Re: US Govt Warns About Siemens S7 PLA - Iran Can Hack 'Em

On 8/21/26 09:40, The Natural Philosopher wrote:
> On 21/08/2026 14:24, Roger Blake wrote:
>> On 2026-08-20, c186282 <[email protected]> wrote:
>>> https://www.newsmax.com/world/globaltalk/siemens-devices-water- 
>>> facilities-cybersecurity/2026/08/19/id/1266642/
>>>
>>> Several U.S. government agencies warned that unidentified
>>> hackers are trying to breach devices made by Siemens that
>>> are used to monitor and operate water facilities and ‌other
>>> critical infrastructure systems, according ​to a cybersecurity
>>> advisory published Wednesday.
>>
>> Surprisingly almost no one asks the question "Why is critical
>> infrastructure connected to the internet?" (Likely it wasn't
>> 30-40 years ago.) Pull the plug and it can't be hacked.
>>

> Because its a simple and cheap way to control unmanned installations

   Yep. And simple/cheap for evil people to GET AT.

> I mean here on the UK Fens there are many many sluice gates and pumps 
> that should operate automatically on float sensors, but I suspect are 
> also monitored and controlled centrally.
> 
> No one ever thought anyone would have any interest in  hacking them.

   Last-century thinking.

> Siemens are a pretty shoddy firm anyway.

   Well, their stuff WORKS and is AFFORDABLE and
   thus using it makes you the low-bidder for
   contract jobs.

> One would have thought they had some some form of authentication and 
> encryption and indeed firewalling going on. There is no need to expose 
> such devices to the whole Internet...

   Sure there is ... CHEAPNESS. Just ONE over-worked
   inexpert geek to rule 100 things rather than hiring
   yer OWN on-site geek.