Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

prm.ua

Post reply on HN
Print view View original

151–160 of 507 posts

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#151

Post by praptak »

thyristan wrote: post #59
praptak wrote: post #26

Not many companies explicitly prepare for the scenario where every single data storage unit in the company is effectively wiped and you have to redeploy from zero. If you never bootstrap from zero (nor simulate this) then your systems probably have cycles in their deployment dependencies. Your config pusher is deployed from Jenkins/Puppet/Ansible but 2 years ago someone made Jenkins dependent on the config pusher for…

Almost everything will have cycles in IT. People want and security requires some kind of SSO. Now SSO is a dependency for almost everything, including the administration of underlying systems that run SSO. Same for the network. Same for a lot of things. Bootstrapping from zero will never be easy and will always take some time. I don't think you can prepare your way out of this, short of preparing a fully redundant, f…

I agree that fully redundant & separate infrastructure is unrealistic. I'm also not saying you can be 100% prepared. My point is that you can improve your posture.

What you can do is to have a sandbox environment where you periodically do a full setup exercise from a prepper disk. Conceptually it's not that different from testing backup recovery (ok, most companies neglect this too, so maybe you have a point :) ).

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#153

Post by supertrope »

edoceo wrote: post #146
rimbo789 wrote: post #90

Earlier quoted context omitted.

Budgets - and lowering them - win every time. I do budgeting and forecasting for SaaS companies and this kind of work is always the first cut

Is there a recurring theme for why? There is huge risk exposure.

People round down small risk to zero risk. Meanwhile the cost to run a full DR drill is a certain and immediate cost to their budget.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#154

Post by fennecbutt »

trebligdivad wrote: post #88
frou_dh wrote: post #72

I wonder to what extent either side is worried about the firmware on the drones. Somehow getting tampered-with firmware onto the drones that your enemy is using seems like it would be valuable.

Yeh, it would seem in some ways more useful than shutting down the factory; if you gently made all the drones do something, like let them be remote controlled, or bomb the place they were launched from.

But once that happened a handful of times it would be corrected.

I suppose it could be used sparingly but Ukraine would have no way of knowing when to use it. Perhaps a Bluetooth or whatever else the drone has on board "keep away" beacon for vips.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#155

Post by fennecbutt »

wiseowise wrote: post #134
HenryBemis wrote: post #58

Earlier quoted context omitted.

Whoah.. -4.. Fun fact, I was internal auditor in a bank (I will not specify the year(s) for safety/privacy). We did the due diligence and ended up buying a Ukrainian bank. Part of the 'collections' was really to smash people's faces. Believe it or not. But sure.. you know best.

Guess whose influence and where it comes from?

Yup, I feel like Ukraine has been trying to break away from the society is a meat grinder culture of Russia for a while and the war has made if clear who's on what side locally.

My only qualm with them is their not so great support for gay people, but then during the war ofc the party line is now they love their gay soldiers. Would have been nice to see more action around that beforehand but I get it. Even other first world countries still have plenty of problems as a gay person, especially gay men.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#156

Post by braggerxyz »

crinkly wrote: post #23
lnsru wrote: post #2

Working for a company in Germany which is planing production 3 months in advance using printed Excel sheets. The migration of ERP system gone wrong and nobody knows how to fix it. Production management tries to hide this fact and does not talk to the engineering department. This will go for years, consultants will gather their fees for non functional system. Obviously IT infrastructure is not needed for manufacturing…

In the late-90s I worked for a manufacturing company in a firmware dev capacity. They did everything on paper still. They migrated successfully to an in-house built ERP system sitting on top of Oracle. Big celebration, everyone happy. Six months later someone drove a forklift through the wall of the machine room into the UPS which caught fire and destroyed three racks of kit including the Oracle node. Turns out no on…

Forklift-Proof ERP was not on my bingo card. Thanks for the laugh :D

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#157

Post by falcor84 »

orbital-decay wrote: post #148
ivan_gammel wrote: post #103

Earlier quoted context omitted.

The linked page is in English, but speaking of the option - residents of Russian Federation probably were not a target audience of Russian version of this website anyway. Contrary to some popular beliefs in Russia about language wars, many people still do speak Russian in Ukraine and media do publish articles in Russian.

>residents of Russian Federation probably were not a target audience of Russian version of this website anyway Deliberately blocking the supposed enemy from hearing you does strike me as irrational, though. The mere fact they're doing Russian censors' job should probably make them recheck if they got anything wrong in their decision process, just in case.

What makes you think that it's the Ukranians that are blocking Russian users from accessing it?

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#158

Post by entropyneur »

v5v3 wrote: post #12
oytis wrote: post #8

Earlier quoted context omitted.

It doesn't say anything about foreign intelligence services

It's reasonable to read it as implied

You are free to believe whatever you chose of course and state it here, but the sentence you cited does nothing to support your claim.

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#159

Post by sjs382 »

dotancohen wrote: post #129
hu3 wrote: post #102

Earlier quoted context omitted.

This is why documenting is so crucial. Even on a software architecture level. A few months from now, I'd love to have written down decisions for my current project: - Why did I decided to use Kysely over Drizzle, Knex, Prisma, TypeORM or other ORM/SQL tool? - How am I going to do migrations? - Why am I using one of Deno/Bun over sticking to nodejs? - Why did I structure the project as a directory per feature over con…

Every project I work on has a technical-decisions.org file. Also a daily-notes.org file with every failed experiment, test, install command, etc. The top level headings are dates. Technical decisions used to be in the daily-notes.org file, but keeping in a separate file makes it more accessible to LLMs. I actually started that practice before LLMs were in common use, I struggle to remember why.

> I struggle to remember why.

Should that "why" be in technical-decisions.org or daily-notes.org?

Re: Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer

#160

Post by feynmanalgo »

BrandoElFollito wrote: post #66

I run a small home lab, about 30 services One day I decided to change my main disk and used the opportunity to rebuild everything from scratch and from backups. I was up in about an hour. And then I spent a week fixing this and that, ah yes I changed that too and, crap, I cannot remember why this thingie is set up this way. And some more. This is a one-man lab, with simple services, all on docker. I also work in IT.…

> I helped to recover my nearby hospital as a volunteer when it was ransomwared.

How did they prevent threat actors presenting themselves as volunteers, were you vetted?

Post reply on HN