Looks like people didn't learn any lessons from the past cyber-attack. Well, these kinds of attacks will continue as long as users don't take corrective measures !
this post was submitted on 02 Nov 2026
241 points (98.8% liked)
World News
58869 readers
1872 users here now
A community for discussing events around the World
Rules:
-
Rule 1: posts have the following requirements:
- Post news articles only
- Video links are NOT articles and will be removed.
- Title must match the article headline
- Not United States Internal News
- Recent (Past 30 Days)
- Screenshots/links to other social media sites (Twitter/X/Facebook/Youtube/reddit, etc.) are explicitly forbidden, as are link shorteners.
-
Rule 2: Do not copy the entire article into your post. The key points in 1-2 paragraphs is allowed (even encouraged!), but large segments of articles posted in the body will result in the post being removed. If you have to stop and think "Is this fair use?", it probably isn't. Archive links, especially the ones created on link submission, are absolutely allowed but those that avoid paywalls are not.
-
Rule 3: Opinions articles, or Articles based on misinformation/propaganda may be removed.
-
Rule 4: Posts or comments that are homophobic, transphobic, racist, sexist, anti-religious, or ableist will be removed. “Ironic” prejudice is just prejudiced.
-
Posts and comments must abide by the lemmy.world terms of service UPDATED AS OF OCTOBER 19 2025
-
Rule 5: Keep it civil. It's OK to say the subject of an article is behaving like a (pejorative, pejorative). It's NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.
-
Rule 6: Memes, spam, other low effort posting, reposts, misinformation, advocating violence, off-topic, trolling, offensive, regarding the moderators or meta in content may be removed at any time.
-
Rule 7: We didn't USED to need a rule about how many posts one could make in a day, then someone posted NINETEEN articles in a single day. Not comments, FULL ARTICLES. If you're posting more than say, 10 or so, consider going outside and touching grass. We reserve the right to limit over-posting so a single user does not dominate the front page.
We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.
All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.
Lemmy World Partners
News !news@lemmy.world
Politics !politics@lemmy.world
World Politics !globalpolitics@lemmy.world
Ask Historians !askhistorians@lemmy.world
Recommendations
For Firefox users, there is media bias / propaganda / fact check plugin.
https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/
- Consider including the article’s mediabiasfactcheck.com/ link
founded 3 years ago
MODERATORS
Maybe not everything needs to be on the internet.
The question isn't so much, "Why were these on the internet?", so much as, "Why were these not securely connected?"
At my last job, our AWS resources were firewalled off, only accepting connections from our internal VPN. To get on that, you had to be coming from the IP of an office or a DevOps team member's home IP.
The local firewalls could have only allowed traffic to the freezer VLAN from the remote monitoring IP.
And that's just two ideas off the top of my head. If my dumbass can do it, you don't need a high level networking expert to fix this.
YTF does a refrigerator need to be on net control??? Isn't it a set once and forget it device? Maybe to monitor it to report a failure.. but to CONTROL it???
it's so they can sell subscriptions to the cloud bullshit.
It’s more convenient for the hackers this way, duh
Stop connecting shit to the internet, this is not a difficult problem to fix.
I was gonna argue that a local remote control alternative doesn't exist, but I really don't know why you'd need freezers to be remotely controlled. They're more of a set and forget.
Walmart had that since the early 2000's. Fucking bullshit then too. We once had a section go out and called corporate and they argued it was working because their computer said so. Fucking dumb asses we are looking at it and some asshat in Arkansas (we are in Texas) tells us we are wrong. They finally agreed to send a rep from headquarters to drive down and look for himself (who knows cost of that) just for that guy to go "yall right it broke. " Then.we got local guy come fix it.
I work for the food industry, in automation. Our whole factory is connected. To the point that from my office, I can control most of the factory machines. From my office, from my laptop that needs to be connected through an ethernet cable to one of the tech network of the factory.
If I want to connect from another device, I need to set up a vpn with credentials and an authorised IP.
The only way to access our tech network from the outside is stealing my credentials and then ask some of my colleagues to authorise a device and IP for my credentials, something highly suspicious that would raise a lot of alarms.
I'm not going to say that a system like this is infallible but turns an attack like this extremely unlikely. This is how you should have your systems "connected". Not through a login portal exposed to the damn internet.
