Comment by justsid
3 hours ago
So that’s the takeaway? “There is no money for this, so it just is what it is”? That’s insanity. So what now? Hope they don’t get hacked again, because by that logic there is still no money for upgrades and fixes, especially after losing a ton of money on spoiled inventory? But I guess that’s okay, only the “laptop class” actually cares. The supermarket lives in the real world with real challenges, none of that pesky security needed. I feel like I’m taking crazy pills here.
I would say the takeaway is that it cannot be expected that the majority of businesses hire an IT security expert (let alone multiple, + technicians) whose job it is to keep on top of CVEs and apply updates to a variety of embedded devices. IMO it must be a legal requirement, which is now coming (e.g. NIS2), but it will take time.
Shouldn't the seller of the embedded devices or the maker of the product with those devices inside take care of that?
Yeah, no, it is crazy. I'm reading these comments too like, what?
People advocating to do nothing? Saying it's not practical to do anything.
Smells botty to me.