Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Garmin services and production go down after ransomware attack

zdnet.com

Post reply on HN
Print view View original

161–170 of 232 posts

Re: Garmin services and production go down after ransomware attack

#161

Post by mackmgg »

DebtDeflation wrote: post #115

This is frustrating. I have a Garmin Fenix 6X Sapphire (that I absolutely love) and on seeing this headline I checked the Connect app on my phone and sure enough I cannot access any of my previous activities. You'd think that in this day and age of phones with 128GB+ storage that they'd be caching at least some of your historical data locally, but nope it's all in the cloud, which is currently inaccessible.

This only affects viewing the activities on Garmin Connect. You can view them on the watch just fine, and you can use Garmin BaseCamp on a computer to download the GPX files.

Re: Garmin services and production go down after ransomware attack

#162

Post by saagarjha »

petee wrote: post #158
guzik wrote: post #155

Yikes. Going through the comments it seems their products can still work offline? How about caching? Garmin is our direct competitor, but we wish them a quick recovery.

If there is one thing Garmin really needs, its competition. I'd love to hear who you work for, and I hope you gain some ground

From their profile, it looks like it's Aidlab.

Re: Garmin services and production go down after ransomware attack

#164

Post by aksss »

TheWindUpPirate wrote: post #21

I wonder what the root cause is? They've just tweeted that the outage is also affecting call centres and their ability to receive email. [0] I'm glad their stuff is designed with zero connectivity in mind. Just slightly irked that my history isn't cached on my phone. [0] - https://twitter.com/GarminUK/status/1286279863217926144

I struggle to imagine what non-segregated resource would be so central as to affect their customer-facing app platform, internal email (or maybe mail gateways), and call center.

Maybe DNS got hosed? I mean pretty impressive ransomware if it swept across the company that far and wide, crossing so many network boundaries and resource types so quickly.

Maybe accounts/control being held for ransom instead of storage encryption (what I usually think of as ransomware).

Re: Garmin services and production go down after ransomware attack

#165

Post by aksss »

My Garmin Connect app is now syncing with wearable and showing steps and other stats again. I briefly had an updated banner that said they were planning system maintenance from 7am on the 24th to some end time, and then it went back to the "down for maintenance" message within a three-minute span. Interesting. They may be staggering trying to bring some workarounds online.

Re: Garmin services and production go down after ransomware attack

#166

Post by mormegil »

mjsir911 wrote: post #86
exabrial wrote: post #6

Their products are designed to work offline. Despite the cloud being down I have full local functionality right now. (Though I can't see my history, surprised they don't cache that locally). Last year when I did a 9-day canoe trip with no cell phone reception, all of my Garmin gear worked flawlessly (wearables, navigation devices, and their offline map app). Can't say the same about my friends iWatches/fitbits or eve…

I was give a garmin vivofit 3 as a gift and was soured by the fact that I had to create an account and log in to set the time . I've been very slowly working on a fork of gadgetbridge[1] to support the vivofit 3 for a while now and can successfuly set the time with no account! 1: https://github.com/mjsir911/gadgetbridge

Exactly the same here, except I got Vívomove HR. My fork with WIP implementation for Garmin is at https://github.com/mormegil-cz/Gadgetbridge/tree/garmin-wip Basically everything (time, FIT data sync) is working except the primary thing I wanted (notifications) which seems to work fine, except it does nothing. (And the code is ugly and sometimes problematic.)

Re: Garmin services and production go down after ransomware attack

#167

Post by stevenwoo »

Lio wrote: post #99
paozac wrote: post #9

Earlier quoted context omitted.

Do they? Last Garmin product I had was a Vivosmart HR: an internet connection and a Garmin connect account was required to change basic settings such as the display orientation. And there was no way to disable syncing.

Depends on the product. Something like an Edge bike computer will be fine at least. Although I do wonder if my ride this morning actually happened because it's not on Strava... :P

In case you don’t know this, you can connect your garmin device to a pc and manually upload the .fit file (the device looks like a usb storage device to pc/Mac) from the device to strava

Re: Garmin services and production go down after ransomware attack

#168

Post by mormegil »

Molpot wrote: post #12

Has anybody tried to reverse engineer garmin's bluetooth protocols? I often want to buy one of their smartwatches but the idea of having to install proprietary software on my phone kind of puts me off. I'd love to write my own software but I don't have any experience doing bluetooth RE.

Yeah, they are complicated. Like, seven different protocols for different things. But it is workable. My WIP fork of Gadgetbridge (partially) supporting Garmin Vívomove HR is at https://github.com/mormegil-cz/Gadgetbridge/tree/garmin-wip

Re: Garmin services and production go down after ransomware attack

#169

Post by aksss »

francisofascii wrote: post #154
sn_master wrote: post #97

Earlier quoted context omitted.

Source? Do you work there? Do you know whats the ransomware used or how much they're demanding?

Total speculation, my guess is WastedLocker. It has been hitting all types of companies in the past few months. Have a friend who's company was hit recently. They were somehow were able to encrypt the backups.

My vote is something's being held for ransom like DNS or account access rather than traditional storage encryption. It's pretty impressive if storage encryption crossed so many network boundaries and affected so many diverse resource types - phones, chat, email, website, distributed app platform. What other central resource besides DNS would have such a broad impact?

Re: Garmin services and production go down after ransomware attack

#170

Post by sh-run »

christoph wrote: post #57
LeifCarrotson wrote: post #46

Earlier quoted context omitted.

I'd consider my Forerunner 220 almost completely un-crippled. I went for a run this morning, tracked it and got pace and distance information the whole time. If I look at my wrist, it tells me correctly that the time is currently 9:49 AM. If I unlock the device and scroll to the History tab, my run, and all previous runs since last September and their details are visible there. It acquires the GPS satellites the same…

I can't alter a watch face - i.e. alter the fields displayed. I'm not wanting to download a new face, just alter one already download and present in the app and on the watch, or alter any data fields around specific activities. I get syncing to any 3rd party service is clearly totally out unless I manually transfer the .fit file via USB and I understand why this would need their servers, although it would be good if…

I agree that the mobile app shouldn't be broken with the server down, but I've got a FR 935 and can alter my watch face and set alarms through the watch.

Watch Face

1. Hold down up/menu

2. Hit start

3. Select Watch face

4. Hit start

5. Select customize

Alarms

1. Hold down up/menu

2. Click down to select clock

3. Hit start

4. Hit start again to select alarm clock

5. Navigate down to add alarm

Post reply on HN