How the hell would you let the faith of your entire enterprise data in the hand of Amazon? Offsite/offline backup are mandatory especially when you deal with this kind of data.
Code Spaces data and backups deleted by hackers
11–20 of 85 posts
Re: Code Spaces data and backups deleted by hackers
#12Leaving aside the obviously deficient sysadmin work here: the timeline of the story doesn't add up. I can only hope this explanation is not accurate.
You find notes in your AWS control panel saying you should contact some Hotmail address. OK. So the first thing you do is reach out to that address and take the time to communicate intricate extortion details? Only after that you think maybe it's a good idea to start changing passwords, and right then the other party takes action and deletes all the things?
If that's what actually happened then I'm afraid something like this was bound to happen sooner or later.
Re: Code Spaces data and backups deleted by hackers
#13Does anyone know of noteworthy projects that were hosted there?
Re: Code Spaces data and backups deleted by hackers
#14All I can say is this: If you can delete it with a single control panel, it doesn't count as an offsite back. Fire the devops
DevOps means different things to different people. most people use the term to mean 'a coder who can configure apache' this whole incident reeks of a lack of OpSec and general Ops knowledge. Lack of offsite backups is one thing, but if you're using cloud infrastructure you never place all eggs in one basket. your instances have to be disposable and reproducible, at the first hint of a break in my default action is to…
> your instances have to be disposable and reproducible, at the first hint of a break in my default action is to torch and rebuild.
Or rather shutdown, preserve, start replacements. IMHO your automation should be able to deal with the old preserved instances being left alone.
Re: Code Spaces data and backups deleted by hackers
#15They ran a code hosting service and they had no offsite backups?
Wow, just wow.
Re: Code Spaces data and backups deleted by hackers
#16From the Amazon RDS documentation:
When the backup retention changes to a non-zero value, the first backup occurs immediately. Changing the backup retention period to 0 turns off automatic backups for the DB instance, and deletes all existing automated backups for the instance.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overvi...
Re: Code Spaces data and backups deleted by hackers
#17Why is it possible to destroy an entire enterprise by compromising an Amazon account? Where the fuck is their 2FA? What about a cooling off period before committing changes like deleting all of your storage? Amazon's infrastructure seems to be built without essential safeguards.
Amazon has extremely tight security, including 2fa, fine-grained IAM permissions, instance security groups, VPC, and more.
The fact that Code Space's didn't bother to use them is their own problem, not a failing on Amazon's side.
Additionally, storing all of your backups with the same service as your production environment was outright moronic.
Re: Code Spaces data and backups deleted by hackers
#18All I can say is this: If you can delete it with a single control panel, it doesn't count as an offsite back. Fire the devops
[deleted]
Re: Code Spaces data and backups deleted by hackers
#19while I feel bad for thoer customers, I have no remorse for the creators. Stupid and mediocre managment of their code...not to mention...how does a code hosting service not understand the difference between a backup and an off-site backup? how could they delete an account and not notice (or bother to check) the other created accounts? No notification on account access creation? So mamy mediocre mistakes...
Re: Code Spaces data and backups deleted by hackers
#20Am I the only one feeling cheated when people post referral / tracking links?