3 ms·

>- Cloud-based factory automation? Unsafe now. I feel like I must have slept through the point where that was ever a safe option rather than just a compromise

• Animats 5y ago
  Right. Internet-configurable power grid control relays were not a good idea.[1] "Web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication." (Yes, they actually put a web server in a device which directly controls high voltage relays in power grids.) "UR IED with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user." ... Those particular bugs were supposedly fixed. [1] https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02