Kind of funny to say the security machine hasn’t been patched for 2 years
Yeah I know it’s badges not mission impossible security
Yeah I know it’s badges not mission impossible security
The process to re-approve a machine after a bloody update is painful(to say the least).
Even for something as lousy as a BMS system of a reasonable size (100 bacnet controller) will still take 1 week or more to fully test and approve. Keep in midn that these are machine where the only things that you can plug in are those whitelisted at the end of the test.
Even the approval to replace a keyb+mouse set takes a few days and requires a sys admin to go to site.
Our IT is not purposely keeping a security hole open to boast about uptime. If there was a security impact to our particular configuration/use-case, we'd patch it for sure.