5 ms·
Could be. I just spent some time on the modbus.org site. I haven't looked in a while. There is pretty much no mention of security though they claim that Modbus
by thoughtsimple 11y ago
Could be. I just spent some time on the modbus.org site. I haven't looked in a while. There is pretty much no mention of security though they claim that Modbus over TCP is an internet protocol.
- ethbro 11y agoMaybe embedded network is the new javascript ecosystem: rediscovering novel ideas (like authentication!) that were invented 50 years ago. /deploying CAN bus without security
- digi_owl 11y agoI wonder if what is blindsiding all of these companies and people is routing. That if you have a box that can talk to network A and B, suddenly anything on A can talk to anything on B. A CAN bus, or older modbus installs, would be airgapped by its very nature.
- brandmeyer 11y agoJust because its CAN doesn't mean its actually air gapped. If there is a Linux box on one end for SCADA use or similar, then the path is IP -> Linux spl01t -> SocketCAN
- derefr 11y agoGiven a completely static authentication realm like the rooms of a hotel, Modbus over TCP over IPSec would work just fine, and be transparent to the application. That sort of sounds like a good reason to be using Linux (Android) controllers in the first place; maybe they just forgot to enable it (or let go the installing contractors before their job was done, as soon as everything seemed to be "working.")