3 ms·
Serious question. I've been hearing about industrial applications/medical etc. having default passwords exposed on the internet for years. How have they not be
by penagwin 7y ago
Serious question. I've been hearing about industrial applications/medical etc. having default passwords exposed on the internet for years.
How have they not been exploited/fixed already? Shodan's made it clear for years, of course anybody can use zmap/masscan.
- tw04 7y agoPeople that know the passwords are generally ethical. Plus the risk reward isn't there. Say you have a hack for a pacemaker and you kill 1000 people. Then what? Literally every nation on Earth will be looking for you and you will either rot in prison for life or be put to death. And if the wrong country gets you first there will likely be a lot of torture along the way. Without having hacked a database of patient to device mappings, it's not like you can ask for ransom.
- lallysingh 7y agoFrame someone you don't like, short the vendor's stock, or separately hack a hospital to get the patient records. You don't even have to kill them for that, just a recordable, scary event. Also, you may already want someone in particular dead and are just looking for a vector. This seems almost untraceable.
- penagwin 7y agoI've seen several talks where they demoed showing access to hydroelectric dams, etc. I'm thankfully not this person, but at a basic level I could see some bored teen turning off a dam just for fun. Honestly the only reason I don't is because it would be "wrong" to do, but the internet is full of people, it's certainly not a stretch that somebody would want to.
- JoeAltmaier 7y agoIt can happen by accident. Some teen has a bot that scans around bricking devices with weak security; bricks critical infrastructure.