• 0 Posts
  • 5 Comments
Joined 9 months ago
cake
Cake day: February 3rd, 2026

help-circle

  • These are not your average home fridges with a “smart screen”. It’s possibly a million euro industrial systems that are keeping thousands of euros worth of product safe (multiplied by the number of stores).

    It needs monitoring, alerting and the possibility to be updated, preferably by a trained professional.

    Can this be done simply and securely? 100% and its not even that hard… they fucked up.


  • … where possible, …

    So these fridges where possibly one of those exceptions and look where that ended up. :-(

    mTLS is an excellent choice since it stops an attacker at a much lower level, but its not the only one if your service wont allow it. Tried and true VPNs like wireguard , IPSEC or openVPN should be put in front of any WebGUI, HTTP(S)-API, telnet or other high risk services if you cant do mTLS.