4 ms·

Having your corporate network with clients, email and file server hit is something I can understand, but the broadcasting system? Maersk had the same problem, f

Having your corporate network with clients, email and file server hit is something I can understand, but the broadcasting system? Maersk had the same problem, for some unknown reason the computers running their most critical infrastructure was/is allowed to run pretty any application. Why is the broadcasting system on a network connected to anything else and if it most be: Why are those computers allowed to run anything but a few whitelisted application?

HideousKojima 5y ago
Worked IT at a Sinclair owned affiliate about 8 years ago. The teleprompter computer for the nightly news was connected to the internet, and was running Windows 2000.
- mrweasel 5y ago
  Security of so many things is an absolute joke. The teleprompter only needs to be connected to the writers network, and could easily be a read-only system that just pull the script from the network. There is so much room for improvement in pretty much any field using computers.
pjc50 5y ago
> Why is the broadcasting system on a network connected to anything else .. because that's how the programmes come in, over the internet? > Why are those computers allowed to run anything but a few whitelisted application? This is almost impossible to achieve, and doesn't help when the malware is running in the address space of the target process.
- mrweasel 5y ago
  Even if we accept that programs need to come in directly from the internet, then at least do that via a VPN. The broadcasting software isn’t going to be an attack vector for a drive-by malware attack, so limiting the broadcast system to only preapproved software would still help a great deal. Companies keep behaving like their critical systems isn’t that important and then they’re suprised when it goes wrong. At the same time they keep paying for useless audits done by accountants who will happily sign off on the security because there’s a firewall and anti-virus software installed.

HideousKojima 5y ago

Worked IT at a Sinclair owned affiliate about 8 years ago. The teleprompter computer for the nightly news was connected to the internet, and was running Windows 2000.

mrweasel 5y ago
Security of so many things is an absolute joke. The teleprompter only needs to be connected to the writers network, and could easily be a read-only system that just pull the script from the network. There is so much room for improvement in pretty much any field using computers.

pjc50 5y ago

> Why is the broadcasting system on a network connected to anything else .. because that's how the programmes come in, over the internet? > Why are those computers allowed to run anything but a few whitelisted application? This is almost impossible to achieve, and doesn't help when the malware is running in the address space of the target process.

mrweasel 5y ago
Even if we accept that programs need to come in directly from the internet, then at least do that via a VPN. The broadcasting software isn’t going to be an attack vector for a drive-by malware attack, so limiting the broadcast system to only preapproved software would still help a great deal. Companies keep behaving like their critical systems isn’t that important and then they’re suprised when it goes wrong. At the same time they keep paying for useless audits done by accountants who will happily sign off on the security because there’s a firewall and anti-virus software installed.