Controls.Fail

Maxburn

Looks like you can swing those 90° CW and open the door? I don't see scratches indicating this happens though. Is there a window in it or is that just a hole?

Maxburn

That takeover pic is rough, it would have actually been easier to switch to DIN and have a rack of relays and spade crimp connectors.

Maxburn

More. These might actually be using remote zones. Local medium high end hibachi restaurant. I can't stop seeing this now.

: IMG_4463.jpg (87.44 KiB) Viewed 3197 times

Maxburn

Right behind the reception desk, an insult to my profession. I mean, there might be remote zone temp sensors on a couple of those white rogers I'm not familiar with but the honeywells don't have them I'm aware of in that model.

: IMG_3906.jpg (141.1 KiB) Viewed 6324 times

Maxburn

orion242 wrote: ↑Tue Jun 13, 2023 10:16 pm At this point, seems it would have been easier to just replace the irrigation system with BMS controllers.

We would have to trench the site to do it. Each zone valve is digitally addressed. The only wiring is a combination power & comm cable, 2 wire.

Maxburn

Is the customer paying you T&M to follow this rabbit hole to the other side of the planet? No. But I have gained a lot of traction towards black listing these MSA, Fieldserver, protonode, Safety Company, Chipkin devices. We are on notice now and any failures of these devices to provide valid da...

Maxburn

Reply on cleaning up the file mess, must format the device. Which means you have to reapply the firmware(?) and config, and of course put the IP address back in. Actually not a bad day if I'm on site but a big nope to fix remotely. Did I mention this site is a 2 hour drive?

Maxburn

Following up on this, I think I spent two days out there in 2023 so far but we put off testing until I could see irrigation running. The web page they are sending is steadily improving and I seem to have valid data out of some arrays like alarms and zones working on the BACnet side of things. Irriga...

Maxburn

November 1 (Tuesday) Please be patient until next week. We hope to be done by Monday. I will test it and let you know. November 14 (two Mondays after, but they didn't specify which Monday) New firmware and web app files sent. November 29 Back at site, uploaded firmware and web app files. Web app an...

Maxburn

October 13 Back at site with LTE modem and my own network. Set everything up and this time leave the chipkin gateway off my local network. Hunter panel connects to Centralus no problem at all, explore around and everything looks good. It offered to upload the local panel which worked. Connect chipk...

Maxburn

October 6 (in office) Set up web server in digital ocean on the two TCP ports hunter says they need to talk to for AWS. Demonstrate that my laptop behind the LTE modem can get those pages so not only can I resolve DNS for the specific IoT AWS thing they need to reach but my modem is not blocking th...

Maxburn

September 14 First site visit; Hunter panel sees LAN option as WiFi, and fails firmware update. Supplied SD card issues? Tried several different formats (not mentioned in hunter docs). Reached out to local Hunter support. September 19 Met hunter rep late in afternoon, they did firmware update with ...

Maxburn

This is my experience with integrating to a Hunter ACC2 irrigation panel via a Chipkin/MSA/Fieldserver gateway. This won't make me any friends but this is a true account and I think it needs to be told. All of this is in 2022, so far. Early April ; inquiry about irrigation system integration into ou...

Maxburn

On the dual ethernet module I'm seeing the LAN transformers and a group of relays to accomplish the failover, as you say that's all required. Does appear the two network ports and switch are on board with the CPU. https://www.ti.com/product/AM3352#features The dual ethernet models are 100M, the bigg...

Maxburn

On these small routers I'm dealing with I've noticed that a lot of them skip right over having individual ethernet chips; they go straight to having a network switch on die. WAN and LAN ports are defined by VLAN internally. It's cheap to get a bunch of ports that way. On BMS modules I haven't looked...

Maxburn

How do bid against others unless the spec is IP only? I think that's key, no engineer is going to spec this. Why would they? This is being thrown on us from manufacturers that are ditching serial buss and going with IP. At this point the components for IP are probably cheaper than serial network ha...

Maxburn

It seems ALC has thoroughly embraced the IP network to everything in the system in their new modules. They haven't strictly said ARCnet is going away but they know they have problems getting ARCnet silicon and there is a big push to go IP for new systems design. ALC doesn't seem to be unique in this...

Maxburn

True, I'm minimally involved in doing the same for one of our projects and seeing it from both ends like this is a big help. At least this project will have a screen involved from the start, which is a major problem when you can't get them. ALC is "supposed" to train these OEMs how to use ...

Maxburn

Four MAU units of varying vintage but all under 5 years old. All have ALC OEMCtrl modules in them. #4 has touch screen and is simplicity itself to configure baud, MAC, device ID. Units 1 and 2 have no screen. 1,2,4 all are IOFlex. Unit 3 is IOZone, nobody understands why what is on site differs from...

Maxburn

Bonus, the unit can be discovered by YABE and apparently CAS BACnet Explorer. But the point discovery is broken, neither YABE nor Automated Logic discovery can see any points in the units. Fortunately the points are explained in the PICS and you can manually map them. Shocker, it isn't on the BTL ce...

Maxburn

PICS not posted publicly that I can see but; BACnet Protocol Implementation Conformance Statement Vendor; BeaconMedæs ~ Data Link Layer Options ISO 8802-3 (“Ethernet”) LAN Turns out the panel actually communicates BACnet/IP. I guess technically that uses ethernet right? Now that we know the docs are...

Maxburn

Yes, third party is on board. Some of the M class boards off of ebay we got last year were from a repair outfit. I don't know where they get their stock though, I've never seen anyone buying old / broken boards.

