alt Hacker NewsHow does this actually work, in practice? If you have read access to sensors, then there's a non-air-gapped network between the control systems and the internet.
If your network isn't air gapped, then it's vulnerable, and attackers will side step the "read only" path to affect control system changes.
Replies
System a emits telemetry. System b reads telemetry and exposes to the internet.
You can't drive my car simply by pointing a webcam on the steering wheel.
Difference between a smart thermostat for your ac and an Arduino temperature sensor next to your AC thermostat?
There're different devices. You put online some but not the others.
Temperature sensor is a sensor. Refrigeration compressor motor is an actuator.
GPS positioning of a car is a sensor. Motor to turn the wheel is an actuator.
Aircraft altimeter is a sensor. Motors to control control surfaces are actuators.
And so on.
It's being called a data diode (diodes usually allows current in one direction only).
It can be implemented with a fiber optics cable with only the transmitter on the secure side, a laser+photo cell for real air gap, cutting the rx cable in a rs232 or having a microcontroller with an output pin connected to another controllers input pin. By handling it with hardware instead of software you get a very secure partition between the trusted and untrusted side.
It's used to monitor for example industrial systems and power plants.
Wikipedia calls it unidirectional network: https://en.wikipedia.org/wiki/Unidirectional_network