Live data from Hacker News

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

prm.ua

141–150 of 507 posts

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#141
post #137

Earlier quoted context omitted.

It is irrelevant to my interpretation of the aforementioned parent comment. The point is that US made Ukraine do something that the US wanted to do but did not do because were it the US, then it would have had repercussions on US, so they made Ukraine do their dirty work.

Curious use of "made" here when it's something that Ukraine would have very much wanted to do, this cyberattack.

Both benefit'd, then.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#142

[flagged]

> It’s a proxy war fought by the US and it‘s vassals (aka allies) and Russia. That’s the spirit, comrade. Remember! When it’s decadent West/NATO, they’re vassals. When it is glorious BRICS, they’re allies. Don’t mix them up! Good luck!

[flagged]

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#143
post #102

Earlier quoted context omitted.

This is why documenting is so crucial. Even on a software architecture level. A few months from now, I'd love to have written down decisions for my current project: - Why did I decided to use Kysely over Drizzle, Knex, Prisma, TypeORM or other ORM/SQL tool? - How am I going to do migrations? - Why am I using one of Deno/Bun over sticking to nodejs? - Why did I structure the project as a directory per feature over con…

We just recently started using ADRs (Architectural Decision Records). They are deliberately stored (in markdown) in the same repository as the source code for our SaaS business lives. If we can recover the source, chances are high that we can also recover the "why's". If we cannot do that, we are screwed anyways.

This. I encouraged my team to use a templated (standardized) ADR for any big decisions that don’t have an obvious answer or complete consensus and it had reduced the second guessing and relitigation of decisions to nearly zero. It also gave is a good snapshot of where we were when we made that call so historic decisions weren’t disparaged.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#144
post #71
post #26

Not many companies explicitly prepare for the scenario where every single data storage unit in the company is effectively wiped and you have to redeploy from zero. If you never bootstrap from zero (nor simulate this) then your systems probably have cycles in their deployment dependencies. Your config pusher is deployed from Jenkins/Puppet/Ansible but 2 years ago someone made Jenkins dependent on the config pusher for…

So how could a company handle this? Can they bootstrap from printed documentation or is that assumed to be wiped as well?

It's a model of a realistic scenario. Hackers (like in the article), long running ransomware that managed to corrupt lots of data, maybe a natural disaster. So by "wiping all data storage units" I meant the dynamic ones used in production. You can assume a static backup exists and contains a sensible set of sources and binaries, although obviously creating such a backup is part of the recovery plan.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#146

Earlier quoted context omitted.

> Modern IT practices don’t really contemplate disaster recovery. Even organisations with strict backup procedures seldom test recovery (most never at all). I think this is an outdated view. In modern enterprises DR is often one of the most crucial (and difficult) steps in building the whole infra. You select what is crucial for you, you allocate the budget, you test it, and you plan the date of the next test. Howeve…

Budgets - and lowering them - win every time. I do budgeting and forecasting for SaaS companies and this kind of work is always the first cut

Is there a recurring theme for why? There is huge risk exposure.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#147

While this is a move that will hinder production for a while I'd say maybe they should have been more creative They should have checked the source codes and added some changes to make drones unpredictably unreliable "Oh this totally innocent code change? Oh look it makes the gps act weird if longitude is between a certain range how weird"

Obviously if there was opportunity for a supply chain attack like that they would have done it in addition to wrecking the IT infrastructure. Regardless, I imagine this will impact day to day drone operation as the Russians might re-flash the firmware to a known good version whether there is a backdoor or not

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#148
post #48

That's a very odd website. Blocked by the Russian government so you get a TLS error, once you get past that, you get the Cloudflare "you are blocked" page, and then you use a VPN and... get the option to read this article in Russian.

The linked page is in English, but speaking of the option - residents of Russian Federation probably were not a target audience of Russian version of this website anyway. Contrary to some popular beliefs in Russia about language wars, many people still do speak Russian in Ukraine and media do publish articles in Russian.

>residents of Russian Federation probably were not a target audience of Russian version of this website anyway

Deliberately blocking the supposed enemy from hearing you does strike me as irrational, though. The mere fact they're doing Russian censors' job should probably make them recheck if they got anything wrong in their decision process, just in case.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#149

I run a small home lab, about 30 services One day I decided to change my main disk and used the opportunity to rebuild everything from scratch and from backups. I was up in about an hour. And then I spent a week fixing this and that, ah yes I changed that too and, crap, I cannot remember why this thingie is set up this way. And some more. This is a one-man lab, with simple services, all on docker. I also work in IT.…

On the other hand, I’ve worked in places where the total destruction of IT (so as to start again from a clean slate) was within the Overton window of options for how to transform the business.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#150
post #2

Working for a company in Germany which is planing production 3 months in advance using printed Excel sheets. The migration of ERP system gone wrong and nobody knows how to fix it. Production management tries to hide this fact and does not talk to the engineering department. This will go for years, consultants will gather their fees for non functional system. Obviously IT infrastructure is not needed for manufacturing…

Excel has the benefit of being understandable and fixable by a lot of regular office workers. It's a bit surprising that we don't have that feature as a requirement for most IT infrastructure. It would make it so much more usable.

I know a manufacturing plant that used an Excel spreadsheet to do all its production planning. There was only one person who understood the spreadsheet and could modify it, a consultant who made more than the plant manager.

"Understandable and fixable" depends more on the complexity of the application rather than the fact it's in Excel.

Post reply on HN