14 ms·
Maersk reinstalled thousands of servers and workstations to fix NotPeyta
- Simulacra 9y agoWow, that is a monumental effort. We can't even get a critical software patch in less than three months. I would be very curious to see what their new infrastructure defense plan looks like now compared to the old
- jlgaddis 9y agoI can't imagine the stress and working conditions those "in the trenches" IT folks dealt with over those ten days. Hopefully they all got rewarded with, at minimum, a few days off to relax and recover after everything got sorted out.
- post_break 9y agoAs someone in IT, they probably didn't get anything, maybe a friendly smile and a handshake.
- blibble 9y agonow the company has realised it can essentially work without IT, I suspect their reward might be a severance package a few months down the line
- lfam 9y agoThe article says that Maersk is taking the opposite approach. Quoting the CEO, Jim Hagemann Snabe: "And this was a wake-up call to become not just good —we actually have a plan to come in a situation where our ability to manage cyber-security becomes a competitive advantage."
- s0rce 9y agoWith a $300M loss...
- deleted 9y ago[deleted]
- bkor 9y ago> As someone in IT, they probably didn't get anything, maybe a friendly smile and a handshake. At least in one country they held a proper thank you party plus thank you gift certificates. That party was for everyone, not just IT.
- erk__ 9y agoI am pretty sure That Mærsk also invested a lot of money to prepere better for this in the future.
- koalalorenzo 9y agoIn the same old fashion, but yes: IMHO the people mindset is the same. Nothing changed really.
- scribu 9y agoFor me, the most surprising thing is that Maersk was able to carry on during those 10 days without any IT: > "We only had a 20% drop in volume, so we managed 80% of that volume manually. [...] Customers were great contributors to overcoming that." That makes me think that either a) IT isn’t quite as essential as we software people like to think, or b) the full potential of automation hasn’t been achieved yet.
- tjoff 9y agoI guess there are some factors that helps in this particular case. These are large container ships, the schedule is known very long in advance (the trips themselves take a long time too). After the initial hit the ships would have plenty of time to prepare before hitting port. Not trying to diminish the effort though! It is hard to imagine how they managed to hold everything together. As mentioned in the embedded clip, it has the potential to get much worse in the future where even the boats are completely autonomous. Also mentioned was that 90% of the orders came from internet, so 10% is not? Surprised me a little. Got the feeling that they have lots of manual paperwork even for internet orders, which probably helped a lot.
- erk__ 9y agoThey still had a loss on $200-300 million, after everything. When it happend there was stories about how workers switched to using WhatsApp on their own phone to communicate.
- koalalorenzo 9y ago...and forced to close down Slack. That is painful! :(
- throwawaymanbot 9y agowhy is slack lauded so much? its just MSN/yahoo Messenger with a 2017 feel.
- malux85 9y agoSome of it must have been sympathy by the customers too - "We got hacked and and to re-install thousands of machines" as a customer I'd let some late shipping slide. But could the company operate at a permanent performance penalty - i.e. without IT systems. They probably couldn't stay competitive
- sneak 9y agoThe real cost of continuing to run Windows.
- wglb 9y agoNo, Linux is not immune: https://arstechnica.com/information-technology/2017/06/web-host-agrees-to-pay-1m-after-its-hit-by-linux-targeting-ransomware/ https://arstechnica.com/information-technology/2017/06/web-h...
- yjftsjthsd-h 9y agoIn an article from late 2017: > kernel 2.6.24.2, which was compiled back in 2008. Next you'll tell us XP is vulnerable. Like, Linux isn't 100% immune, but it has a head start.
- canada_dry 9y agoBeing a (former/retired) IT Exec this kinda thing used to keep me up at night! Sadly, most C-level folks don't understand that even gold-standard cyber security is far from perfect, and IT can't do much against dumb, careless users.
- toomuchtodo 9y agoDisaster recovery/business continuity is like insurance: you grumble about paying it (or don’t pay it at all) and then you’re happy you did pay for it when disaster strikes.
- cm2187 9y agoBut in this case they had not patched their windows machines for a vulnerability that Microsoft fixed months before. It was really a case of dumb, careless IT.
- erikbern 9y agoThey should have used containers.
- koalalorenzo 9y agoSince I am getting sick of this joke: no we don't! :P
- rainer_zufall 9y agoDoes anyone know which software they use to roll out so many systems?