3 ms·

5 star would hostage again Superhost for my datas

by adolph 3y ago

echelon 3y ago
Amazing satire, but I shudder to think that's how companies actually treat ransomware. All companies and governments should take the stance that any randomwared or compromised data is now public. And if they don't have the backups, then they should consider it permanently lost. Write it off as a business loss and hire better ops people.
- dkjaudyeqooe 3y ago
  Govts should make funding ransomware groups a criminal offense. The money likely going to RU and NK anyway.
  - sweetjuly 3y ago
    That probably wouldn't have a good outcome. If a company gets hit very hard, their options are either to pay or die. If you make it illegal to pay, their options are either to commit a crime (which will not kill the company even if they get caught) or die. All this will do is push companies into hiding when they get hit and not reaching out to the government and security companies for help, which makes catching these groups way harder. So, at best you kill some domestic businesses and at worst you kill domestic businesses AND help the attackers hit more companies.
    - octacat 3y ago
      Options to configure backups and spend the money on isolating their network and computers to begin with are not considered.
    - dkjaudyeqooe 3y ago
      To the contrary: the first company to die (or so) would set a fire under any companies who were not prepared. It's complacency and ignorance that creates problems. The attackers attack for money, not to kill their prey, that's not profitable.
  - tatersolid 3y ago
    OFAC has made paying many ransomware deploys illegal in the USA for several years. https://ofac.treasury.gov/recent-actions/20210921 https://ofac.treasury.gov/recent-actions/20210921
- tonyarkles 3y ago
  > All companies and governments should take the stance that any randomwared or compromised data is now public. That's a somewhat reasonable stance. You definitely have no guaranteed assurance that it won't be leaked. However... depending on what you do have set up, you may have some reasons to believe that 45GB of encrypted data has not left your internal network (i.e. was only encrypted-in-place) > And if they don't have the backups, then they should consider it permanently lost. That's easy to say but way harder in practice. If the data in question is the design artifacts from a billion dollar project... it'd be a pretty hard sell to convince everyone "woops, we fucked up, billion dollars gone, time to close the doors and go home, we definitely shouldn't consider paying $500k or $1M or whatever they want to get all this data back".

5 star would hostage again Superhost for my datas

by adolph 3y ago

5 star would hostage again Superhost for my datas

Amazing satire, but I shudder to think that's how companies actually treat ransomware. All companies and governments should take the stance that any randomwared or compromised data is now public. And if they don't have the backups, then they should consider it permanently lost. Write it off as a business loss and hire better ops people.

dkjaudyeqooe 3y ago
Govts should make funding ransomware groups a criminal offense. The money likely going to RU and NK anyway.
- sweetjuly 3y ago
  That probably wouldn't have a good outcome. If a company gets hit very hard, their options are either to pay or die. If you make it illegal to pay, their options are either to commit a crime (which will not kill the company even if they get caught) or die. All this will do is push companies into hiding when they get hit and not reaching out to the government and security companies for help, which makes catching these groups way harder. So, at best you kill some domestic businesses and at worst you kill domestic businesses AND help the attackers hit more companies.
  - octacat 3y ago
    Options to configure backups and spend the money on isolating their network and computers to begin with are not considered.
  - dkjaudyeqooe 3y ago
    To the contrary: the first company to die (or so) would set a fire under any companies who were not prepared. It's complacency and ignorance that creates problems. The attackers attack for money, not to kill their prey, that's not profitable.
- tatersolid 3y ago
  OFAC has made paying many ransomware deploys illegal in the USA for several years. https://ofac.treasury.gov/recent-actions/20210921 https://ofac.treasury.gov/recent-actions/20210921
tonyarkles 3y ago
> All companies and governments should take the stance that any randomwared or compromised data is now public. That's a somewhat reasonable stance. You definitely have no guaranteed assurance that it won't be leaked. However... depending on what you do have set up, you may have some reasons to believe that 45GB of encrypted data has not left your internal network (i.e. was only encrypted-in-place) > And if they don't have the backups, then they should consider it permanently lost. That's easy to say but way harder in practice. If the data in question is the design artifacts from a billion dollar project... it'd be a pretty hard sell to convince everyone "woops, we fucked up, billion dollars gone, time to close the doors and go home, we definitely shouldn't consider paying $500k or $1M or whatever they want to get all this data back".