Hacker Newsnew | past | comments | ask | show | jobs | submit | lrasinen's commentslogin

The vulnerability making the rounds in the comments is specifically in 800A: https://www.claroty.com/team82/research/freeze-the-controlle...

This sounds like someone (or someone's AI agent) saw the CVE and did a one-off drive-by attack instead of systematically targeting refrigreration systems and trying to find vulnerabilities.

The article is dated August 2026. Synacktiv (a different company) reported the very same vulnerability for older system managers/controllers already in 2023. Their report[1] says Danfoss told the products are EOL and should be upgraded. At no point did Danfoss fix the same issue in 800A. Typical.

Back in 2016 when we were integrating their 850 series system managers we encountered an issue with the HTTP API returning 400 series errors over slow links. We sent them PoC code written in Python 3. One month later they sent us an email, complaining that they first had to backport the PoC code to Python 2.7 as that was the newest version they could install. They also attached a "fixed" PoC code snipped where they had removed the artificial delays that did not trigger the issue. Danfoss never did anything to actively fix the issue.

One year later I browsed changelogs for the commercial RTOS that Danfoss used and realized the issue was fixed upstream in 2010 or 2011. That means their AK-SM 850 had at least six years worth of unfixed bugs.

[1] https://www.synacktiv.com/sites/default/files/2023-10/synack... (despite saying SM800, the firmware in question is for AK-SM 850)

Edit: The parent commenter seems to work at Danfoss on their Leanheat platform.


Alas, not anymore. Still got friends there though.

I worked with district heating, no idea what the cooling guys are/were doing. It's a big company.


Modbus is the equivalent of VGA connector in displays and projectors. It does have a TCP/IP version as well, but it has no security whatsoever. Or any features besides reading/writing a 16-bit value (or a single bit, charmingly referred to as "coil")

Absolutely.

I'm in the beginning stages of giving my home HVAC system an upgrade and using Modbus throughout with various adapter boards.


This is true for many (most?) flavor compounds. A little salt is nice, a teaspoon isn't.

Some sort of clove extract is used in dentistry as an temporary fix if a full root canal isn't feasible at the time. Got the tiniest whiff of that on my tongue during rinsing and it tasted downright toxic.


Elering reports only their part, the very high voltage transmission losses. Then there are the distribution losses on the local level are they're about 4%.

https://www.ceer.eu/wp-content/uploads/2025/02/3rd-CEER-Repo...


There are also reflector pedals (see above for reliability etc)


Ironically one of the reflector on the set of pedals in my "town bike" fell off so it is not perfect on all models as far as reliability is concerned!


The US doesn't have a population register in the same way as European countries do.

For reference, the Finnish voting experience is such that about a month before the election you get a card to your registered address, telling what the election is and what's your polling place. Then you show up on the day in question, show an ID, they check that against their list and off you go.


ICC was established in 2002, hardly "in the aftermath."


Average density for non-uniform objects is pretty useless, since the cubic volume scaling makes a mess of things.

As an example, I pulled the stats for an electric locomotive. 19x3x4.4 meters, mass 90 metric tonnes. That's an average density of about 1/3rd of water.


So a locomotive floats. Interesting.


Locomotive itself? Probably not. If you turned its abstract bounding box into real box - thin, negligible mass, enough strength not to break up - and evacuated the air inside, then yes, the box with locomotive in it should float.


Well, Finland's gonna insist on getting Celebrini in the trade.


Well done for making the first comment in this whole discussion about the one area of integration that Canadians will actually care about.


The main sponsor did not renew the sponsorship deal for next year, though.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: