Live data from Hacker News

British Airways: All flights cancelled amid IT crash

bbc.com

81–90 of 255 posts

Re: British Airways: All flights cancelled amid IT crash

#81
post #70

In the tech-related (but now fully mainstream, unlike a few years ago) news these days, there are a number of recurring themes. 1. Massive security breaches affecting major corporations, governments, and so on. 2. Massive IT outages, affecting corporations, governments and so forth. It doesn't take a lot of incidents to mark them as 'massive' since things are strongly centralized in this world. Meanwhile, in the last…

It seems that companies would rather buy "insurance" rather than spend money on actual security. They have accepted that they will eventually be hacked or have a really expensive outage, so now they want a cushion of money to pay for any penalties and lawsuits. I get the impression that for the most part, no one really believes in security, and doesn't understand that it's a process and not a product. They already tr…

Why aren't there Security Process Engineers (SPE)? I was recently waiting on a massively delayed flight and observed three instances where employees left the computer behind the check in desks unlocked. I'm sure these computers checked off all the requirements for having a firewall turned on, anti-malware software, auto-updates turned on, etc. But the front door was left wide open because the employees were forced to move between their counters and the actual jet bridge. Since they get penalized for late flights, but not for security breaches it seemed as if they didn't care. This would be where a SPE would come in and propose something to remediate the process failure.

Re: British Airways: All flights cancelled amid IT crash

#82
post #65

Hopefully, this will be a wake-up call to the industry - government regulation in IT is needed.

The UK government (perhaps the relevant one in this case) does not have a stellar track record of figuring out how to make big IT systems and projects successful. This knee-jerk appeal to regulation is unconvincing to say the least.

Re: British Airways: All flights cancelled amid IT crash

#83
post #78

Earlier quoted context omitted.

Yes, it's a cyclic trend in IT: Step 0. Well functioning and balanced company. Step 1. Why these engineers are so expensive? We can hire 'ten for one' in 'country A'. Step 2. Cut local IT budget twice, put goals to have *zero* local IT budget in 2 years. Outsource everything to 'country A'. Step 3. People are fired, everything is outsourced, operational knowledge accumulated over the last few years is lost. Step 4. W…

You cat bet it is: http://www.vanityfair.com/news/2015/11/airplane-maintenance-... FTA: >The airplanes that U.S. carriers send to Aeroman undergo what’s known in the industry as “heavy maintenance,” which often involves a complete teardown of the aircraft. Every plate and panel on the wings, tail, flaps, and rudder are unscrewed, and all the parts within—cables, brackets, bearings, and bolts—are removed for inspectio…

To be honest this article is not great

Maintenance facilities are usually certified by the local aviation authority

Aviation is also "regulated" by two extra entities: plane lessors and insurance companies. Both won't be happy if the maintenance done at these facilities is not correct

Re: British Airways: All flights cancelled amid IT crash

#84

By using IT outsourcing in India (Tata?), Poland, BA and its parent is revealing some important information: They are cutting corners to the point of risking airline operations. The question is, where else are they unnecessarily cutting corners? Are they cutting unnecessary corners on airplane maintenance? Other quality airlines have outsourced IT or part of their IT operations, but they are careful about choosing th…

Yes, it's a cyclic trend in IT: Step 0. Well functioning and balanced company. Step 1. Why these engineers are so expensive? We can hire 'ten for one' in 'country A'. Step 2. Cut local IT budget twice, put goals to have *zero* local IT budget in 2 years. Outsource everything to 'country A'. Step 3. People are fired, everything is outsourced, operational knowledge accumulated over the last few years is lost. Step 4. W…

Or, sometimes:

Step 5. We need to hire high quality local team that can take ownership over product. We are willing to pay a fortune. But we can't hire anyone local, because we did step 3 for too long or too often, and that knowledge is locally gone.

Re: British Airways: All flights cancelled amid IT crash

#85
post #70

Earlier quoted context omitted.

It seems that companies would rather buy "insurance" rather than spend money on actual security. They have accepted that they will eventually be hacked or have a really expensive outage, so now they want a cushion of money to pay for any penalties and lawsuits. I get the impression that for the most part, no one really believes in security, and doesn't understand that it's a process and not a product. They already tr…

Why aren't there Security Process Engineers (SPE)? I was recently waiting on a massively delayed flight and observed three instances where employees left the computer behind the check in desks unlocked. I'm sure these computers checked off all the requirements for having a firewall turned on, anti-malware software, auto-updates turned on, etc. But the front door was left wide open because the employees were forced to…

There are certainly this type of thing out there.

SSI or software security initiatives, when given greenlights based on buy in from governance can introduce secure processes.

But before this happens to any meaningful level, risk based anaysis should prove it is cost effective. Guess what those analysis say?

Re: British Airways: All flights cancelled amid IT crash

#86

In the tech-related (but now fully mainstream, unlike a few years ago) news these days, there are a number of recurring themes. 1. Massive security breaches affecting major corporations, governments, and so on. 2. Massive IT outages, affecting corporations, governments and so forth. It doesn't take a lot of incidents to mark them as 'massive' since things are strongly centralized in this world. Meanwhile, in the last…

Is there any evidence that IT outsourcing has made matters worse? Or is it only worse if the provider is located offshore?

Arguably, delegating IT operations to a proper IT company could improve security and reliability.

We use a low cost offshore IT provider and we haven't had any security or reliability issues so far (https://gsuite.google.com/)

Re: British Airways: All flights cancelled amid IT crash

#87

Earlier quoted context omitted.

Yes, it's a cyclic trend in IT: Step 0. Well functioning and balanced company. Step 1. Why these engineers are so expensive? We can hire 'ten for one' in 'country A'. Step 2. Cut local IT budget twice, put goals to have *zero* local IT budget in 2 years. Outsource everything to 'country A'. Step 3. People are fired, everything is outsourced, operational knowledge accumulated over the last few years is lost. Step 4. W…

> We can hire 'ten for one' in a country A. Rather: 'two for one'.

Why just two? The average salary in a western country is many times that in a third world country, and ten times is not that unusual.

Re: British Airways: All flights cancelled amid IT crash

#88

I have zero evidence, and am simply working through a though exercise, but it could be targeted? Maybe a group on behalf of a nation state is testing out its muscle. Or sending a warning. Maybe the UK did something recently a nation didn't like, and this is the new form of "diplomatic protest". Or sending a warning shot. I remember reading last year that the large Delta airlines outage was cyber terror related. It re…

> nation level ransomware? Ie not, "give us $300 bucks and you'll get your PC back", but "sign XYZ treaty and you get your country's water system back"?

The lessons from Ukraine to Trump is that, far better than something obvious like tuning off the power, a deniable attack on the political system is extremely effective.

There has been a "cyber war", the US lost, and it's not yet clear how the US political system will recover.

Re: British Airways: All flights cancelled amid IT crash

#89
post #82
post #65

Hopefully, this will be a wake-up call to the industry - government regulation in IT is needed.

The UK government (perhaps the relevant one in this case) does not have a stellar track record of figuring out how to make big IT systems and projects successful. This knee-jerk appeal to regulation is unconvincing to say the least.

A modified form of ITIL would do a lot of good for important sectors. Let me put it another way, if the industry won't regulate itself, then they will be regulated by force.

Re: British Airways: All flights cancelled amid IT crash

#90

Earlier quoted context omitted.

Land costs in the South East of England may be too high, but that really doesn't apply to the whole of the UK...

They are very high in most urban areas where you are likely to have a dev centre.

Waterside is absolutely able to accommodate a dev team.
Post reply on HN