3 ms·
This is just embarrassing on multiple counts. No equipment from adversary countries should be allowed in American infrastructure. I wonder what sort of attacks
by blackeyeblitzar 2y ago
This is just embarrassing on multiple counts. No equipment from adversary countries should be allowed in American infrastructure. I wonder what sort of attacks are possible using such a modem, but maybe it doesn’t matter - they may find creative ways to disrupt operations like disabling the crane remotely.
It’s interesting to see the tactics used by the crane manufacturer, ZPMC, to pressure port customers into accepting modems and arbitrary remote access, as detailed on page 29 (different prices, warranty issues). Also interesting is page 30, which highlights issues with using companies that we might normally trust, like ABB from Germany, because they in turn have a partnership with the offending Chinese company, ZPMC.
What I’m taking away is that we have been complacent in managing risks from countries like China, and need to take an aggressive security minded approach to managing possible vulnerabilities and attacks.
- SapporoChris 2y ago"No equipment from adversary countries should be allowed in American infrastructure." Seems like an extreme take. Wouldn't it be better to accept the best equipment that has passed audit regardless of origin?
- pylua 2y agoWhere there is a will there is a way. No amount of audit has an acceptable error tolerance for critical infrastructure here.
- mensetmanusman 2y agoYes for allies, no for adversaries.
- refulgentis 2y agoThis is a much finer and quickly shifting distinction than OP's contribution and flippant replies imply. Right off the top of my head, Phillipines.
- pestatije 2y agoABB is not from Germany...what else in ur comment is bs?
- blackeyeblitzar 2y agoSorry ABB from Sweden/Switzerland. It was one of the competing crane companies in the report, Liebherr, that has factories in Germany.