this post was submitted on 03 Jan 2026
715 points (98.2% liked)
Technology
78305 readers
4081 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Well, I've never done it because it's not part of my tasks, but for example industrial PCs used for SCADA usually run Windows, and they are never allowed on the internet, so...
Nah, they're run by the laziest chucklefucks you've ever met - they're plugged right into a broadband modem with no firewall running bog standard teamviewer or RDP awaiting any connection (no filtering) because the people setting up and using these systems have no concept of infosec. They know how to set up their industrial system, plug it into the 'computer thingy', and hand it off the the municipal water dude who is a flat earth, anti-fluoride, moon-landing hoax, J6-denialist who knows nothing about technology, but wants to run the town's water treatment from his cell phone.
(not that I'm jaded by small town dynamics or anything)
Uhm... You and I have had vastly different experiences. Fortunately.
Other side of the same coin: I work for a municipality, and I can’t even connect my phone to the intranet because they use MAC whitelists for the entire network. The only thing non-whitelisted devices can even connect to is the (really shitty) public WiFi. Many cities used to be pretty lax about cybersecurity, but a few high profile attacks have made most of them (at least anything larger than a small town) rethink that stance. Hell, one city a few miles away had a ransomware attack that left their city services entirely unavailable for like three weeks. That was actually studied by lots of the local cities, to see what they can do to prevent similar attacks.
I hope that's not the only thing they do. MAC addresses are easily spoofed.
We have our clients switch to Linux now. Ignition works well enough and it's so much cheaper. It has drawbacks compared to wonderware, or the Siemens stack though. But I'll take those issues over logging into their systems still running on winXP.
That's what I dream of. But alas, industry moves slowly, and some especially so.