Cargo Occultist @whisk.bsky.social · 13/09/2026auditors are not permitted to run *nmap* willy-nilly against critical civil infrastructure so i’m reasonably certain nobody will be be doing this 100
paul hauntsel 👻 🎃 @paulhansel.com · 13/09/2026In the context of an airgapped PLC / industrial control network, sure don't just nmap randomly, but if any system exposed to the open internet can't survive an nmap, it needs to be retired. I think you're mixing up the two here. 200
Cargo Occultist @whisk.bsky.social · 14/09/2026totally agree we should replace public-facing systems that can’t stand up to modern threats, but is assessment of vulnerability a meaningful roadblock given the lifecycles of these systems? 200
Caspus / カスパス @pardontherant.bsky.social · 14/09/2026I'd argue it's not just what's exposed to the open internet. It's anything you don't have on an entirely in-house network and even *then* you still have risk exposure depending on the age of equipment, vendor, and sophistication of exploit capability. 110
