/dev/null Posted June 27, 2017 Share Posted June 27, 2017 Another ransomware outbreak has been reported Link to comment Share on other sites More sharing options...
Pine Barrens Mafia Posted June 27, 2017 Share Posted June 27, 2017 Another ransomware outbreak has been reported Oh joy. That'll make my life miserable. Link to comment Share on other sites More sharing options...
boyst Posted June 27, 2017 Share Posted June 27, 2017 Russians Link to comment Share on other sites More sharing options...
Deranged Rhino Posted June 27, 2017 Share Posted June 27, 2017 Russians Link to comment Share on other sites More sharing options...
Nanker Posted June 27, 2017 Share Posted June 27, 2017 Now that's a "reset button" we can believe in. Link to comment Share on other sites More sharing options...
Deranged Rhino Posted June 27, 2017 Share Posted June 27, 2017 Link to comment Share on other sites More sharing options...
OCinBuffalo Posted June 28, 2017 Share Posted June 28, 2017 Instant replay: Seems the crooks are always one step ahead of the law in this game. Change the law. Seems the crooks are always one step ahead of the law in this game. Want a do over on that Mead? Someday, somehow, we are going to learn that IT will never be dictated to by law, lawyers, and judges, and certainly not politicians. Does anybody remember GG telling me that Bitcoin would fail? Please understand: this is not anarchy. It's merely a different set of "laws" taking the place of outdated concepts...like paper memos replaced by email. Lawyers/Bankers have operated for centuries as the underlying masters of society. Deep-thinking IT people see many ways to make them obsolete, as well as most of the functions of government. However, other Dumb-Thinking IT people see an opportunity to enact dystopia(see: Facebook's CEO, who couldn't conceive of what his IT betters, at his own company, were doing: React Native. He, like Mark Cuban, should never attended to on IT matters). The trouble: lawyers and bankers have earned their bad rep, and IT people can earn the same bad rep, in much shorter time. If we don't do better at accepting our new responsibilities to society, our profession, and ultimately, ourselves, there will be hell to pay. Or, in Google's case, there will be the EU to pay: $2.7 billion. The obvious. state sponsored terrorism is not prosecutable. The also obvious. Since that is true, we are not bound by court procedure. If I go and fry 30 Iranian severs, I'm not prosecutable either. The ONLY reason many haven't: Obama Administration, and especially during the Iran deal. Now? It's open season. I've got a few ideas I'd like to try, and I've heard others say the same. But remember: the best hack is the one nobody hears about. One that is so damaging, that the victim is better off pretending it never happened. We'll never know who the "best thief of all time" was...because they were the best. CIA and NSA created a host of cyber weapons, kept them unclassified so they could share said weapons with unvetted contractors, and in a very direct way released the tools into the wild. They were also hacked in 2014 and lost a whole batch of cyber weapons - which they've been using as a cover but in reality they spread the tools themselves while paying US companies to keep back door exploits open. That is absolutely true...except for the "paying" part. When I did a portal gig for the Navy, they put all sorts of strange requirements, strange polymorphic functions/extra parameters, and interfaces to nowhere in, especially at the last minute before a release, so my guys were always frustrated into just banging out something quick that would work, but was crap. Every day I don't work in Java since that...is a good day. When we finished, we all agreed that they had 0 interest in our production code. It was spaghetti. They said they loved it, thanked us, paid us for both the project and add-on work we didn't do, and kicked us to the curb. It seemed clear they were just going to reverse engineer everything we did and build it all from scratch, with their own code. I have heard versions of this story many times. However, they don't pay us to create back doors. More likely, they force software companies into unwittingly creating back doors, or, they do what they did on my gig: make ridiculous requirements that allow them to fanangle back doors, by seeing how we respond to them. Link to comment Share on other sites More sharing options...
