Hacker News Reader

Also, for the particular case of MODBUS over TCP, MODBUS itself doesn't have any security aspect (by design) it is a very simple byte read/write protocol really.

http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b...

View on HN

Just read over their FAQ. They claim that Modbus over TCP is an internet protocol. No where do they even mention security. I wonder how many devices are sitting on IPv4 addresses that are completely controllable over the net without a shred of security. Lovely.

Previously: https://blog.shodan.io/dont-be-clever/

> For example, you might know that Shodan crawls the Internet for industrial control systems (ICS). One of the most popular protocols in ICS is called Modbus that runs on port 502. At the moment, there are about 17,000 devices listening to Modbus on the default port. It turns out there are also 700 devices listening on port 503, again a one-off sort of situation.

Probably over 20k by now

Thanks. Exactly as bad as I expected.

Reply on news.ycombinator.com