Live data from Hacker News

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

prm.ua

91–100 of 507 posts

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#91

I run a small home lab, about 30 services One day I decided to change my main disk and used the opportunity to rebuild everything from scratch and from backups. I was up in about an hour. And then I spent a week fixing this and that, ah yes I changed that too and, crap, I cannot remember why this thingie is set up this way. And some more. This is a one-man lab, with simple services, all on docker. I also work in IT.…

Modern IT practices don’t really contemplate disaster recovery. Even organisations with strict backup procedures seldom test recovery (most never at all). Everything is quickly strapped together due to teams being understaffed. Preparing infrastructure in a way such that it can easily be recreated is easily twice the effort as “just” setting it up the usual way.

Actually I think this is hard to properly implement. If you're a small shop, really setting up backups with redundancies, writing the documentation, and testing disaster recovery, that's so much more work than people anticipate, and it has implications on all areas of the business, not just IT. So usually it's hard to justify to management why you would put in all that work and slow down operations—which leads to everyone postponing it.

Either that bites you sooner or later, or you're lucky and grow; suddenly, you're a larger organisation, and there are way too many moving parts to start from scratch. So you do a half-hearted attempt of creating a backup strategy held together by duct-tape and hope, that kinda-sorta should work in the worst case, write some LLM-assisted documentation that nobody ever reads, and carry on. You're understaffed and overworked anyway, people are engaging in shadow IT, your actual responsibilities demand attention, so that's the best you can do.

And then you've grown even bigger, you're a reputable company now, and then the consultants and auditors and customers with certification requirements come in. So that's when you actually have to put in the work, and it's going to be a long, gruesome, exhausting, and expensive project. Given, of course, that nobody fucks up in the mean time.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#92

Earlier quoted context omitted.

In the late 90s, early 2000, the Danish department of defence decided that they needed a new procurement system, DeMars, built on SAP. I know a sergent that worked in procurement at the time, he made insanely large purchases of everything he was responsible for in the months leading up to the launch. It came to the point where he was pulled in for questioning, on the suspicion of fraud. He explained that he had no fa…

When HP converted to SAP, I think their production basically stopped, for six months, and they lost $400 million. Switching to a new system; even when it is for the better, is a painful, expensive process. The company that I worked for, did a successful transition to SAP, but it took about two years, and a lot of butthurt.

Switching to SAP ERP was already an in-joke level of well-known catastrophe in IT consulting circles 20 years ago. I’m glad to see nothing has changed in that respect.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#93
post #26

Not many companies explicitly prepare for the scenario where every single data storage unit in the company is effectively wiped and you have to redeploy from zero. If you never bootstrap from zero (nor simulate this) then your systems probably have cycles in their deployment dependencies. Your config pusher is deployed from Jenkins/Puppet/Ansible but 2 years ago someone made Jenkins dependent on the config pusher for…

Almost everything will have cycles in IT. People want and security requires some kind of SSO. Now SSO is a dependency for almost everything, including the administration of underlying systems that run SSO. Same for the network. Same for a lot of things. Bootstrapping from zero will never be easy and will always take some time. I don't think you can prepare your way out of this, short of preparing a fully redundant, f…

This is called "break-glass procedure" in enterprise IT (as in "break glass in case of emergency"), and often consists of independent, normally unused, admin accounts on key systems, access info for which is locked in some safe location, e.g. physical safe in a secure location.

Testing this reliably is difficult, though, and often these procedures and their documentation is outdated.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#94
post #68
post #49

Earlier quoted context omitted.

Which NATO countries would those be?

Czechia: https://en.wikipedia.org/wiki/2014_Vrb%C4%9Btice_ammunition_... Bulgaria: https://www.theguardian.com/world/2022/aug/01/arms-dealer-10... Poland: https://www.theguardian.com/world/2025/may/12/poland-to-clos... And UK. Plus a million cyberattacks against all sorts of infrastructure.

So then how come hasn't Article 5 been activated yet? Does that mean that said Article 5 is not even worth the piece of paper it has been written on?

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#95
post #2

Working for a company in Germany which is planing production 3 months in advance using printed Excel sheets. The migration of ERP system gone wrong and nobody knows how to fix it. Production management tries to hide this fact and does not talk to the engineering department. This will go for years, consultants will gather their fees for non functional system. Obviously IT infrastructure is not needed for manufacturing…

Without software, drones are useless. I suppose they can still assemble manually operated quadcopters if they know their inventory by heart, but they will be unable to produce more parts by 3D printing or drones capable of stable flight, autonomous operations, surveillance or any more advanced use cases. Even remote control is probably out of the picture.

They can continue to run the same thing they had before.

As an old software engineer, I can say with certainty that software engineering is a very, VERY wasteful practice. We could all be running Windows 3 right now, DOS, or some old Unix. The overhead involved in making actual advancements shows our slow progress as a species, and that we’re in a thread discussing a drone manufacturing facility being blown up in a war and how much that matters.

I think the natives had it right to live off of the land peacefully, and if anything to devote full time on science to determining what we do to help life survive in the universe.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#96
post #84
post #54

Earlier quoted context omitted.

They were never going to achieve a full takeover of Ukraine though. Large mass size and the people wouldn't accept them.

That's why RIA had an article announcing the successful taking of Ukraine ready and published it by mistake, right: https://web.archive.org/web/20220226051154/https://ria.ru/20... Right? Right? Putin totally only planned a multi-year stalemate where he lost his best troops on a dash to capture Kyiv. Totally!

