3 ms·
How can companies not have ransomware in their threat models, with a tested recovery plan and tested offsite backups? Too many big corps have been victimized t
by throwawayboise 6y ago
How can companies not have ransomware in their threat models, with a tested recovery plan and tested offsite backups?
Too many big corps have been victimized to think that it can't happen to anyone. You must assume it will happen, and when it does you must have a plan to recover.
- TacticalCoder 6y agoIt would be hilarious if, as a consequence of cryptocurrencies (sadly in this case because of a very nefarious use), companies started taking security more seriously. Somehow I hope that when, say, Toyota sees this someone somewhere pushes for better recovery plan / offline backups, etc.
- ht85 6y agoOffsite backup is not enough. I have done consulting on many projects and on every one of them, someone getting access to certain servers would be able to sabotage backups as well. If your data is important, you should replicate your backups to an append-only storage with a long retention period. I've been using S3 in "Compliance" retention mode, which coupled with Glacier is cheap, and more importantly lets me sleep at night.
- ocdtrekkie 6y agoYou can also do just fine with an LTO tape drive. The main problem is that people want automated convenience and automated convenience can be hacked before people notice. An LTO backup tape on a shelf might as well be stored in Fort Knox as far as a hacker is concerned.