this post was submitted on 12 Oct 2026
490 points (99.0% liked)

Technology

88799 readers
5220 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] NarrativeBear@lemmy.world 98 points 3 days ago (6 children)

Attacking a countries food supply and food reserves really seems like a act of war.

The term "hackers" really downplays the severity of these kinds of cyber attacks IMO. It makes it kind of sound like a teenager in a basement somewhere, as opposed to some foreign state cyber warfare group or something along those lines.

Also it's madness that systems like these are connected directly to the internet without read-only permissions implemented. Controls should only be accessible locally on some kind of airgap or local seperate VLAN.

[–] tiramichu@sh.itjust.works 48 points 3 days ago (2 children)

The disconnect between how systems "should" be and how they actually are is disappointingly enormous.

Retailers are surprisingly enough just like consumers and want things to "just work" without caring about security.

And so they get Internet-connected fridges, and it's all fine, until the very moment it isn't.

I hope this is a learning experience and they beef-up their systems.

[–] tmyakal@infosec.pub 20 points 3 days ago

I hope this is a learning experience and they beef-up their systems

I hope this is a learning experience and they realize that commercial refrigerators don't need to have internet access.

load more comments (1 replies)
[–] AlteredEgo@lemmy.ml 14 points 3 days ago (2 children)

Please stop with the acts of war or terrorism BS. The article also mentions "in-store pricing powered by electronic shelf labels" so lets not ignore this is about multi-billion companies trying to suck every penny out of our pocket. If these companies design and manufacture and buy stupid hardware that is susceptible to such hacking, they really deserve it. I mean they really do.

Second, this is a good thing. Systems will be hardened now. You think there would be any other fucking way they would upgrade their security unless something like this happens? Beatings will continue until security improves. This is why even chaotic hackers that cause damage and inconvenience are ultimately a positive force on our IT infrastructure. Think of it as an ecosystem and evolutionary pressure. Free marketplace of security models.

[–] Darkmoon_AU@lemmy.zip 1 points 16 hours ago (1 children)

An apparently untargeted attack on food supply is an attack on society before it has anything to do with that specific company, in my eyes.

[–] AlteredEgo@lemmy.ml 1 points 13 hours ago

Well, it is true. It is an attack on a society with internet connected refrigeration units with bad security. But fuck that society in particular.

[–] irgendjemand@lemmy.world 3 points 2 days ago (1 children)

Agreed. It's also a massive jump to call a grocery chain's fridges a countries 'food reserves'

[–] Darkmoon_AU@lemmy.zip 1 points 16 hours ago

Not a leap at all, it's the food in the county as much as the next morsel.

[–] HaraldvonBlauzahn@feddit.org 9 points 3 days ago

Also it’s madness that systems like these are connected directly to the internet without read-only permissions implemented.

Water systems in the US are, too. And they have been hacked.

load more comments (3 replies)
[–] eestileib@sh.itjust.works 68 points 3 days ago (4 children)

This is exactly what happened to the US Army about a month ago.

https://www.militarytimes.com/news/your-military/2026/08/28/dod-confirms-refrigeration-disruption-at-military-commissaries/

Why the fuck are all of your fridges controllable from the Internet? We didn't have to build such a stupid, stupid society.

[–] LodeMike@lemmy.today 20 points 3 days ago

Because this way the bill of materials, design work, and labor cost are all higher; and that way the company can earn more money!

Capitalism is so far detached from what capitalists pretend it's like. Wealth distribution is so uneven in the U.S. that there's extremely little incentive to lower costs, even if the business is worse off because of it.

load more comments (3 replies)
[–] Zwuzelmaus@feddit.org 121 points 3 days ago (1 children)

Somebody learns the term "single point of failure" now...

[–] BeMoreCareful@lemmy.world 36 points 3 days ago (1 children)

I wonder how much money was saved by having someone manage the freezer section, or how much money was earned by not having an empty fridge.

[–] deleted@lemmy.world 8 points 2 days ago

The management quarterly meeting PowerPoint presentation says x3 more yachts for us.

