6 ms·
Yeah, the poster didn't make totally clear whether all of their business records are totally gone, but it does sound like that's the case. The ERP was very like
by ragnese 6y ago
Yeah, the poster didn't make totally clear whether all of their business records are totally gone, but it does sound like that's the case. The ERP was very likely the source of truth for everything- including employee information that the poster says is gone (can't send SMS to remote employees).
So, it probably is that bad...
- Nextgrid 6y agoNothing in his post suggests the ERP's DB is gone, merely that the mechanism which populates DNS records from the ERP has broken down, which probably has ripple effects on everything else as their internal DNS is broken and services can't talk to each other. But the data should still be there, and it's a matter of reverse-engineering how to go from "ERP DB" to "DNS zone file".
- ragnese 6y agoOkay, fair enough. I probably skimmed the post too quickly.
- Semaphor 6y ago> Skimmed through the MySQL and Postgres databases, no signs of anything domain-related. I'm betting it's all stored in the custom integrated [and encrypted] KV database.. -- https://old.reddit.com/r/sysadmin/comments/ma4mwl/the_absolute_worst_case_scenario_happened_what/grqu1i3/ https://old.reddit.com/r/sysadmin/comments/ma4mwl/the_absolu...
- TeMPOraL 6y agoIf the system is old (going by other replies, introduced in a deal 20 years ago), maybe they'll be able to brute-force the encryption...
- michaelt 6y agoEncryption being 20 years old doesn't mean it's easy to break, given that AES is 23 years old :)
- TeMPOraL 6y agoIt doesn't, but in my experience, the ciphers and key sizes commonly used were often not future-proof :). This rests on the assumption that nobody updated the keys/encryption components in 20 years - which I think is quite possible with such internal enterprise deployment.
- deleted 6y ago[deleted]