@hacks4pancakes@infosec.exchange
2026-11-09 03:51 UTC
“Why are these systems even on a network? Just disconnect them!”
I see this after every OT attack, usually from smart IT people. As someone who responds to these incidents, I wish it were that easy. I wrote up how we got here, and why water utilities and refrigerators keep getting hit.
https://tisiphone.net/2026/11/08/lets-talk-about-why-all-this-ot-stuff-is-connected/
Replies (2)
-
@kcarruthers@infosec.exchange 2026-11-09 05:42
@hacks4pancakes@infosec.exchange folks never really think about OT
-
@gvenema@fairmove.net 2026-11-09 14:07
@hacks4pancakes@infosec.exchange The problem already is in the devices firmware themselves. Usually they have no permission model beyond everything or nothing. You want to read temperatures? Fine. But across exactly the same bus you get access to setting the temperature, or even uploading new firmware entirely with usually the thinnest of default passwords and encryption that would not have passed muster in the Napoleonic wars.