Monad Portal
Was it me?
you need to be better and reject totalitarianism instead of advocating it.
Colonial Pipeline is a private company. Should the US Government get involved?
- Thread starter Jack
- Start date
you need to be better and reject totalitarianism instead of advocating it.
“The company said it is making progress and hopes to restart a substantial portion of operations by week's end. The company said it has taken delivery of an additional 2 million barrels from refineries for deployment upon restart.”
https://www.reuters.com/business/en...-pipeline-outage-enters-fifth-day-2021-05-11/
https://www.reuters.com/business/en...-pipeline-outage-enters-fifth-day-2021-05-11/
"hopes to" is meaningless. The last part is irrelevant.
Monad Portal
Was it me?
The most surprising thing here is the government saying paying ransom or whatever was a private issue for Colonial when its causing gas lines.
All they gotta do is make a backup of their hard drives every so often.
Ransomware is a joke!
Recovery is not as simple as you make it out to be. They have to discover when the first computers were infected since if they install any file created after that first infection they could just be reinfecting their network. Ransomware can sit idle for a period of time before being activated. This means they could lose 6 months or more of files.
They have to take down every computer, completely wipe them, and then reinstall each computer. You can't use the existing software to restore files since the ransomware could be hiding in any file waiting to be activated. If the ransomware manages to infect drives then you might have to replace drives on every computer as well. If your backups are to a central back up and it takes 2 hours to reinstall each computer and you have 400 computers it will take you a month to get everyone back up. But even after you reinstall each computer then you have to do any updates, software installs or anything else that occurred after the initial infection.
Congratulations on reinfecting 4 computers.
Question from an idiot about computers, would a backup system have prevented this?
That is one avenue of attack but is hardly the only avenue. Perhaps the attacker was able to SSH into a server. Or they sent a Word document using a hacked company account. Or it was a software vendor that had their updates hacked. (See SolarWinds.) Or it was a program downloaded from the internet from a fake website.
It would not prevent it. It only helps to recover from it if you can isolate when the infection happened. Proper security is the only way to prevent it.
One of the best ways to prevent it from going too far is to monitor your computers for disk activity. There are security softwares that do that. If it suddenly sees a lot of files being written to which needs to happen for files to be encrypted it sends out an alert and can work to shut things down.
The other thing that has to happen with your backups is they have to be isolated in some way. If you are simply backing up to a computer on your network then the ransomware can write to that back up and encrypt all your backups making your backups useless.
https://www.zdnet.com/article/ransomware-victims-thought-their-backups-were-safe-they-were-wrong/
Not so secret. Just socialists doing what they do. I wonder how the Democrat party paid them off?
Private industry is actually the best way to handle it. They are best equipped to secure their own network.
Not their job. I am responsible for my network security. Only me. It is not government's job to secure the network of a private company. You are right in that the federal government network security is generally dog shit.
Securing the nation is exactly their job.
Yes, it is a lesson. Secure your networks.
YES YOU CAN. Government provides NO assistance here. Me, myself, and I are the only ones responsible for securing my network. Not government. I can and already have done a far better job than many government systems (often trivially easy to break into).
Thank you
Public-private key encryption (the basis of SSL and HTTPS) was constructed by private individuals, not government. Government wanted to install a backdoor in it. The developers told them to get lost.