Same (an outage) happened to the US military commissary system https://www.stripes.com/theaters/us/2026-09-01/army-cid-inve...

▲

linuxguy2 8 hours ago | parent | next [-]

I was hoping there would be more discussion about the overlap of these two events.

▲

vkou 8 hours ago | parent [-]

The overlap between those two events is that digital security sucks ass and that attacks are much easier to mount in an era of agents.

▲

drummojg 8 hours ago | parent [-]

I can see advantages to collating data for both organizations, but to it just raises the question, once again, of why simple appliances are connected to the Internet.

▲

8 hours ago | parent | next [-]

[deleted]

▲

red_admiral 8 hours ago | parent | prev | next [-]

That, and why there's not a company VPN in between.

	▲	jandrewrogers 7 hours ago \| parent \| next [-]
		These industrial networks are often not internal to a single company, sometimes by necessity. They also are often installed in places with inherent connectivity difficulties, so sometimes you are bridging weird networks that limit what is possible just to get the signal out. These aren't consumer fridges with wifi. The situation on the ground is significantly more complex. There are a lot of embedded sensors and control systems in supply chains in order to minimize waste.
	▲	vkou 8 hours ago \| parent \| prev [-]
		Because a main user of this is the third-party HVAC contractor, and there's a operational cost to getting him set up on the grocer's VPN. (He has thousands of clients, that's in aggregate a lot of customers that would need to give him VPN access. He will do whatever the client asks of him, but he will bill accordingly.)

▲

vkou 8 hours ago | parent | prev [-]

1. There's nothing simple about a commercial HVAC install, especially across a national chain.

2. Because they think (rightly or wrongly) that the benefits of monitoring and ease of maintenance and their contractor having direct access to the data outweigh the risks.

3. They think it outweighs the risk because IOT has been socially normalized, creating the wide perception that no, it's not that bad.

They almost certainly have insurance for this kind of event, and their insurer will almost certainly think real hard about the pros/cons of this, and will adjust rates accordingly. The grocer is free to take those rates into account when deciding on whether their next store will have an IOT HVAC.

▲

sgnelson 6 hours ago | parent | prev [-]

I came here for this very discussion. Shame more investigation was not done on this story.