[–] Professorozone@lemmy.world 34 points 2 days ago (2 children)

Why the fuck does a refrigerator need to be on a network?

[–] lawks@aussie.zone 25 points 2 days ago* (last edited 2 days ago)

Controls have to be put somewhere, and networked interfaces mean fewer physical controls that may be difficult to access, tampered with or fail. Having a standard control protocol means interfaces can be changed and improved without modifying the hardware. They're not a bad thing.

However, having networked controls exposed on anything other than private, air-gapped, wired-only LANs seems rather foolish, to me.

[–] helpImTrappedOnline@lemmy.world 7 points 2 days ago* (last edited 2 days ago)

Speculation to your question, for monitoring and control.

For monitoring, log temperatures and send error message if it gets too high. Data could be used if any legal question come up about food spoilage.

For control, I'm guessing there's times you want to shut it off or enable/disable defrost. Easier to do that at a computer than have controls that are either a pain inthe ass to get to, or too easy for some moron to mess with.

That being said, it should be on a local network and have no access to the internet. However a chain store would probably want the data sent to HQ, so the computer would need to be on the network.

[–] cloudshouter@lemmy.zip 34 points 2 days ago (1 children)

Idiot design and engineering for the sake of cheep managers. Same reason they are taking all the air gaps out of critical infrastructure. Instead of having Internet connected monitoring separate from the controls like a normal person, they hook controllers to the Internet too, so they don’t have to pay a technician to come in.

For added stupidity, the department at my job which has monitors and controls online just caused a number of techs who only do monitor and control to retire by making them return to work in office.

load more comments (1 replies)
[–] SorteKanin@feddit.dk 11 points 2 days ago (1 children)

Someone on Twitter is saying that the username for the fridges was "admin" and that the password was the current date... Prime security in effect here, clearly /s

[–] faercol@lemmy.blahaj.zone 8 points 2 days ago

Well, this means the password is very often changed, so it is secure /s

[–] CapuccinoCoretto@lemmy.world 66 points 3 days ago (2 children)

Morgan Freeman Narrating: It was in that moment, they realized the IoT was a very, very dangerous idea.

[–] BrianTheeBiscuiteer@lemmy.world 58 points 3 days ago

Remote monitoring 👍

Remote control 👎

[–] grue@lemmy.world 21 points 3 days ago

David Attenborough butting in: "That's when they should have realized it, but did not. A fatal mistake."

[–] ayyy@sh.itjust.works 34 points 3 days ago* (last edited 1 day ago)

The executives that allowed the system to be built this way belong in prison for the value of the destroyed food. An engineer almost certainly told them this system needed better design and security and was told no by some cheap ass trying to preserve their executive bonus.

Nothing will ever change until these monsters have personal consequences.

[–] cantstopthesignal@sh.itjust.works 31 points 3 days ago (1 children)

Being "smart" and connected to the internet is about to devalue a lot of manufactured goods that have no business being either one of the those things.

[–] waxrhetorical@feddit.dk 10 points 3 days ago

One can only hope

[–] LewdLemon@sh.itjust.works 54 points 3 days ago* (last edited 3 days ago) (8 children)

What's missing from this report is more detail on how exactly this attack went down. Did the attackers compromise supermarket networks and manipulate the fridges through lateral movement within the network; or were the fridges accessible from the open internet? If the latter is the case (and there's a non-zero likelihood they were): why the fuck?

[–] bl4ckp1xx13@lemmy.dbzer0.com 41 points 3 days ago (1 children)

why the fuck

Because, despite us being in the Information Age, and computers surrounding us everywhere, only a very small portion of the population consider that learning how they work may be useful.

[–] lemmyng@lemmy.world 24 points 3 days ago (1 children)

I'm sure if more people learned about how computers work, AI wouldn't be a thing because they'd realize that computing-based tasks can already be automated without LLMs.

[–] floofloof@lemmy.ca 13 points 3 days ago* (last edited 3 days ago)

Tell that to my developer colleagues who are busy defining "skills" for the AI to do the mundane things our tools could already do. It may waste huge amounts of electricity, water and money, make us dependent on American megacorporations, cause their skills to atrophy, and be a gamble every time, but at least they don't have to read the manual.

load more comments (7 replies)
[–] Someonelol@lemmy.dbzer0.com 37 points 3 days ago (2 children)

Just wait until some cars get hacked to accelerate as fast as possible because we just had to have telemetry in them for surveillance and profit.

