I stayed in a hotel with Android lightswitches and it was as bad as you'd think

Re:I stayed in a hotel with Android lightswitches and it was... by thoughtsimple on Friday March 11, 2016 @10:47AM (#11267249)

Could be. I just spent some time on the modbus.org site. I haven't looked in a while. There is pretty much no mention of security though they claim that Modbus over TCP is an internet protocol.

[ Parent | on HN ]

Re:I stayed in a hotel with Android lightswitches and it was... by derefr on Friday March 11, 2016 @12:45PM (#11268164)

Given a completely static authentication realm like the rooms of a hotel, Modbus over TCP over IPSec would work just fine, and be transparent to the application. That sort of sounds like a good reason to be using Linux (Android) controllers in the first place; maybe they just forgot to enable it (or let go the installing contractors before their job was done, as soon as everything seemed to be "working.")

[ Parent | on HN ]

Re:I stayed in a hotel with Android lightswitches and it was... by ethbro on Friday March 11, 2016 @12:03PM (#11267798)

Maybe embedded network is the new javascript ecosystem: rediscovering novel ideas (like authentication!) that were invented 50 years ago.

/deploying CAN bus without security

[ Parent | on HN ]

Re:I stayed in a hotel with Android lightswitches and it was... by digi_owl on Friday March 11, 2016 @03:16PM (#11269183)

I wonder if what is blindsiding all of these companies and people is routing.

That if you have a box that can talk to network A and B, suddenly anything on A can talk to anything on B.

A CAN bus, or older modbus installs, would be airgapped by its very nature.

[ Parent | on HN ]

Re:I stayed in a hotel with Android lightswitches and it was... by brandmeyer on Friday March 11, 2016 @05:18PM (#11269952)

Just because its CAN doesn't mean its actually air gapped. If there is a Linux box on one end for SCADA use or similar, then the path is IP -> Linux spl01t -> SocketCAN

[ Parent | on HN ]