Teamviewer on a desktop, probably with a shared credential isn't very secure. Knowing this though, I doubt that it was a teamviewer exploit. My guess would be a disgruntled employee since they knew what to get into to change chemical set points.
1,350 karma · joined September 3, 2012
[ my public key: https://keybase.io/karmicthreat; my proof: https://keybase.io/karmicthreat/sigs/ttAGGnZVRE3IOjY_P_pSNvljde_QbjJxez9D8XwTSzE ]
Teamviewer on a desktop, probably with a shared credential isn't very secure. Knowing this though, I doubt that it was a teamviewer exploit. My guess would be a disgruntled employee since they knew what to get into to change chemical set points.
Several ICS vendors like Tosibox and EWON make devices to accomplish this. I think Tosi has the more secure model, though I hate their proprietary dongles.
VPNs are also used pretty successfully here. Several large companies also don't let you directly connect to anything. You vpn in and connect to a machine with Citrix and then you can use whatever was setup for your there. Usually whatever version of Logix/Studio 5000 the plant is on. You have to talk to someone in IT to get your files moved in/out.
I think Amazon went a different direction and uses Versiondog to monitor their automation systems and check for changes. I don't work there or know anyone on their automation team so I'm not aware of the details.
Still, I think you can have external access and be secure. You just need to balance things out with your business needs.
It's a dumb mistake, but not exactly an uncommon one. I made the same mistake early on and I have contract engineers that propose inappropriate storage solutions to me still on projects. Some very insistently. I think a whole lot of people that work on the embedded side of engineering treat storage as a magic perfect box.
At least you would have some reputation intact. Now he is just the guy that failed, couldn't recover and will have a hard time going anywhere.
So the clearing house requires 100% collateral for some stocks now instead of up to 5%. RH can't afford that and GME has been eating up 50% of RH daily trades.
But doesn't really answer why we need blockchain specifically instead of something that doesn't need energy intensive digital mining.
He speaking style can throw people off. I'm pretty sure I have heard this style from other eastern Euro and Russian people. It doesn't bother me, but I can see why it can be grating to some people.
I have back-ported somethings, but really a large chunk of the products had terrible technical decisions before I started. I spent the first couple years just dragging the company back from the technical and financial brink. I'm slowly eliminating old products from our sales sheet in favor of ones I engineered. So it will eventually be ok.
So a big thing people should consider when building something to scratch. Am I making something I can use again when I make my next product. Its a much higher mental load if you have no commonality between products. Also it can cause problems for sales, support and management when they have to remember nitty gritty details about each of your very divergent products.
Restaurants can survive this. But what they were doing in 2019 is not going to work.
But if you are a smaller business you are just going to be left to rot.
Electric thrusters are getting huge specific impulse improvements and the future seems to be pretty bright for them. We can trade time for efficiency essentially.
For interplanetary transit, just keep the platform running a circuit between the planet and earth. It's going to be way easier to hit your entry without getting into an unrecoverable situation.
One of my big goals right now is to figure out how to extract problems out of customers in a useful way. (I seem to be heading more and more to product manager/product owner skill set).