[–] HaraldvonBlauzahn@feddit.org 10 points 3 days ago (1 children)

Search YouTube for "Michael Hastings Accident".

load more comments (1 replies)
load more comments (1 replies)
[–] TrackenDaKracken@lemmy.world 34 points 3 days ago (3 children)

Maybe they learned they need to air gap critical infrastructure, and leave the management to on-site humans who are paid well enough not to hold their inventory for ransom.

[–] RememberTheApollo_@lemmy.world 20 points 3 days ago (1 children)

“Learn” hahahahaha

Did having centralized control and monitoring of coolers save a fake number of man-hours on a spreadsheet instead of paying a store employee already on the clock to check temperatures occasionally?

They’re going to keep doing it because the spreadsheet says the risk is worth saving those fictional man-hour costs.

load more comments (1 replies)
[–] floofloof@lemmy.ca 16 points 3 days ago

They will calculate that they spend less on recovering from these cyberattacks than they would on paying staff fairly, and carry on.

load more comments (1 replies)
[–] Agent641@lemmy.world 14 points 2 days ago

2010s - We made everything smart, networked, and IOT!

2015-2025 - We need you to put your personal details into everything, everywhere, all the time!

2026-???? - We invented a machine that can hack everything on earth and steal all data for nefarious purposes.

[–] Beth@piefed.social 32 points 3 days ago (22 children)

The nice lady who sold me my home left a fancy washer and dryer set and it can connect to my internet but my fucking question remains why lol. Fridge is normal thankfully.

load more comments (22 replies)
[–] genuineparts@infosec.pub 17 points 3 days ago

Having fridges connected to the internet and getting them Hijacked is stupidity, not a cyberattack.

[–] MangoPenguin@lemmy.blahaj.zone 22 points 3 days ago (9 children)

I can understand a lightweight IoT network to monitor temperatures and get alarms automatically. But why on earth would it allow controlling the fridge remotely?

load more comments (9 replies)
[–] Cherry@piefed.social 16 points 3 days ago (1 children)

Anyone ever worked with management and chatted about security on this stuff, they never wanna know. They never want to pay, its a line item of risk that is just a problem to budget or deadlines....that's a tier three wish list item that we can deal with later. Surprise it never happens.

[–] 404found@lemmy.zip 13 points 3 days ago

Being a manager is an invisible job. When everything goes smooth then 'that's just how it's supposed to go'. When things break or get hacked the manager looks like they aren't doing enough. Meanwhile manager responsibilities cover an unreasonable amount of work and stack up fast.

Managers can be in a good place work wise and then get 1 phone call that ruins their schedule for the week. When it rains it pours because then employees call out, some employees can't get along so you have to deal with their high school drama, then someone needs a report, then there was an inventory supply or a computer/accoubt isnt working etc etc etc. At some point the manager has to say 'this isn't my company and I'm not going to put in a bunch of unpaid overtime (your salary and only get paid 40 hours a week. Anything over is you working for free instead of enjoying your personal life) to fix this'.

Just like the people they manage, managers aren't very incentivized to sign up for their own big projects that don't require their immediate attention. Managers might get a bonus for a job well done at the end of the year but is it really a bonus if they worked a bunch of unpaid overtime all year? Feels more like a partial refund to pay some of that time back.

[–] fruitycoder@sh.itjust.works 12 points 3 days ago (10 children)

Im surprised that the EU doesnt have a secuirty requirement for IT infrastructure in the food supply. Seems like an oversight

[–] Miaou@jlai.lu 9 points 3 days ago

We do, but companies are given a billion years to implement that because The Economy ™️

load more comments (9 replies)
[–] tigermountain@lemmy.world 9 points 3 days ago (2 children)

Hacks and attacks like this will explode with AI.

load more comments (2 replies)
load more comments
view more: next ›