• frank@sopuli.xyz
    link
    fedilink
    arrow-up
    9
    ·
    7 hours ago

    You can have stuff on automation networks and not expose them to the internet

    • makeshift0546@lemmy.today
      link
      fedilink
      arrow-up
      1
      arrow-down
      7
      ·
      edit-2
      7 hours ago

      Yeah dude, the point of the meme was definitely vlans 🤦

      Also, totally nobody ever got past a vpn/firewall 🤦

      • frank@sopuli.xyz
        link
        fedilink
        arrow-up
        6
        ·
        6 hours ago

        I’m not talking about putting the fridges behind a firewall or a VPN.

        In most factories I’ve worked in (if there’s any outside connection at all), you would connect devices to a PLC with 2 network cards. The PLC’s other network card goes to a server (that’s again, ideally not on an exposed network at all).

        In this case, if your server was compromised, and someone tried to compromise the PLC, they’d need to safety sign it (and often physically touch it to set it to run). You just can’t hack a motor or something in a factory from afar if it’s networked correctly.

        It’s a LOT more than just a firewall in proper OT setups.

        • MrOtingocni@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          6 hours ago

          I said take the upload! Damn you, robot, obey me!

          PLC: lol, fuck you, bro, I’m still in run mode. And if you stick your knife in the lock again because you’re too lazy to find a screwdriver I’m gonna break the tip off.

        • makeshift0546@lemmy.today
          link
          fedilink
          arrow-up
          1
          arrow-down
          5
          ·
          6 hours ago

          Yeah dude, grocery stores all around the world running physical dmz’s in house 😂👌👍🤡

          delusional stuff