SoylentNews is people
SoylentNews
Submitted via IRC for SoyCow3941
[....] Nicole Eagan, CEO of cybersecurity company Darktrace, revealed Thursday that a casino fell victim to hackers thanks to a smart thermometer it was using to monitor the water of an aquarium they had installed in the lobby, Business Insider reported. The hackers managed to find and steal information from the casino's high-roller database through the thermometer.
"The attackers used that to get a foothold in the network," Eagan said at a Wall Street Journal panel. "They then found the high-roller database and then pulled that back across the network, out the thermostat, and up to the cloud."
That database may have included information about some of the unnamed casino's biggest spenders along with other private details, and hackers got a hold of it thanks to the internet of things.
Source: Hackers exploit casino's smart thermometer to steal database info
(Score: 0) by Anonymous Coward on Monday April 16 2018, @10:10PM
Modern commercial HVAC systems have used DDC (Direct Digital Controls) for 20 years or more, long before anyone heard of IoT. They are highly necassary to save energy, and in fact required to meet the minimum requirements of modern energy codes in many commercial buildings. The controls algorithms in these systems is orders of magnitude more complex than that facny central air system in your house.
I've worked with contractors and owners in this industry for years. While setting up the local IPs for the controls server at one local community college I had an IT admin laugh when the contractor asked about his company having remote access to the controls server. I've heard of other campuses that go one step further and have a second independent network specifically for controls. The are right ways to do network security, and then there is the IoT way.