A shadow server can virtual-patch legacy power systems that cannot be fixed directly
lauriewired · x · 2026-07-25
The post explains a NIST-style "shadow server" pattern for protecting legacy critical infrastructure systems that cannot be fixed directly.
- The example is an old Windows XP box that controls turbines.
- Instead of letting users interact with the vulnerable system directly, you place an optical one-way diode in front of a separate machine.
- That machine becomes a shadow historian: all queries use shadow data, not the live legacy box.
- Writes require a "protocol break" that converts data into the ancient protocol the legacy system expects.
- The idea is a kind of virtual patch: the old software stays unchanged, but the architecture blocks known vulnerability preconditions.
The author notes this can also be experimented with in a home lab.
More from Infra
- AMD marks 20 years since ATI deal that paired CPUs and GPUs — DavidBennett__ · 2026-07-25
- AI agents may need payment insurance before users trust them with real budgets — danielbaker06072001 · 2026-07-25
- SkyPilot hits 10,000 GitHub stars while powering AI infra across 25+ clouds — skypilot_org · 2026-07-25
- DIY Pi cluster claims a $2,500 path around $15,000 enterprise servers — brianrkelly · 2026-07-25
- A BitNet kernel looked 29× faster, but DRAM bandwidth cut the real gain to 6–10% — shifu_legend · 2026-07-25
- Cloudflare launches x402-powered payments for AI agents on July 1 — kleffew94 · 2026-07-25