3 ms·

They restored a flat copy from archive.org It looks bad. I'll give them the benefit of the doubt but... they either don't want to put it online for some reason

They restored a flat copy from archive.org It looks bad. I'll give them the benefit of the doubt but... they either don't want to put it online for some reasons, or they don't have backups available. My bet is that the entire IT service is subcontracted, which means burnt juniors deal with 99% of it, understaffed etc There's this running joke in Spain about SEPE being useless and lazy, because of their "customer service", but much of the labor-related management and payments go through it.

Bluestein 6y ago
> They restored a flat copy from archive.org Seriously? Unbelievable.- > but much of the labor-related management and payments go through it. This is really concerning. The situation being what it is, you'd think that labor services, precisely, would be in high demand (benefits and such ...) > they either don't want to put it online for some reasons, Site compromised to inject malware? > or they don't have backups available. Again, incredible ... > My bet is that the entire IT service is subcontracted, This, and - my personal - bet, an "inside" job, with a willing admin. The kind of malware used is not even "first rate". It's Malware-as-a-Service second rate crackers "rent", when they have a way in, but not the chops to actually dev their own tooling ... (By the way, on follow up, I have heard of no resignations ...) Edit: Wanted to say - though they deny it - ... What about the PII of several dozen million people? I am convinced it has been compromised ...
- iagovar 6y ago
  > Seriously? Unbelievable.- Yeah, no kidding. It was like wildfire in the spanish IT community. Apparently, most operations are back online, but the website still displays a warning. There's very little info, probably different subcontrators for website/backend? Who knows.
  - Bluestein 6y ago
    My bet is they -did- have a backup, but the backup got encrypted as part of the attack ... (I don't know what is worse ...)

Bluestein 6y ago

> They restored a flat copy from archive.org Seriously? Unbelievable.- > but much of the labor-related management and payments go through it. This is really concerning. The situation being what it is, you'd think that labor services, precisely, would be in high demand (benefits and such ...) > they either don't want to put it online for some reasons, Site compromised to inject malware? > or they don't have backups available. Again, incredible ... > My bet is that the entire IT service is subcontracted, This, and - my personal - bet, an "inside" job, with a willing admin. The kind of malware used is not even "first rate". It's Malware-as-a-Service second rate crackers "rent", when they have a way in, but not the chops to actually dev their own tooling ... (By the way, on follow up, I have heard of no resignations ...) Edit: Wanted to say - though they deny it - ... What about the PII of several dozen million people? I am convinced it has been compromised ...

iagovar 6y ago
> Seriously? Unbelievable.- Yeah, no kidding. It was like wildfire in the spanish IT community. Apparently, most operations are back online, but the website still displays a warning. There's very little info, probably different subcontrators for website/backend? Who knows.
- Bluestein 6y ago
  My bet is they -did- have a backup, but the backup got encrypted as part of the attack ... (I don't know what is worse ...)