US companies hit by 'colossal' cyber-attack • Hacker News Board

Re: US companies hit by 'colossal' cyber-attack

#161

Post by hn_throwaway_99 » Sat, Jul 03, 2021, 5:46 AM UTC

cyberpolygon123 wrote: post #143

It's amazing that the World Economic Forum was able to predict a global pandemic in 2019 with Event 201 [1] and widespread cyber attacks in 2021 with Cyber Polygon [2]. Their timing for conducting these trainings is impeccable. We'll probably need Internet Passports, with malware scan certificates, to get online safely. Hope you're not an anti-scanner (it's totally secure). Evil Russian hackers will be a convenient s…

Your post basically highlights everything I hate about baseless conspiracy theories.

1. Bring up some examples of people who had a modicum of foresight to see that things like pandemics and cyber attacks would be highly likely in the near future and then cast aspersions to imply that they're the actual shadowy cabal that caused the whole thing. I mean, many people have been warning about pandemics for decades - with exploding international travel and increasing contact between packed-to-the-gills dense cities and wild animals it's pretty reasonable to assume pandemics would be more likely. And when those people are finally (sadly) proven correct, the lesson isn't "Hmm, what could have we done differently?", instead people like you blame the messenger. And you think it's some kind of uncanny coincidence that someone would predict widespread cyber attacks in 2021? Ooooh, because that was so hard to predict. Spare me.

2. You then try to tie this all together with some lame puns ("Hope you're not anti-scanner") to again cast aspersions on people who are actually doing something to fix the problem.

Lame on every level.

Re: US companies hit by 'colossal' cyber-attack

#162

Post by adamisom » Sat, Jul 03, 2021, 5:48 AM UTC

cyberpolygon123 wrote: post #143

It's amazing that the World Economic Forum was able to predict a global pandemic in 2019 with Event 201 [1] and widespread cyber attacks in 2021 with Cyber Polygon [2]. Their timing for conducting these trainings is impeccable. We'll probably need Internet Passports, with malware scan certificates, to get online safely. Hope you're not an anti-scanner (it's totally secure). Evil Russian hackers will be a convenient s…

You spun a lot out of uninteresting fact that an institution had trainings for two almost boringly-mundane civilization threats. Next you’ll breathlessly tell me how crazy it is that they have a 2022 event centered around climate change.

Re: US companies hit by 'colossal' cyber-attack

#163

Post by IAmGraydon » Sat, Jul 03, 2021, 5:49 AM UTC

lettergram wrote: post #158

cyberpolygon123 wrote: post #143

It's amazing that the World Economic Forum was able to predict a global pandemic in 2019 with Event 201 [1] and widespread cyber attacks in 2021 with Cyber Polygon [2]. Their timing for conducting these trainings is impeccable. We'll probably need Internet Passports, with malware scan certificates, to get online safely. Hope you're not an anti-scanner (it's totally secure). Evil Russian hackers will be a convenient s…

[flagged]

It's truly sad that this kind of rhetoric has made its way on to HN. What are you even talking about? Numbers to purchase food? Rounding up of people? Get a grip. We had a pandemic, like the countless others through history, and now we, the human race, are trying to fix it. You and your delusions are what stand in the way of that.

Re: US companies hit by 'colossal' cyber-attack

#164

Post by dehrmann » Sat, Jul 03, 2021, 5:50 AM UTC

cyanydeez wrote: post #18

user3939382 wrote: post #16

These digital networks and devices have become so complex we can’t reason about them, or in any case can’t easily reason about them given the resources available to most of the organizations running them. However, from what I’ve seen, most of these attacks are successful because these organizations are simply neglecting best practices (e.g. patch management, whitelisting, security awareness training).

like everything else in america, #1 priority is fèeding ceo salary and shareholder value. everything in corporate america is derived from the growing wealth inequality and these shake downs are precisely targetting the glut. soon enough, itll still be cheaper to have a bribe fund, just like tax evasion lawyers, lobbiests and the rest of the feeder classes than a holisitic defense.

These particular decisions are driven more by compliance and CYA. It only feeds into executive compensation as executives avoiding getting fired. Even if you're the executive who approved this integration, you'll just say "I chose a known vendor with a respectable client list."