Maxburn

Cost is quite reasonable. They won't fix board damage or obvious liquid damage. My biggest complaint was comm trouble boards sometimes coming back as no fault found. Sure it works fine on 3 feet of cable but in the big network it takes the whole thing down. Granted a lot of those could be one of our...

Maxburn

Status page

https://stats.uptimerobot.com/n61XGcGoRD

Maxburn

Really old ALC modules like the Z, T, R, and G line modules plus the S6104 may no longer be repaired by ALC. These modules are 18 to 25 years old, it was a good run.

Basically if you have anything running legacy CMnet exec6 or older you really should be getting that on a replacement/upgrade plan.

Maxburn

Yeah, I put them in uptime robot and they go down multiple times a day. Usually in the morning. Doesn’t last long though. I think they might be seeing some traffic from something unrelated like an amateur DOS.

Maxburn

Sounds like the smart solution to me. Nothing wrong with isolating and protecting the older stuff.

It’s just interesting they are ignoring older, sometimes current, systems capabilities with some of these requirements.

Maxburn

They may be getting attacked, basic DOS perhaps. I created a post in the help section and they said they got hit with a lot of traffic. Right this second I'm getting this; Database Error Database error The database has encountered a problem. Please try the following: Load the page again by clicking ...

Maxburn

Moar logs. Remember to add the five minute alarm threshold to the event duration in right column.

: winzabtoohigh.png (161.48 KiB) Viewed 20917 times

Maxburn

Now have four customers on Linux in Azure. It's a bit of a learning curve on the OS side but refreshing how much knowledge transfer there is in the Zabbix/OpenVPN areas. End result is a faster experience on the front end with less resources used. And just WTF is windows doing all the damn time? I fe...

Maxburn

Recent podcast "Hack the Plant Episode 11: Department of Defense Policy and ICS Security". Some talk of DFARS but more interesting was some specific talk about power meters being rejected because of things like they have bluetooth and optical connections. It's like they ignored they can be...

Maxburn

Maxburn wrote: ↑Thu May 20, 2021 10:34 am That didn't take long, hvac-talk down as I write this.

Again.

Maxburn

Still says Linux-3.4.39. Will say most of the CVE issues will be resolved by not having those functions in use on this. Anything in the IP stack though...

Maxburn

That didn't take long, hvac-talk down as I write this.

Maxburn

Remember that big disruption when hvactalk went down, then came back up and was upgraded to current version of vbulletin but broke all links and other stuff, then got downgraded to the old unsupported version again? That got kicked off by being forgotten about and deleted. They didn't even have a cu...

Maxburn

It's just nice to have something that's a little more in our control and not tied to a marketing agency that "forgets" all about that forum and deletes all copies of it.

Maxburn

Comparing things, ALC latest release drvier reports this in logs; Linux version 3.12.10-alc (buildcomp@rdvm-yocto1404) (gcc version 4.7.3 20130226 (prerelease) (crosstool-NG linaro-1.13.1-4.7-2013.03-20130313 - Linaro GCC 2013.03) ) #1 PREEMPT Tue Jun 11 19:25:09 EDT 2019 The latest beta I'm aware o...

Maxburn

Only thing that jumps out to me is inux-3.4.39 is about 2013 vintage, Very old. This page suggests there might be 269 CVSS on it but I can't get it to display. https://www.cvedetails.com/vulnerability-list.php?vendor_id=33&product_id=47&version_id=160797&page=2&hasexp=0&opdos=0&a...

Maxburn

OK, saw my first DFARS request today from the front office. Looks expensive.

Maxburn

Oh, haven't seen that one yet. Reminds me about the XKCD regarding standards.

Maxburn

I shared it in the other place but I've got a FW series that was installed in a hot location for about two years and is leaking too. It was a beta test...

Maxburn

My first stab at what it takes to get a server on it's feet with Ubuntu to host WebCTRL.

Maxburn

I shared this stuff with my contacts in JCI channel manager and Broudy a while back. Not expecting anything to come back to me about this but EasyIO has known that there's awareness of this in the community for about three weeks now.

Maxburn

Patches? Please, they don't even load DRIVERS to get the hardware running. So they have these 42" something like 3k monitors that can't be set beyond 1024x768 because it's missing a video driver. Nobody is supporting these machines at all, it's actually scary the amount of thought that goes int...

Maxburn

It's nice to have options. The big upset with the forum was also a reminder of who owns the site and why, which doesn't really sit right with some people. Current banner on it is an example of that.

Maxburn

Too bad.
https://mailchi.mp/ahrexpo/2nd-call-mak ... 2ab44bb93b

Maxburn

USAF CE network is super secure. So secure that no machine is allowed to reach out to windows update. Supposedly some administrator somewhere is supposed to update these machines manually, like with sneakernet. The inevitable result is machines that never get an update and they have the hard shell c...

Maxburn

Bonus, this isn't some mechanical space, this is the MDF room next to IT offices.

: IMG_Aug272020at112943AM - Copy.jpg (207.96 KiB) Viewed 26251 times

Maxburn

Self signed basically says it came from such and such and the file isn't corrupted. It's verifiable if they post their public key like you probably have seen with downloads and MD5 hashes. If they spend a couple dollars it can be trusted with a little work that isn't really that bad. After a recent ...

Maxburn

More news https://view.email.sans.org/?qs=5afb8bf5bc8cd7762f607debde393af5a2cf2f24e09212e441841bf5d28d2f7cb9fdbc7092d026068fcc772938b1bd13d1b1b09ca2c1f42169f3cb7e1f2c714bc7f7666995dcb3ef Home Router Study Finds “Alarming” Security Issues (July 6, 2020) A study of 127 home routers from seven manufact...

Search found 87 matches