IT kid with a beard told me my "legacy hardware" is a security vulnerability. Son, that "legacy hardware" has been running 24/7 since before your parents met at a Coldplay concert. It doesn't have an IP address. You can't "hack" a mechanical relay. Go back to your standing desk
Barbara asked why I woke her up at 5:30 to "go look at the flares." Because, Barbara, that's not just fire. That's American energy, a pilot that hasn't gone out in years, and a relief system doing exactly what it was engineered to do. She nodded her head and smiled.
IT found 40 devices on the plant network they "didn't recognize" and helpfully removed them from the switch config.
Those were the boiler controls.
I'd like to report a ticket.
Vendor told my CISO I was "resistant to innovation." My CISO told the vendor "Bob has kept this plant running for 22 years." Vendor said "but our platform......" Jerry said "TWENTY...TWO....YEARS..." Meeting adjourned. We went to lunch. Good man Jerry....See ya at Jr's game at 6
IT enabled classic spanning tree on the plant network. Convergence time: 30 to 50 seconds. I/O connection timeout: milliseconds.
You do the math. The line already did.
My network has been American-made since day one. Cisco. Motorola. Budweiser in the break room. Stars and stripes on the hard hat. Some of us didn't need the FCC to tell us what was obvious. But I'm glad they finally got the memo. Welcome to the party
IT ran a "quick network discovery scan" on the plant floor. Took down two PLCs older than the kid who ran the scan. He said "it's just nmap, it's harmless." Son, that PLC has 64KB of memory and the emotional stability of a soap bubble. Nothing is harmless here.
IT said our plant network was "flat and unsegmented" and they'd fix it over the weekend. Monday am nothing could talk to anything. Their firewall was blocking port 502. I asked if they knew what Modbus was. He said "is that a band?"
I went home. Linda knew not to ask.
The best OT security product in the world loses to one controls engineer who has the knowledge and respect of me and my team ..........and he or she says no. Spend your time to get to know these folks.
Vendor just dropped a deuce in my f'ing secret bathroom that only 3 of us walk far enough to use. That's issue number 1. Issue number 2 is that it won't flush and had to be broken up.
Vendor.....You are officially in my crosshairs. Good luck.
Three things I'm grateful for this Labor Day:
20+ years of uptime at my plant
An American Budweiser that's currently 34 degrees and perfect
The fact that I don't have a vendor meeting until Tuesday
Happy Labor Day. To the plant operators, the guys pulling cable at 2 AM, the engineers keeping 30yearold systems alive with duct tape and prayer. Today is YOUR day. Not the vendor's or consultant's day. Not the guy who put "OT thought leader" in his LinkedIn bio. YOURS. Enjoy it
Today we honor the workers who built this country. The welders. The electricians. The pipefitters. The machinists. The control engineers who keep everything running while vendors take credit for "enabling operational excellence" from an office. Happy Labor Day. Now leave us alone
PSA: The best "zero-trust policy" ever invented is a heavy-duty padlock on the control cabinet and a pair of steel-toe boots at the door.
TIA - Bobby
#automation#ot#otsecurity#cybersecurity
PSA: If a vendor uses the words "synergy," "cloud-native," or "pane of glass" more than twice in the first five minutes of a meeting, you are legally permitted to walk out and lock the gate behind them.
TIA - Bobby
#ot#automation#otsec#cybersecurity
10:30 AM. Lawn's done. Garage is squared away. Slacks have a crease you could split a Modbus packet with. 1.5 hours until Budweiser. Some people call that discipline. I call it change management.
PSA: An "autonomous AI agent" isnt a real tech. It cant smell a burning motor, and it doesnt know which way to turn a rusted 3/4-inch flange. If I catch any "agents" touching my PLC logic, ll archive them to a 3.5-inch floppy disk and toss it in the flare pit.
TIA - Bobby
#OT
IT scheduled a "quick patch window" for Wednesday at 2 PM. On a line that runs 24/7. I asked what "quick" meant. They said 45 minutes. I asked what "window" meant. They didn't answer. Meeting over. I am the firewall you didn't budget for.
#Automation#OTSecurity