5 ms·

If OP is managing something that is critical to life - think fire suppression controllers, or computers that are connected to medical equipment, I think it beco

If OP is managing something that is critical to life - think fire suppression controllers, or computers that are connected to medical equipment, I think it becomes very difficult to compare that against financial assets.

solarengineer 3y ago
I can think of two approaches for such companies: a. Use commercial OS vendors who will push out fixes. b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros. One needs different types of competence and IT Operational readiness in each approach.
- squeaky-clean 3y ago
  > b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros. How would that have prevented this backdoor?
jen20 3y ago
Such systems should be airgapped…
ajdlinux 3y ago
At a certain scale, "economic" systems become critical to life. Someone who has sufficiently compromised a systemically-important bank can do things that would result in riots breaking out on the street all over a country.
codedokode 3y ago
Something that is critical to life should not be connected to Internet.
- AlexandrB 3y ago
  And yet it seems like every new car is.
  - richrichie 3y ago
    Sshhh now you are starting to talk like a rightwinger. Alex Jones has been saying this for a long time ;)
concordDance 3y ago
You could use the EPA dollar to life conversion ratio. Though anything actually potentially lethal shouldn't really have a standard Internet connection. E.g. nuclear power plants, trains, planes controls, heavy industrial equipment, nuclear weapons...
account42 3y ago
In that case OP should not design systems were a sshd compromise can have a life-threatening impact. Just because it's easier for everything to be controlled from the cloud doesn't mean that others need to feel sympathy when that turnes out to be as bad of an idea as everyone else has said.

solarengineer 3y ago

I can think of two approaches for such companies: a. Use commercial OS vendors who will push out fixes. b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros. One needs different types of competence and IT Operational readiness in each approach.

squeaky-clean 3y ago
> b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros. How would that have prevented this backdoor?

jen20 3y ago

Such systems should be airgapped…

ajdlinux 3y ago

At a certain scale, "economic" systems become critical to life. Someone who has sufficiently compromised a systemically-important bank can do things that would result in riots breaking out on the street all over a country.

codedokode 3y ago

Something that is critical to life should not be connected to Internet.

AlexandrB 3y ago
And yet it seems like every new car is.
- richrichie 3y ago
  Sshhh now you are starting to talk like a rightwinger. Alex Jones has been saying this for a long time ;)

concordDance 3y ago

You could use the EPA dollar to life conversion ratio. Though anything actually potentially lethal shouldn't really have a standard Internet connection. E.g. nuclear power plants, trains, planes controls, heavy industrial equipment, nuclear weapons...

account42 3y ago

In that case OP should not design systems were a sshd compromise can have a life-threatening impact. Just because it's easier for everything to be controlled from the cloud doesn't mean that others need to feel sympathy when that turnes out to be as bad of an idea as everyone else has said.