4 ms·
Absolutely. Meanwhile, we live in a world where VPNs are sold to the casual user while critical systems are left on internet facing networks. I've never under
by laurowyn 6y ago
Absolutely.
Meanwhile, we live in a world where VPNs are sold to the casual user while critical systems are left on internet facing networks.
I've never understood why, if these critical systems need remote access, it's not all done through a VPN of some sort. VPNs are not infallible, but it significantly increases the bar for entry from script kiddie to nation state real quick (depending on choice of crypt), while choosing a well supported implementation ensures long term bug fixes and security patches.
- bilbo0s 6y agoIn all honesty, why is a system so critical on the internet at all? People say, ease of administration, but there are other methods of achieving the same thing. Up to and including running your own network. On the one hand your engineers and chemists won't be able to fiddle with the aeration stage using their brand new, whiz bang, iPhone. On the other, the people in your community won't be put in harms way.
- the_only_law 6y ago> On the one hand your engineers and chemists won't be able to fiddle with the aeration stage using their brand new, whiz bang, iPhone Maybe not at home, but couldn’t they have a local 802.11 network set up for this?
- pseudoramble 6y agoNo idea why this wasn’t. Often times they’re not for this reason _and_ because the hardware itself is too difficult or impossible to get online and can’t be upgraded. Forget networks for a moment - a system running Windows XP is way less risk than an upgrade to Windows 7. Plenty of companies have older systems running vital hardware that if it went offline could cause massive outages, revenue loss being only one if the impacts. So air gapped networks are pretty common in ICS environments as a result.