Post by @Treczoks@lemmy.world

2026-10-17 11:58 UTC

No. Controlling and monitoring the fridge and freezer temperature is not something left to non-technical people. Set up a company-wide VPN system, and make it secure. Run those services from a centralized place, with the control systems disconnected from the internet outside the VPN. Run separate VPNs for financial systems, orders, company emails, and you are as set as one could expect.

Replies (1)

@HaraldvonBlauzahn@feddit.org 2026-10-18 06:27

I agree that using a VPN is much more secure. And together with not allowing remote temperature control, this would have prevented this specific issue. Still, if you have a VPN in a large supermarket chain, you need to manage the access keys - in a way that when one user of the VPN quits the organization, their access is revoked. And also, it isnot a good idea that many people share passwords to devices which give administrative rights. So, you should give a unique password to every user, similar as every guest in a hotel gets an NFC card with a unique code. The best way I know of to do that would be a PKI and smart cards. This also prevents users from using dumb passwords or using the same ones in multiple places. But my impression is that very few organizations like supermarkets do that. It gets even more complex with the modern rush to outsource every little thing.

Open ##5241076