3 ms·
Now we have one less critical piece of infrastructure that could be trivially knocked out by a hostile state.
by rblatz 5y ago
Now we have one less critical piece of infrastructure that could be trivially knocked out by a hostile state.
- PaulDavisThe1st 5y agoHow do you know that? What evidence is there that it's any more secure than it used to be?
- edoceo 5y agoThese pirates have committed to not hitting the same target again?
- toomuchtodo 5y agoAnd what about the others?
- xphos 5y agoBut they could have made holes in the system or not disclosed all system holes which other hackers might take advantage of in the future
- leesalminen 5y agoAh yes, the code of the pirates. The epitome of ethics and morality.
- pomian 5y agoI dont think it's a code. It's more of a guideline.
- headmelted 5y agoI’m sure at some point they must have just asked if they’d give them the password for free on account of all the collateral damage.. but it looks like they were disinclined to acquiesce to the request.
- ryanlol 5y agoCan you name some examples of orgs getting hit twice?
- HeyLaughingBoy 5y agoAs someone who had their home broken into twice in the same week, probably by the same people, I prefer to subscribe to the theory that there's no honor among thieves.
- Nextgrid 5y agoThe 5M ransom plus all the other damage such as reputation loss, increased government scrutiny and potential damages to pay to partners (I'm sure they provide some sort of SLA for their oil delivery services?) is a good enough deterrent from allowing this to happen again.
- akomtu 5y ago5M is nothing to that pipeline management firm. I think nothing will change because the "fine" is tiny and later, when a VP of opsec gets to decide between a massively expensive hardening of security which includes big recurring costs to keep an opsec team on payroll and just pocketing a multimillion dollar bonus for optimizing the opsec budget, he will choose the latter. There's no risk of getting jail time and any reputation damage won't be to his personal reputation, but to that firm he will have left long ago.
- kortilla 5y ago> keep an opsec team on payroll and just pocketing a multimillion dollar bonus for optimizing the opsec budget This is not how companies actually work. This is a fun “incompetent executive” fantasy that floats around but in real businesses you don’t pocket a huge bonus solely by cutting costs. You’re gonna have a lot of explaining to do on why that money was being spent in the first place and why it’s not needed now.
- dmingod666 5y agoThey are installing more software from the hacker voluntarily after paying the ransom. At this rate it looks more like they just hired a competent and highly unethical vendor..
- FredPret 5y agoThat’s one hell of a way to provide “red-team” security testing services
- rsync 5y agoThey didn’t need security experts for that- all they had to do was not connect it to the Internet ...