World News
A community for discussing events around the World
Rules:
-
Rule 1: posts have the following requirements:
- Post news articles only
- Video links are NOT articles and will be removed.
- Title must match the article headline
- Not United States Internal News
- Recent (Past 30 Days)
- Screenshots/links to other social media sites (Twitter/X/Facebook/Youtube/reddit, etc.) are explicitly forbidden, as are link shorteners.
-
Rule 2: Do not copy the entire article into your post. The key points in 1-2 paragraphs is allowed (even encouraged!), but large segments of articles posted in the body will result in the post being removed. If you have to stop and think "Is this fair use?", it probably isn't. Archive links, especially the ones created on link submission, are absolutely allowed but those that avoid paywalls are not.
-
Rule 3: Opinions articles, or Articles based on misinformation/propaganda may be removed.
-
Rule 4: Posts or comments that are homophobic, transphobic, racist, sexist, anti-religious, or ableist will be removed. “Ironic” prejudice is just prejudiced.
-
Posts and comments must abide by the lemmy.world terms of service UPDATED AS OF OCTOBER 19 2025
-
Rule 5: Keep it civil. It's OK to say the subject of an article is behaving like a (pejorative, pejorative). It's NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.
-
Rule 6: Memes, spam, other low effort posting, reposts, misinformation, advocating violence, off-topic, trolling, offensive, regarding the moderators or meta in content may be removed at any time.
-
Rule 7: We didn't USED to need a rule about how many posts one could make in a day, then someone posted NINETEEN articles in a single day. Not comments, FULL ARTICLES. If you're posting more than say, 10 or so, consider going outside and touching grass. We reserve the right to limit over-posting so a single user does not dominate the front page.
We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.
All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.
Lemmy World Partners
News !news@lemmy.world
Politics !politics@lemmy.world
World Politics !globalpolitics@lemmy.world
Ask Historians !askhistorians@lemmy.world
Recommendations
For Firefox users, there is media bias / propaganda / fact check plugin.
https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/
- Consider including the article’s mediabiasfactcheck.com/ link
view the rest of the comments
Why these on network with outside access?
Because stupid. There's zero reason for them to be on the public internet beyond incompetent operational IT security.
Exactly ; the concept itself is the real flaw.
In theory they gather all sorts of data so they can see how efficiently they're running, whether maintenance is needed. If something goes wrong with one of the units they can dispatch a repair guy immediately, or have the store shift the food before any spoilage. If they're smart about it they can use the data to set up an efficient preventative maintenance schedule and really stay on top of things.
A chain that has 500 stores with 20 units a piece adds up fast. They probably have a person at headquarters whose only job it is to stay on top of these units.
You do that with your own internal network or, at max, with a vpn. You don't need them to connect to the internet at all.
Yup, absolutely correct.
Automation engineer here, this is 100% a problem with their network model
No reason not to connect to the internet. Put the units on their own VLAN and firewall that off from anything but the IP of the monitoring end. Plenty of other ways to make this secure, that one's off the top of my head.
Exactly why do you need to do this instead of just keeping everything out of the internet and then connecting through a vpn tunnel?
If you need to monitor these 24/7 for some reason, pay a department that works 24/7 locally. Otherwise is just half-assing solution that will end like this sooner than later.
No reason at all to connect any kind of sensitive machinery to the internet, especially if remote operation of it can cause harm or damages.
AH! I don't think you have an idea of how much even a minimum wage employee actually costs. Whatever you think, double it. $15/hr.? OK, that's $30 cost to the company.
And then you lose the ability to manage and collect data centrally. You could have a couple of dude likes me sitting at home in shifts, monitoring a thousand locations, putting in tickets for issues and submitting fancy charts to corporate. And you want 3,000 dudes like me on site in shifts? Yikes.
Point being, securing a device on the internet is child's play. There's simply no excuse not to do so. Even the dumbest SOHO router allows one to control a firewall. Aside from labor, setting up a corporate VPN for this use case would cost beans. I'm dumb and I can, and have, done this.
Wow... where do I start?
If the department is that important, you pay people to have it manned 24/7. Yes, despite the cost, because it's that important. Where I work, we have an NH3 cooling system and it is that important, so it's manned 24/7 locally. But I digress...
You can collect that data locally, in a machine that is only reading the data (not writing it) and that then relays it to the outside through a VPN to which are connected only the relevant people. That way the machine is kept local, but gives your central the data it asks for. Again, no need for a freezer to be connected to the internet at all.
Then, to keep it local and safe, if you don't want to pay someone 24/7 what you do is set a series of setpoints to trigger warnings and alarms that will notify your local team (which, even if it's not 24/7, should be on call) to intervene in case of need. That way, if your freezer temps raise above the threshold, your local team will get a call automatically and act before even the central knows.
But ok, let's say you, for some absurd reason, need to micromanage the freezers of the whole country from the central offices. If that's the case, and I guess you have a good bunch of freezers to manage then, what you do first and foremost is creating a VPN to connect them all. And with that done, you allow access to it only to a controlled set of devices from which you can manage the freezers and that is separated from your administrative network to keep it safe.
And yes, all this costs money, but if you are big enough to be a target, you should be spending in security because the bigger you are, the bigger your loss when an attack happens. Looks to me that you're just trying to save poor corporate some money by cutting corners when it comes to security and well... that's a valid strategy... until you're targeted.
That one's not very secure.
Why not? Firewall off that VLAN and it doesn't exist to the outside world. Port scan the supermarket IP (how did they get those?) and you'll see nothing. Only way in is to hack all those routers, and if there's a mix of brands and models, that just got way more complicated. Then you have to proceed with the attack.
Because spoofing. More complicated for sure but an attacker with knowledge of the layout could get some data through in some typical setups. Stop messing about and vpn or airgap it, if you want any sort of secure.