Comment Re:it always baffles me (Score 2) 113
... why are mission critical devices connected to the internet
Because being connected to the internet saves a *lot* of money. Instead of having to have an entire emergency team on site at all hours, you can get away with a minimal team at nights/weekends, and workers who can, in an emergency, connect from home.
It takes a very capable manager who can persuade the higher ups that its necessary to continue spending a few millions dollars in wage costs every year to avoid what (at least until very recently) seemed to be a very illusionary threat. Besides, surely with a few precautions like multi-factor authentication, there's no possible way that anyone could break in
Note, it's even harder if you're bidding for contracts. Try telling prospective clients that the reason your prices are double are because you refuse to enter the Internet age... Especially when those you are bidding against are assuring the customer that they're taking all the necessary precautions.
It's a sad fact of life that it's rarely worthwhile to spend a lot of money to protect against rare disasters if your competitors aren't doing the same. (Note, normal disaster planning adds a few percent to cost - we're talking about making yourself bullet proof, which may double or triple your costs.) The odds are fairly high that with much higher costs, you'll be bankrupt before the disaster hits, and moreover, if all your competitors are being hit by the same disaster, the general sentiment becomes "no-one could have predicted it" and everyone keeps their jobs anyway.