alt Hacker NewsOh it gets better (not the OP but I think the following is even worse).
That DLL hooks into SCADA and sometimes sends updates to a PLC controlling safety critical equipment. When does it send updates versus just query the controller? No one knows. The guy who wrote it died in an (unrelated) industrial accident involving a runaway forklift after leaving the company. Even so much as debugging it would require shutting down the entire factory and replacing all the crucibles afterwards ($$$).
Replies
> When does it send updates versus just query the controller? No one knows.
Ask an LLM to reverse engineer it and explain it.
Thankfully we are finally after all these years getting regulation on that sort of stuff. It seems EU was 20 something years late... And no I really think that regulation in case like this is really reasonable idea.
That's even worse than the time I was on a conference call with the COO of a Fortune 500 retailer who referred to "the Excel spreadsheet we use to keep track of the stores we own".
The subject matter was building an auditing system to comply with the requirements of an IRS consent decree as part of a settlement for shoddy accounting practices which may or may not have included tracking billions of dollars of assets with Excel.