You want to monitor and perhaps automatically fix temp fluctuations? Maybe these things are smart enough to report parts about to fail? 🤷🏼♂️ But in any case it would be child’s play to make these things bulletproof.
One example: Set the local firewall to block all WAN traffic, all ports, to the freezer group (VLAN) except where the origin packet is the monitoring IP. I suck at networking and could work this out in an afternoon. Give me a week and I’ll have a deployment script for all the local firewalls, tested and ready to push the button. And again, I suck.
You don’t need an Internet connection to have a control system keep temperature around a setpoint, though. That’s usually handled by a lower level circuit that will continue to operate in the case that the high level interface is not responding.
Observability is nice, but you don’t need to expose controls to do this, you could just have a Prometheus endpoint.
I suspect it’s because the manufacturer is trying to sell RaaS (refrigeration as a service) and to ensure they get their monthly dues, they “offer remote maintenance and monitoring” or something.
I suspect your suspicion is accurate. Scanning with BLE or a flipper shows the coolers at my local grocery also. It’s like the cars, they won’t secure it until someone makes it and even then they’ll secure it against their customers freedom, not hackers.
You want to monitor and perhaps automatically fix temp fluctuations? Maybe these things are smart enough to report parts about to fail? 🤷🏼♂️ But in any case it would be child’s play to make these things bulletproof.
One example: Set the local firewall to block all WAN traffic, all ports, to the freezer group (VLAN) except where the origin packet is the monitoring IP. I suck at networking and could work this out in an afternoon. Give me a week and I’ll have a deployment script for all the local firewalls, tested and ready to push the button. And again, I suck.
You don’t need an Internet connection to have a control system keep temperature around a setpoint, though. That’s usually handled by a lower level circuit that will continue to operate in the case that the high level interface is not responding.
Observability is nice, but you don’t need to expose controls to do this, you could just have a Prometheus endpoint.
I suspect it’s because the manufacturer is trying to sell RaaS (refrigeration as a service) and to ensure they get their monthly dues, they “offer remote maintenance and monitoring” or something.
I suspect your suspicion is accurate. Scanning with BLE or a flipper shows the coolers at my local grocery also. It’s like the cars, they won’t secure it until someone makes it and even then they’ll secure it against their customers freedom, not hackers.