• Ilovethebomb@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 hour ago

    Why, oh why, would you even have that ability in the first place? I’d have expected that to be air gapped so only diagnostic information is sent offsite, and any changes require a physical presence on site.

    • wheezy@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 hours ago

      Fuck Home Depot. Their parking lots are basically surveillance networks for ICE to abuse and harass people looking for honest day labor jobs.

  • deadbeef79000@lemmy.nz
    link
    fedilink
    English
    arrow-up
    17
    ·
    6 hours ago

    One of the CEO 's: “we need to do more about food security”.

    How about you pony up of some IT security?

  • Greyghoster@aussie.zone
    link
    fedilink
    English
    arrow-up
    7
    ·
    6 hours ago

    It is pretty amazing that there are so many stores affected by this attack. You would expect a number of manufacturers, different management systems, different networks, gateways etc that would limit the scope and increase the difficulty of mounting an attack of this scale. There must be a common vector in this.

    • PancakesCantKillMe@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      4 hours ago

      It was a third-party monitoring system and company (Danfoss). Outdated firmware was the vector. They manage many different stores and thus are the common thread.

      • Greyghoster@aussie.zone
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 hours ago

        I read that and thought outdated firmware would still be difficult to target unless it was the Danfoss hub that was targeted which makes the firmware a more iffy proposition.

  • EvergreenGuru@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    7 hours ago

    I wonder which country the hackers are from. Also, they should never have such important systems online. All updates should be done by experienced personnel on site. This is a tough lesson to learn.