3 ms·
The article bashes together two different topics related to devices on the internet in a way that doesn't really help. All the articles I have seen so far have
by upofadown 10y ago
The article bashes together two different topics related to devices on the internet in a way that doesn't really help. All the articles I have seen so far have done this.
The first is about devices connected to the net used to cause problems on the net such as DOS. Devices have a tiny attack surface as they are usually protected by a password for access. The fix there is easy, just stop shipping devices with default passwords.
The second is about attacks against devices that could create a "Risk to Life and Property". The fix there is harder in that it involves knowledge of whatever process is being controlled. Ideally systems would be safe in the face of any software failure, no matter what the cause.
- jaclaz 10y agoYep, and the NHS references the Ukraine power grid episode, which was caused through phishing via e-mail. Having SCADA's connected to the Internet is not a good idea anyway, but has nothing to do with having an el-cheapo - say - IP camera with admin/admin.