by Karl Denninger
Market-Ticker.org
Let’s start with the stupid: Yes, what they did, assuming the reports are accurate, was stupid.
You do not connect anything that has access to SCADA, that is, control systems, to the Internet. Period. I don’t care how. I don’t why. I don’t care what. You don’t do it. End of discussion.
Oh, but that means the employees can’t work from home! Correct.
Sit in office, work on machine, machine has zero external connectivity, no USB ports or instantly alarms if you plug something into one, etc.
Connections between facilities are encrypted over centrally-controlled infrastructure with regular audits. Nothing beyond the orbit of those devices connects to the sane and sanitary systems. Period, end of discussion, no exceptions.