Comment by sergdigon
6 hours ago
No need to make assumption here, the article says it clearly:
> Danfoss told AFP in a statement that most of the affected equipment was "legacy" products which "no longer receive software or security updates". It said its AK-SM800 and AK-SC355 fridge regulator systems were notably affected, with a version of the former using "outdated firmware". It added that it had long advised supermarkets to update from those models.
That being said I am curious what is typically the amount of time for software support offered on a newly released equipment and how common it is for super market to use obsolete software (especially for the part which carry some security risk like something with remote control). Also what about the insurance? Will they (fully) cover the financial loss? I don't know what is in their insurance contract and I am not a lawyer but it seems to me that using obsolete software make the supermarket responsible to some extent
> how common it is for super market to use obsolete software (especially for the part which carry some security risk like something with remote control).
It's a near guarantee. I've been in dozens of power plants where the engineering workstations or operator interface terminals are running Windows XP or Windows 7. More than zero of which were not properly air-gapped. If those sites (with sizable CapEx budgets) delay upgrading for various reasons I would expect grocery store chains to keep whatever they have running until it's broken to the point of not being fixable without a complete overhaul.