ctrl-k x
A few weeks ago, tired of telling people that when we talk about "we need to make systemic change" that doesn't mean "everybody but YOU," I made a bookmark shortcut called "A TOADA SO" that linked to a news story about me, um, "springing into action" in response to an attempted ransomware attack.
Today I decided that's just going to be my bookmark tag for other HEs getting rocked. "This was only not us because we got *lucky* now quit it!"
Chris Siebenmann
@snowcrashmike I keep wondering when the first time will be that we use ZFS filesystem rollbacks.
(The real answer is probably that our load metrics would all go red from the ransomware trying to encrypt <bignum> gigabytes of data over CIFS+NFS, and then we'd get to do selective restores.)
ctrl-k x
So glad I didn't let them take my photo for that story.
ctrl-k x
@cks this was us btw https://www.cbc.ca/news/canada/kitchener-waterloo/university-waterloo-ransomware-attack-1.6862175 although like most news articles, um, well...
ctrl-k x
@cks ooo, a whole department getting ransomed all at once on the same fileserver. Ouch. On the other hand, maybe you'd get to interrupt it mid-flow, or it would interrupt itself.
Haelwenn /элвэн/ :triskell:
Chris Siebenmann
@lanodan @snowcrashmike Fortunately for us, we have (copies of) all of that sort of configuration and settings information stored on our fileservers (and included in backups), along with machine configurations and so on. This is less virtuousness and more sheer survival; we have enough machines (and keep them long enough) that we have to keep track of all of that somehow or things will inevitably blow up in our faces.
Chris Siebenmann
@lanodan @snowcrashmike If everything was completely wiped and had to be restored from utter scratch, we might find that we had missed some things, but we could probably put them back together again from general first principles about how our environment operates.
(And the offsite backups. Those would be very important.)
ctrl-k x
@lanodan @cks Ransomware operators tend not to care very much about those, except as a side-effect. But if somebody truly wanted to wreck infrastructure, absolutely those are important.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.