslave•45m ago
bambax•40m ago
It's not immediately obvious to me why fridges in supermarkets need remote control; a supermarket is a place where there are always people, it's not a base on Mars. And even if a remote is needed, it should probably not go further than the manager's office.
Shank•38m ago
I don’t know to what degree control is needed, but remote supervision of cold holding temperatures is good to make sure food doesn’t spoil. Most places that don’t have networked fridges have staff manually logging the cold holding temperatures to make sure things are working.
Again, though, I don’t know about making changes though.
bambax•33m ago
amluto•14m ago
The other, more likely, answer is that there’s a diagnostic mode that allows raw control of the system and no one bothered to require physical presence to enable service mode.
With remote firmware update capability, at attacker could easily brick the entire fleet. With just service access it could be possible but would be more complex.
bmilleare•9m ago
Having networked telemetry seems like a good idea, just not sure why they would need remote control too - that seems far more dangerous than necessary.
queenkjuul•16m ago
newsclues•35m ago
ungreased0675•21m ago
dist-epoch•28m ago
But it could be just for the lulz.
Remember the hackers behind the seven proxies, AntiSec, which hacked the NATO library website, and went to prison for it.
https://en.wikipedia.org/wiki/Operation_AntiSec
queenkjuul•18m ago
Wonderful world we live in where refrigerators and cars also become e-waste because a manufacturer gets tired of patching them
pvaldes•10m ago
AnimalMuppet•9m ago
Wow, are you an optimist. The manufacturer has stated that they're past the period of security updates. And others... meaning the supermarkets? They outsource that. The people they outsource it to? Maybe they'll start paying attention to security.