News for hackers. Stuff that matters.
Re:Vulnerable industrial controls directly connected to Inte... by daemin on Monday January 29, 2018 @11:29AM (#16258409)
Pretty much built for someone that knows exactly what they are doing. Like they've read the manuals cover-to-cover and taken an exam.
Re:Vulnerable industrial controls directly connected to Inte... by blincoln on Monday January 29, 2018 @11:55AM (#16258650)
An industrial control system that crashes when it receives an unexpected network request isn't built for someone that knows exactly what they are doing. It was built by someone who wanted to expend the minimum effort possible and make contingency-handling someone else's problem.

This isn't just about hacking. A device that crashes hard when it receives a POST with an empty body may do the same thing if there's a physical glitch with its connection, or if a cosmic ray flips a bit somewhere. Devices that control industrial machinery should be more reliable than that.

If this were a hobbyist project, or a toy, that would be one thing, but these are specialized devices that cost a lot of money. They're fragile liabilities that don't belong anywhere near a shared network.

Re:Vulnerable industrial controls directly connected to Inte... by folkhack on Monday January 29, 2018 @01:50PM (#16259662)
> An industrial control system that crashes when it receives an unexpected network request isn't built for someone that knows exactly what they are doing.

Yeah - I can see even the simplest of network vulnerability scans wreak havoc on a device like this.

Re:Vulnerable industrial controls directly connected to Inte... by Parcissons on Monday January 29, 2018 @03:18PM (#16260302)
Its enough to just plug in a cable into two switch ports.
Re:Vulnerable industrial controls directly connected to Inte... by daemin on Monday January 29, 2018 @05:22PM (#16261169)
Yeah, that's the reasoning someone needs to use as to why something like this exists. It only works at all if you everything exactly correct.