Water system hack--this could have been REAL bad...

[rgarito]

They apparently were using TeamViewer....  Not exactly the best remote access system...

https://www.wired.com/story/oldsmar-florida-water-utility-hack/

[NiHaoMike]

If the Teamviewer app is the one that is supposed to have the "security fix", it definitely belongs in the dodgy technology section...

[JohnnyMalaria]

Dear WIRED reporter - what is PH? Is it like pH but louder?

[rgarito]

If the Teamviewer app is the one that is supposed to have the "security fix", it definitely belongs in the dodgy technology section...

As someone who works in the industry, based on the above statement you can move most discussion about security software into the dodgy technology section...  You would have nightmares if you saw the things I see every day

[CatalinaWOW]

With some exceptions any lock is pickable and any code is breakable.  There should be some really deep thought put into whether the convenience of remote access is worth the risk.  While some systems are more secure than others I think experts in the area would agree that none are absolutely risk free. 

A lot of systems have been made accessible without any thought of how many crazy and/or malevolent people there are in the world.

[BradC]

With some exceptions any lock is pickable and any code is breakable.  There should be some really deep thought put into whether the convenience of remote access is worth the risk.  While some systems are more secure than others I think experts in the area would agree that none are absolutely risk free. 

A lot of systems have been made accessible without any thought of how many crazy and/or malevolent people there are in the world.

I have this discussion on a daily basis. Private enterprise clients are gradually coming around to air-gapping the security systems and the de-converging of IT and OT networks. Government clients on the other hand ....

I had the services manager of one of our larger building companies tell me "Daahhhnt worry Brad, it'll never 'appen".

[james101]

TeamViewer is a system you do not trust at all its flaw.

if you have this on any systems remove it.

there are ways to sign onto anyone machine that is using teamviewer
does not matter if they dont know your ip address and password.