Maybe they shouldn't.
You actually do want to be able to monitor them remotely, like most industrial/commercial refrigeration, to detect failures faster and more reliably. They should still be at least secured with normal auth/autz in addition to perimeter security, though.
If I can know when a fridge failed within the hour (even at night) then I can also dispatch a technician same/next day more easily.
But to address your specific point:
being able to monitor does not ( or at least should not ) automatically equal put it on the web
This kind of inspector gadget "smart tech" lunacy has infected basically all consumer products. It's got to stop.
Adjust: possibly, withing a range
Shutting down: Big no no
https://signalandsilence.substack.com/p/i-think-someone-hack...
Could this be the same group? Or someone inspired by reading that article? Or just entirely unrelated?
- they either didn't warn their customers this was a critical security patch, - many of these fridges/freezers were directly accessible on the internet with their own 3G/4F SIM cards without further protection!
Crazy stuff
[0] https://www.claroty.com/team82/research/freeze-the-controlle...
Lots of industrial controls haven’t been updated since they were deployed in the 90’s. “And why should they be? If it ain’t broken…” Well, because they’re freaking broken!
So I’m glad that this happened in a tangible, public way people can easily understand without it involving something much more drastic. If your family asks about this, explain that you’re glad no one blew up a gas pipeline… yet.
Connected vehicles are the example that terrifies me the most. There have been numerous examples of lax security in this area already and a fleet of rogue cars or delivery trucks could obviously cause huge amounts of damage, injury, and loss of life.
There's a legacy of openness in car tech and software that was never designed with robust security and isolation of critical components in mind. I've heard that this has started to change more recently and that's reassuring if true. But this still feels like an area with far too little regulation or oversight given the past choices of vehicle manufacturers and far too much rush to connect everything up remotely even for minor convenience reasons.
In some cases there also now seems to be legally mandated connectivity for things like automated emergency calls after an accident. This should at least have a genuine benefit in the unfortunate situation that it's needed - but until vehicle security looks more like Fort Knox than a sandcastle it might still prove to be a bad choice in the end.
Will they never learn?
Yes you might need to be able to centrally monitor and manage things but that should be happening on a private network.
If it's a lot, maybe the manufacturers should be compelled to provide security patches if remote control is required to operate their products. For the sake of national security, of course.
* Fridges are read-only through their remote interface.
Both of these can be true if you must connect them to the internet.
To boot, refrigeration has been wholly automatic for decades. It literally runs itself. It doesn't need any network connectivity other than to say "I work" and "I'm broken" and that's it. Allowing control commands to be sent over the network is, yet again, just asking for trouble.
Source: https://www.visitflanders.com/en/discover-flanders/culinary-...