Such familiar words there - "Putin took upon himself the historic responsibility to solve the Ukrainian question"

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#97

I run a small home lab, about 30 services One day I decided to change my main disk and used the opportunity to rebuild everything from scratch and from backups. I was up in about an hour. And then I spent a week fixing this and that, ah yes I changed that too and, crap, I cannot remember why this thingie is set up this way. And some more. This is a one-man lab, with simple services, all on docker. I also work in IT.…

Modern IT practices don’t really contemplate disaster recovery. Even organisations with strict backup procedures seldom test recovery (most never at all). Everything is quickly strapped together due to teams being understaffed. Preparing infrastructure in a way such that it can easily be recreated is easily twice the effort as “just” setting it up the usual way.

That's a choice that companies make. I've certainly worked at places which don't test DR, while at my current job we do annual DR runs, where we'll bring up a complete production ready environment from scratch to prove that the backups work, and the runbook for doing a restore actually works.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#98

I run a small home lab, about 30 services One day I decided to change my main disk and used the opportunity to rebuild everything from scratch and from backups. I was up in about an hour. And then I spent a week fixing this and that, ah yes I changed that too and, crap, I cannot remember why this thingie is set up this way. And some more. This is a one-man lab, with simple services, all on docker. I also work in IT.…

Modern IT practices don’t really contemplate disaster recovery. Even organisations with strict backup procedures seldom test recovery (most never at all). Everything is quickly strapped together due to teams being understaffed. Preparing infrastructure in a way such that it can easily be recreated is easily twice the effort as “just” setting it up the usual way.

If you’re doing it right, the DR process is basically the deployment process, and gets tested every time you do a deployment. We used chef, docker, stored snapshot images, and every deploy basically spun up a new infrastructure from scratch, and once it had passed the automated tests, the load balancers would switch to the new instance. DBs were created from binary snapshots which would then slave off the live DB to catch up (never more than an hour of diff), which also ensured we had a continuously tested DB backup process. The previous instance would get torn down after 8 hours, which was long enough to allow any straggling processes to finish and to have somewhere to roll back to if needed.

This all got stored in the cloud, but also locally in our office, and also written onto a DVD-R, all automatically, all verified each time.

Our absolute worst case scenario would be less than an hour of downtime, less than an hour of data loss.

Similarly our dev environments were a watered down version of the live environment, and so if they were somehow lost, they could be restored in the same manner - and again, frequently tested, as any merge into the preprod branch would trigger a new dev environment to automatically spin up with that codebase.

It takes up-front engineering effort to get in place, but it ended up saving our bacon twice, and made our entire pipeline much easier and faster to manage.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#99
post #34
post #27

Earlier quoted context omitted.

By going to war with Ukraine Russia (very foolishly in my view) exposed itself to a number of possible "indirect actions" which weren't possible before as "direct actions". Like for example Ukrainian drone hitting one of the Russian strategic missile defense radars. Ukraine can potentially hit other strategic assets not that involved in the current war - say nuclear submarines for example.

Russia and all non-usa allies have been the winner. China etc have seen the strategies used in sanctions. They know how to limit their impact now. It's also brought Russia/China/Iran/North Korea and wider Brics together. It's been a disaster for the west. The measure of success was Russia weakened and ideally Putin weakened or gone. And instead Russia have shrugged off the sanctions, and Putin is much stronger. And t…

Maybe if Ruzzia where the logic is always reversed

Putin caused

1 NATO to get 2 new members, gg Putin

2 NATO to invest more in weapons, gg Putin

3 killed or wounded 1 million Russians while the population was already in decline and I would bet the birth rate is decreasing because of the war

4 economy is fucked, Gazprom reported first time ever no proffits, interests rates increased

5 the idiots managed to hit again a civilian airplane, and i read recently Azerbajan and Armenia are cooperating to get rid of Ruzzians on their lands

6 Ruzzian weapon exports are fucked

7 Ruzzian army is a joke asx strength now, and the people are seen as low life orcs, killing, raping, torturing creatures

8 Kremlin is a joke, from 3 day operation to 3+ years, people flying from windows, politicians unable to admit a drone hit happened and claiming is debbry,

9 Putin pulled his secret weapons the donkeys after 3 years of keeping them hidden and failed to ado any significant progress

10 Ruzzia advances in Ukraine slower then a snail, check the numbers. and there are more than 1000 Ruz casualties for square km

11 I can see this Zeds complaining about the West decadence while using iPHone, driving German cars and wearing expensive wtches (even Putin can't stand to put his ass on a Ruzzian car)

How is Ruzzia stronger? The only way I could think a Zed would claim this is something like "Zed eats excrements daily for an year and after barely surviving this he claims he is stronger because someone in the West would die if he eat so much excrements, the Zed not realizing that the solution is to execute the tzar and stop eating excrements.

Any Russian (not Ruzzian) can be honest and admit that this is not going according to the plan, Putin tried to repeat the Crimean invasion, his KGB friends told him that Ukrainians will receive the Zeds with flowers , the informations were wrong and Putin seems to be incapable to stop the disaster and keep his throne so he is willing to sacrifice the people and the empire just to keep is throne.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#100

Earlier quoted context omitted.

I think the point being made is that Western agencies (5-eyes) would give Ukranian intelligence the button to push (indirect action) and not push it themselves (direct action).

Why would that be the case? Ukraine has a very large IT sector and they have a lot of good IT security specialists. To be honest, a lot of cybercriminals have been from Ukraine. So I don't see why it would be the case that Ukraine could not have done this by themselves. They have done previous attacks by themselves. I don't see why that would be the case. It would kind of be like saying, "Oh, if Russia does a cyberat…

It's the usual westerner superiority speaking. When Ukraine wins something it's always due to NATO training, US weapons and all that. When Ukraine starts losing ground it's poor soviet-era training, wrong kind of tactics and decision making on Ukraine.
Post reply on HN