Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ransomware – Unauthorized access to Fujifilm servers

fujifilm.com

Post reply on HN
Print view View original

11–20 of 51 posts

Re: Ransomware – Unauthorized access to Fujifilm servers

#11

Post by londons_explore »

netr0ute wrote: post #5
neom wrote: post #4

Their cloud storage is down, and ironically their ransomware protection service AirGap. https://datastorage-na.fujifilm.com/stop-ransomware/

> Their cloud storage is down That's why I never trust "non-cloud" companies with cloud storage, because you never know if they suddenly don't want to do it anymore, or in this case get hacked because of incompetencies.

I wonder how many times ransomware has gotten into Google/Amazon's employees laptops?

Having 100k employees, most of whom have admin access to their own machines (cos developer) has got to make it almost impossible to stop it happening.

Re: Ransomware – Unauthorized access to Fujifilm servers

#12

Post by babelfish »

londons_explore wrote: post #11
netr0ute wrote: post #5

Earlier quoted context omitted.

> Their cloud storage is down That's why I never trust "non-cloud" companies with cloud storage, because you never know if they suddenly don't want to do it anymore, or in this case get hacked because of incompetencies.

I wonder how many times ransomware has gotten into Google/Amazon's employees laptops? Having 100k employees, most of whom have admin access to their own machines (cos developer) has got to make it almost impossible to stop it happening.

I have a friend who works at G that told me shortly after he started working there, he accidentally typed some portion of his password into another website, at which point his laptop immediately locked down and he was forced to change his password before doing anything else.

Re: Ransomware – Unauthorized access to Fujifilm servers

#13

Post by paxys »

londons_explore wrote: post #11
netr0ute wrote: post #5

Earlier quoted context omitted.

> Their cloud storage is down That's why I never trust "non-cloud" companies with cloud storage, because you never know if they suddenly don't want to do it anymore, or in this case get hacked because of incompetencies.

I wonder how many times ransomware has gotten into Google/Amazon's employees laptops? Having 100k employees, most of whom have admin access to their own machines (cos developer) has got to make it almost impossible to stop it happening.

If there's ransomware on an employees's laptop you simply throw it away and give them another one. And have them go through a lot of security training after.

Re: Ransomware – Unauthorized access to Fujifilm servers

#14

Post by paxys »

bouncycastle wrote: post #8
netr0ute wrote: post #5

Earlier quoted context omitted.

> Their cloud storage is down That's why I never trust "non-cloud" companies with cloud storage, because you never know if they suddenly don't want to do it anymore, or in this case get hacked because of incompetencies.

Funny, because I always think of Amazon is as a "non-cloud" company, especially when most think of it as a place to shop. Of course, I know it's not. Seriously though, fujifilm is a conglomerate and known for their pivots. If they did not reinvent themselves, the would have been joining Kodak.

This is actually somewhat true at all major cloud companies. Google, Microsoft and Amazon all have very limited usage of their own commercial cloud services among engineering teams.

Re: Ransomware – Unauthorized access to Fujifilm servers

#15

Post by sterlind »

paxys wrote: post #14
bouncycastle wrote: post #8

Earlier quoted context omitted.

Funny, because I always think of Amazon is as a "non-cloud" company, especially when most think of it as a place to shop. Of course, I know it's not. Seriously though, fujifilm is a conglomerate and known for their pivots. If they did not reinvent themselves, the would have been joining Kodak.

This is actually somewhat true at all major cloud companies. Google, Microsoft and Amazon all have very limited usage of their own commercial cloud services among engineering teams.

I'm not sure about Google, but at MS we absolutely use our own cloud heavily. sometimes there's big legacy stuff, but nowadays most of that has gone onto Azure under the hood. I've heard Amazon is much the same way.

the only exception I can really think of is infrastructure that you need to recover from disasters, which isn't on Azure for obvious bootstrapping reasons.

Re: Ransomware – Unauthorized access to Fujifilm servers

#17

Post by beermonster »

neom wrote: post #4

Their cloud storage is down, and ironically their ransomware protection service AirGap. https://datastorage-na.fujifilm.com/stop-ransomware/

Does anyone know the details of their AirGap service?

Taking services/networks offline is common during incident response management so it might be indicative of them taking appropriate action rather than them being knocked off-line.

Let’s hope their service lives up to the marketing.

Re: Ransomware – Unauthorized access to Fujifilm servers

#18

Post by beermonster »

netr0ute wrote: post #5
neom wrote: post #4

Their cloud storage is down, and ironically their ransomware protection service AirGap. https://datastorage-na.fujifilm.com/stop-ransomware/

> Their cloud storage is down That's why I never trust "non-cloud" companies with cloud storage, because you never know if they suddenly don't want to do it anymore, or in this case get hacked because of incompetencies.

Lots of folk (not solely non-technical) treat cloud sync as a backup - when often it’s not. Can’t comment on Fujitsi’s offering.

In any case it should only be one of the three copies of your data.

Anecdotally, photographers - especially professional ones , take backups quite seriously. I’ve often read good blogposts written by them on how to backup your images. And I believe the 3-2-1 rule originally came from a photographer Peter Krogh.

Re: Ransomware – Unauthorized access to Fujifilm servers

#19

Post by beermonster »

paxys wrote: post #13
londons_explore wrote: post #11

Earlier quoted context omitted.

I wonder how many times ransomware has gotten into Google/Amazon's employees laptops? Having 100k employees, most of whom have admin access to their own machines (cos developer) has got to make it almost impossible to stop it happening.

If there's ransomware on an employees's laptop you simply throw it away and give them another one. And have them go through a lot of security training after.

Assuming they were the weakness. It might be that patching velocity was the reason the laptop became infected. Where I work that is managed via patch management software not the end-user.

Re: Ransomware – Unauthorized access to Fujifilm servers

#20

Post by paxys »

sterlind wrote: post #15
paxys wrote: post #14

Earlier quoted context omitted.

This is actually somewhat true at all major cloud companies. Google, Microsoft and Amazon all have very limited usage of their own commercial cloud services among engineering teams.

I'm not sure about Google, but at MS we absolutely use our own cloud heavily. sometimes there's big legacy stuff, but nowadays most of that has gone onto Azure under the hood. I've heard Amazon is much the same way. the only exception I can really think of is infrastructure that you need to recover from disasters, which isn't on Azure for obvious bootstrapping reasons.

Until I was at Microsoft a few years ago there was always a struggle to get internal teams to use Azure. There were constant talks to get O365 and Bing (so, the bulk of internet-facing servers) on Azure, but nothing never materialized. I have heard Google is a lot worse in this regard.
Post reply on HN