Buckshot

@Buckshot@programming.dev · Joined ⁨Jun⁩ ⁨2023⁩

Replying to @⁨frank@sopuli.xyz⁩

I worked on new SCADA for a water company across all theirs sites. Previously they were a mismatch of different systems and all airgapped.

They standardised everything and put them all on VPN. Suddenly you could access the secure water treatment works with 24/7 security guards and the control room was a bunker, from the unmanned rural sewage works with a portacabin for the server, the key hidden under a brick, and wifi for the PLCs.

The sewage works had always operated like that because it was deemed low risk. No one considered the VPN changed the threat model.