What's wrong with an old fashioned paper registry then?
I am pretty sure they have that too.
Hacker wipes Romania's land registry database
31–40 of 440 posts
Re: Hacker wipes Romania's land registry database
#32[flagged]
Re: Hacker wipes Romania's land registry database
#33What's wrong with an old fashioned paper registry then?
fires? floods? documents getting lost/misplaced/stolen/destroyed?
Re: Hacker wipes Romania's land registry database
#34Re: Hacker wipes Romania's land registry database
#35> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…
One more reason to to define the whole infrastructure in code and have offline backups. Recovering could be measured in hours.
Only if you routinely test it, and if that kind of access to the offline backup is low friction enough to be doing that monthly, it might not be enough of a redundancy.
Re: Hacker wipes Romania's land registry database
#36> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…
I'd bet money the offline copy is far from up-to-date, given the state of the network. It still has potential to be mayhem
Re: Hacker wipes Romania's land registry database
#37Romanian friends have told me that this is really due to corruption.
Specifically:
- government gives IT/data contracts to cronies
- cronies don't actually do any real security work to protect the data
- things like this happen
Re: Hacker wipes Romania's land registry database
#38An update from the land registry (the truthfulness of this remains to be seen depending on how fast this comes back online):
ANCPI announced that it had begun migrating its applications to Romania’s Government Cloud. The operation is being coordinated by the Special Telecommunications Service (STS) and is expected to be completed on Wednesday, July 22.
After the migration, authorized institutions will inspect the applications and data and prepare a report on the condition of the systems and any additional measures required. Based on that report, ANCPI will announce an estimated date for restoring its applications. Services will be brought back online gradually, according to operational priorities.
ANCPI says it is rebuilding its database from backup copies stored in several locations. The agency rejected reports suggesting that it did not have sufficient backups, explaining that the use of multiple storage locations provides redundancy and allows data to be restored after cybersecurity incidents.
According to ANCPI, affected systems must remain isolated until every identified vulnerability has been addressed. Although shutting down the services has caused temporary inconvenience, the agency says the measure was necessary to protect the data and ensure that operations restart safely and reliably.
The restoration of the IT infrastructure is described as a complex process being conducted in cooperation with the relevant authorities. ANCPI has also confirmed that a criminal investigation is underway, but no official conclusions can yet be released.
The agency warned that claims circulating publicly about the alleged consequences of the attack are not based on official information and do not reflect the current state of the investigation.
Re: Hacker wipes Romania's land registry database
#39Earlier quoted context omitted.
Do you know that this system was making fundamental security faux pas or are you assuming the reductive argument where determined enough hackers couldn’t break any system with built and maintained by diligent engineers?
Romanian here. There really were admin accounts with the password Passw0rd, created so that some incompetent political apointees could browse the data.
Gee, I didn't know Moscul is helping the Romanian government too! :-)
Re: Hacker wipes Romania's land registry database
#40What's wrong with an old fashioned paper registry then?
fires? floods? documents getting lost/misplaced/stolen/destroyed?
Seems to be rather sturdy in my experience. Would we even be able to read an electronic record after 100 or 200 years of storage? Old piece of paper is quite accessible.