Hacker News Reader

I think such devices anyway have anything lost in a companys LAN. Before such devices had a serial link to a PC. Now every device is in the office LAN. They can never be secure for the many years they are in service.

View on HN

It has been like that since the 90s. At Stanford we had a sysadmin track down a warez site to our HP logic analyzer. Everything at Stanford in the 90s had a public IP address (at least in EE).

Probably an HP 16600/16700[1]. The control processor is basically a repackaged HP-PA workstation running a full version of HP/UX. Used X11 for remote access. The earlier 16500 had an optional, separate equivalent processor.

I have a 16702A, which includes a front panel LCD and keyboard console. It's a beast.

[1] https://www.keysight.com/us/en/product/16700A/logic-analysis...

Maybe easy fix would be some certification requirement for routers that by default ports to device are closed even from same network? Some time ago there was issue with default passwords and it got solved with default passwords unique to device.

Such devices can also be attacked in a second stage from a compromised PC or so. Such devices have nothing lost in a production LAN at all.

Reply on news.ycombinator.com