upvote
Sure, but think through the details. There are ways to expose telemetry through an otherwise air gapped system, but it is actually not easy to implement correctly.

My position is that if there's any connection, of any practical type, between the control system and the outside world, an attacker will be able to find ways to break things.

Even if it just boils down to "an attacker made our dashboards report numbers wrong and so we closed a valve to prevent an issue that didn't exist, and inadvertently destroyed our own product", the outcome is the same.

reply
“hackers generated fake alerts” — harder than it sounds.
reply
deleted
reply