Thanks I’m now in your system
Oh shit! While you're in, can you please check my email and maybe answer some so I don't have to tomorrow?
Thanks in advance!
👏Stop 👏 making 👏 everything 👏 connect 👏 to 👏 the 👏 internet👏
You mean to tell me that none of these people thought to disconnect them the first time?
It was on the agenda for the next quarterly interdepartmental meeting, and after that needs a cost estimate and budget approval to actually start working on the issue.
Curious to hear from someone more knowledgeable about security if this seems like an economic attack by another country, or what? The only other motivation I can see here is to force supermarkets to be more secure without doing serious damage (serious like people starving).
It's most likely some script kiddie taking advantage of hilariously bad security practices. The attack three weeks ago was because the freezers were directly connected to the internet, running old vulnerable firmware with the username "admin" and the password always being the current date. This is probably going to end up being a similar case - might even literally be the same case, three weeks (and IIRC there's been an update fixing it for six months) is such a short time to unplug your vulnerable freezers from the internet, after well.
Idiots....
The first and foremost sign of intelligence is the ability to learn. Somehow, those supermarket owners seem to lack this important trait.
IT Security sits in cost center side of the business for these Legacy companies.
It's very much a " everything is fine why do we pay you?" Or everything is broken why do we pay you?" Situation
Yeah, this is why I resist getting a job actually doing mainly IT security despite having been part of far too many incident response and recovery teams over the years. It seems like a no-win job at the moment because leaders rarely value it.
load more comments
(3 replies)
They’re sitting exposed to the public internet with a well known and super basic password. If your shit is on Shodan, you better know in detail the multiple layers of protection in use. Today’s date is not a password.
I think the takeaway here is how lucky these supermarkets have been. Any threat actor who’s organized would recognize the potential here and work to establish a proper foothold in the organization and try to pivot to corporate or payment networks. Instead they’re just turning off the refrigerators.
They are grocery stores, not some break room fridge. This attack is both economic (for the spoiled food that needs to be thrown out and the price increase that will come with that reduced supply) and on health (because not all spoiled food will necessarily be recognized as such in an effort to avoid the first consequence, plus if the fridges containing milk go warm for a few hours, they can test some milk and it'll probably still be fine, but that best before date is now likely useless at best or misleading at worst). Also, even if most food is fine, if some food isn't, it will mess with some people's heads pretty badly.
If the intention behind the hack was disruption and damage, IMO this is one of the more effective angles they could attack.
Milk will not have any problems if it was not opened in the first place
Milk will have problems if it's the 50c fast-defrost cycle that the fridges in the first attack reportedly hit.
Oh yeah i guess it might have problems then
If that was the case, why do they spend so much money on keeping it refrigerated before people buy it instead of being kept on normal shelves with all the other "refridgerate after opening" foods?
Depends on the kind of conservation method they applied to the milk. Milk that was sterilized at lower temps is considered "fresh" and has to be kept refrigerated. Milk that has been pasteurized at higher temps is sterile and won't cause bacteria to grow even if it's kept at room temp.
This however changes when you open the milk and it enters in contact with microorganisms that are naturally present in the atmosphere and that can proliferate in the milk; to avoid this, you need to keep milk at fridge temps so bacteria won't grow too fast (if you keep it open in the fridge for too long, bacteria will grow anyway and the milk will go spoiled).
Idk in other places but here where i live, many supermarkets keep it outside the fridges ¯_(ツ)_/¯
Ah interesting. I know eggs can be (though the industrial washing they get changes that by removing an important protective layer), but figured the few times I got milk that went bad before the best before date it was because it wasn't properly stored before I got it.
Might depend on the pasteurization method maybe? Like the "bring it close to boiling" doesn't kill everything in it but the chemicals might? (Speculation)
Edit: apparently it has to do with the temperature it is pasteurized. There's one version, most common in north America, that pasteurizes at slightly under a boil, which doesn't kill everything in it and requires refrigeration before opening.
And then there's UHT milk, which is pasteurized at 138°C, and this apparently kills everything such that the milk doesn't need to be kept in the fridge until it is open, and is more common in Europe and parts of Asia.
If the fridges were just turned off sure, but they were actually heated up to 50 °C.
load more comments
(1 replies)
view more: next ›