4merper4mer Posted June 28, 2017 Share Posted June 28, 2017 Instant replay: Want a do over on that Mead? Someday, somehow, we are going to learn that IT will never be dictated to by law, lawyers, and judges, and certainly not politicians. Does anybody remember GG telling me that Bitcoin would fail? Please understand: this is not anarchy. It's merely a different set of "laws" taking the place of outdated concepts...like paper memos replaced by email. Lawyers/Bankers have operated for centuries as the underlying masters of society. Deep-thinking IT people see many ways to make them obsolete, as well as most of the functions of government. However, other Dumb-Thinking IT people see an opportunity to enact dystopia(see: Facebook's CEO, who couldn't conceive of what his IT betters, at his own company, were doing: React Native. He, like Mark Cuban, should never attended to on IT matters). The trouble: lawyers and bankers have earned their bad rep, and IT people can earn the same bad rep, in much shorter time. If we don't do better at accepting our new responsibilities to society, our profession, and ultimately, ourselves, there will be hell to pay. Or, in Google's case, there will be the EU to pay: $2.7 billion. The obvious. The also obvious. Since that is true, we are not bound by court procedure. If I go and fry 30 Iranian severs, I'm not prosecutable either. The ONLY reason many haven't: Obama Administration, and especially during the Iran deal. Now? It's open season. I've got a few ideas I'd like to try, and I've heard others say the same. But remember: the best hack is the one nobody hears about. One that is so damaging, that the victim is better off pretending it never happened. We'll never know who the "best thief of all time" was...because they were the best. That is absolutely true...except for the "paying" part. When I did a portal gig for the Navy, they put all sorts of strange requirements, strange polymorphic functions/extra parameters, and interfaces to nowhere in, especially at the last minute before a release, so my guys were always frustrated into just banging out something quick that would work, but was crap. Every day I don't work in Java since that...is a good day. When we finished, we all agreed that they had 0 interest in our production code. It was spaghetti. They said they loved it, thanked us, paid us for both the project and add-on work we didn't do, and kicked us to the curb. It seemed clear they were just going to reverse engineer everything we did and build it all from scratch, with their own code. I have heard versions of this story many times. However, they don't pay us to create back doors. More likely, they force software companies into unwittingly creating back doors, or, they do what they did on my gig: make ridiculous requirements that allow them to fanangle back doors, by seeing how we respond to them. I can name that tune in 3 notes: I love me. Link to comment Share on other sites More sharing options...
ALF Posted July 26, 2017 Share Posted July 26, 2017 (edited) ECMC spent nearly $10 million recovering from massive cyberattack Erie County Medical Center didn't pay a nearly $30,000 ransom demand to the perpetrators of a massive cyberattack in April, but the intrusion that brought down the hospital's computer systems will exact a very big cost. ECMC officials estimate expenses tied to the incident were nearly $10 million. About half of that amount is for computer hardware, software and assistance needed in the response. The other half represents a combination of increased expenses, such as for staff overtime pay, and lower revenues from the loss of business during the system down time. Perhaps most importantly, the Grider Street medical center increased its insurance coverage against such events last November from $2 million to $10 million, Quatroche said. He said he is confident the hospital can recover the ransomware-related costs in its insurance claim, and publicly thanked ECMC's general counsel, internal auditors and insurance broker for recommending the increased coverage http://buffalonews.com/2017/07/26/cost-ecmc-ransomware-incident-near-10-million/ Edited July 26, 2017 by ALF Link to comment Share on other sites More sharing options...
Wacka Posted July 27, 2017 Share Posted July 27, 2017 Should have had Macs. 33 years of using them. $0 spent on antivirus/ cybersafety software Link to comment Share on other sites More sharing options...
/dev/null Posted July 27, 2017 Share Posted July 27, 2017 Should have had Macs. 33 years of using them. $0 spent on antivirus/ cybersafety software And I bet you've never once even considered how everyone around you is choking on that smug cloud Link to comment Share on other sites More sharing options...
Pine Barrens Mafia Posted July 27, 2017 Share Posted July 27, 2017 And I bet you've never once even considered how everyone around you is choking on that smug cloud He's in denial of basic economics. No way malware authors are going to focus on 10% of the market. Link to comment Share on other sites More sharing options...
/dev/null Posted July 27, 2017 Share Posted July 27, 2017 He's in denial of basic economics. No way malware authors are going to focus on 10% of the market. Besides the fact there is actually malware written for Macs. But as you said, the market share is so low it's not worth the effort. Link to comment Share on other sites More sharing options...
Recommended Posts