Two of the UK's biggest supermarket chains, Tesco and Sainsbury's, were hit with technical issues on Saturday; Sainsbury's blames a software update
www.techmeme.com
From Bloomberg.com. View the full context on Techmeme.

cross-posted from: https://infosec.pub/post/9811127

Two of the UK’s biggest supermarket chains, Tesco and Sainsbury’s, were hit with technical issues on Saturday; Sainsbury’s blames a software update (Bloomberg.com)

Bloomberg.com: Two of the UK’s biggest supermarket chains, Tesco and Sainsbury’s, were hit with technical issues on Saturday; Sainsbury’s blames a software update  —  Two of the UK’s biggest supermarket chains - Tesco and Sainsbury’s - were hit with technical issues on Saturday.

  • @thesmokingmanEnglish
    8•3 months ago

    It doesn’t sound like you’re aware of PCI DSS

    Regulatory burden aside, you don’t do data analysis at scale running “some big wigs’ nephew’s VB/C# app.”

    • @[email protected]English
      0•3 months ago

      I’ve not worked directly with any of these payment systems, but I can’t believe the only solution is go all 90s style Windows based system. There will be embedded ways that comply to regs.

      I can see they are Windows based when there is issues. I’m sure of Tesco and Morrisons but Sainsburys I don’t go to often enough to have see an issue that bring up Windows. I was being flippant, but I don’t hold using Windows to build stuff in high regard. In my experience the software engineers who doing that don’t know anything else.

      • @[email protected]English
        4•3 months ago

        It’s very likely to be one of the NCR platforms. If I were to hazard a guess, StoreLine. Though it could be Encor/ISS45, ECRS has a pretty big market share as well. POS software is a walled garden of security through obscurity. Windows dependencies tend to be in part because it is such a small market, but also due to workstation/server requirements as well as remote support.

        Long time support and stability are the name of the game. The industry doesn’t allow for much downtime which makes any change significantly harder than a lot of other industries.

        • @[email protected]English
          2•3 months ago

          I’m sure these brands/sector will end up Linux too at some point. I’m half expecting MS to move to the Linux kernel themselves in the not too distant future, so no matter how trailing edge they are, they could get dragged in.

          • @[email protected]English
            2•3 months ago

            I’m out of the industry now, but I was saying the same. Win 10 Embedded and Win 7 IoT both served very, very well. But the always online component and other issues with 11 make it poorly suited for the use case it had in the past. Systems that relied on mapped drives are now nearly fully depreciated.

            • @[email protected]English
              2•3 months ago

              I’ve not touched Windows Embedded much, but I did once know Windows guts well. For 11 years it was my work development platform . Last thing I did was a virtual filesystem of an internal version control system for game artwork and I put a TortoiseSVN like interface for it into Explorer. Doing those destroyed what respect I had for Windows. I’ve been in embedded Linux for 12 years now.

              Edit: 24 years of developing stuff. I’m getting old!

              • @[email protected]English
                1•3 months ago

                Very nice! I am what we in the industry call a fraud :^)

                JK, I’m just not well versed in development or high level things. I’m in the administration, implementation and advisory side of things these days. I was a field tech prior.

                One day I’ll get more into the weeds of it all. Nothing but respect for the devs that hold it all together

                • @[email protected]English
                  1•3 months ago

                  If you go the open source route, you can just pick a project that does something you are interested in, and get involved. 😃