Re: US companies hit by 'colossal' cyber-attack

#165

Post by jart » Sat, Jul 03, 2021, 5:51 AM UTC

OpieCunningham wrote: post #108

genmud wrote: post #68

After the Equifax breach, everyone learned that until there are actual repercussions for cyber attacks (like fines and people going to jail for negligence), if you can weather the storm, over the course of a year or two, there is effectively zero impact to your bottom line. You can also see this in the Solarwinds stock price. Year over year, they are down a hair under 4 percent... After being directly responsible for…

“After the Equifax breach, everyone learned that until there are actual repercussions for cyber attacks (like fines and people going to jail for negligence), if you can weather the storm, over the course of a year or two, there is effectively zero impact to your bottom line.” It’s even worse than just weathering a storm. Lax security has been incentivized. The Equifax CEO, Richard Smith, stepped down shortly after th…

It's worse than PII leaks and CEOs stepping down. Lax security has become scary. The U.S. Nuclear Weapons Agency was breached shortly after SolarWinds. Let's also not forget about OPM.

Re: US companies hit by 'colossal' cyber-attack

#166

Post by dehrmann » Sat, Jul 03, 2021, 5:53 AM UTC

u678u wrote: post #152

I kinda feel at this stage we should go back to air gapped intranets and working from the office again. SAAS just isn't worth it, and the other things like stack overflow you can do from your phone.

SaaS offerings that are in a browser tend to be pretty safe. I'd be more concerned with data theft than my network being compromised.

Re: US companies hit by 'colossal' cyber-attack

#167

Post by jart » Sat, Jul 03, 2021, 5:55 AM UTC

ChuckMcM wrote: post #109

hn_throwaway_99 wrote: post #14

Honestly, I think this should be the death knell of these "remote monitoring and management" tools that have extreme low-level access to networks and systems, but just like the SolarWinds attack, it feels like these are run by companies with extremely poor security culture. I mean, I'd be willing to trust security to Microsoft or Apple (I mean, at some level, you've got to trust the OS). But giving the keys to the ca…

One could hope but I doubt it. CFO's gonna CFO and it's "cheaper" to outsource IT. I had one of these vendors really pushing me to "take a call" or "let them show me how they could cut costs". It was ALL about the costs. And I eventually called the CEO and said we would consider it if the company would take out a $100M bond that we could call on to repair any damage that occurred as a result of their managing our IT…

I keep reading over and over again indignant comments about "cost centers" on Hacker News and I think it's not a good term to use because I looked up the definitions and the only logical consensus I could find is that everything which isn't shareholder profit is a cost center. It's just rhetoric.

Re: US companies hit by 'colossal' cyber-attack

#168

Post by IAmGraydon » Sat, Jul 03, 2021, 5:55 AM UTC

cyberpolygon123 wrote: post #143

It's amazing that the World Economic Forum was able to predict a global pandemic in 2019 with Event 201 [1] and widespread cyber attacks in 2021 with Cyber Polygon [2]. Their timing for conducting these trainings is impeccable. We'll probably need Internet Passports, with malware scan certificates, to get online safely. Hope you're not an anti-scanner (it's totally secure). Evil Russian hackers will be a convenient s…

I love how you weirdos can believe this kind of delusion and don't even consider the obvious. Like the fact that events like these happen all the time. Or like the fact that a conspiracy involving tens of thousands of people across the globe is literally impossible. You are willing to ignore common sense, which means that you want this conspiracy to be true very badly. Why do you think that is?

Re: US companies hit by 'colossal' cyber-attack

#169

Post by dehrmann » Sat, Jul 03, 2021, 5:57 AM UTC

eidelweissflow wrote: post #138

“ At a summit in Geneva last month, US President Joe Biden said he told Russian President Vladimir Putin he had a responsibility to rein in such cyber-attacks.” I don’t understand how Putin can stop these attacks unless he is personally responsible for them. Imagine someone in the US hacking systems in Russia or China. How in the hell Biden would know who did that and stop them? The naivety of US government is just a…

If we, the west, let Russia take Crimea and China take Hong Kong with minimal fuss, I don't see why a few cyber attacks would get more attention.

Re: US companies hit by 'colossal' cyber-attack

#170

Post by Vaderv » Sat, Jul 03, 2021, 5:58 AM UTC

hn_throwaway_99 wrote: post #14

Honestly, I think this should be the death knell of these "remote monitoring and management" tools that have extreme low-level access to networks and systems, but just like the SolarWinds attack, it feels like these are run by companies with extremely poor security culture. I mean, I'd be willing to trust security to Microsoft or Apple (I mean, at some level, you've got to trust the OS). But giving the keys to the ca…

Thank you M$FT