Live data from Hacker News

Irish health service hit by cyber attack

bbc.co.uk

21–30 of 156 posts

Re: Irish health service hit by cyber attack

#21
A lot of these articles don't actually mention specifically how the systems were compromised.

Was it a malicious email attachment that propagated through unsecured networks or outdated OS versions? And what data was encrypted? Are we talking regular excel files or actual databases?

It would be interesting to have some more detail or case studies so others could know how to fortify infection points and limit the blast radius of their own systems.

Re: Irish health service hit by cyber attack

#24
post #6
post #2

Ransomware: Another great "feature" of difficult to trace digital currencies.

Ransomware: Another great "feature" of non-backdoored encryption. See how silly you sound?

that's malware, not new.

the ransom part, at the scale possible with cryptocurrency, is new.

those who sound "silly" are the ones elaborately pretending that this formerly obscure class of electronic extortion didn't suddenly explode into an epidemic with the concomitant rise of cryptocurrency.

Re: Irish health service hit by cyber attack

#25
post #2

Ransomware: Another great "feature" of difficult to trace digital currencies.

Said the medieval King: Ransom: Another great "feature" of difficult-to-trace personal gold coinage What you're actually saying is: Bad thing: Another great "feature" of any kind of positive development in personal sovereignty Or Bad thing: Another great "feature" of any kind of progress --- Progress comes with pitfalls. Sharp knives prepare food and also kill people. You argument effectively reduces to: never innova…

Your argument reduces to: "progress" is always good, even if it's bad.

I think we're perfectly allowed to discuss whether we think a particular kind of change is a good or bad thing.

Re: Irish health service hit by cyber attack

#26
post #19

You'd have to think that sooner or later they are going to get into one of the big cloud providers and cause havoc.

(Usually) - Those cloud providers know what they're doing though and de-couple things as much as possible, reducing and entire system compromise. It's their bread and butter, I would much prefer them managing the systems than the HSE.

But they still make mistakes (ask me how I got into Google /rpcz pages by shodan dorking and slightly mangling an HTTP header...). And just a few of these mistakes strewn together can have a massive blast radius if exploited by a motivated entity.

That, and all the high security cloud hosting in the world will not help the most commonly exploited security issues: unpatched wordpress plugins, world readable storage buckets, poorly secured privileged accounts, ransomware, phishing... A shoddily managed on-prem enteprise IT infra moved into the cloud will be just this: a poorly managed AWS infra, just as exploitable as before, but now also 10x as expensive to run.

Re: Irish health service hit by cyber attack

#27
post #2

Ransomware: Another great "feature" of difficult to trace digital currencies.

Said the medieval King: Ransom: Another great "feature" of difficult-to-trace personal gold coinage What you're actually saying is: Bad thing: Another great "feature" of any kind of positive development in personal sovereignty Or Bad thing: Another great "feature" of any kind of progress --- Progress comes with pitfalls. Sharp knives prepare food and also kill people. You argument effectively reduces to: never innova…

> You argument effectively reduces to: never innovate.

You chose to reduce it to that. There is no need to reduce every argument to its black and white extreme, although that is the easiest interpretation.

Bitcoin in particular requires truly ridiculous amounts of compute and has made hacking a far more profitable enterprise than before.

There are already digital currencies tackling the first problem, the 2nd could potentially also be solved.

So a more charitable interpretation might be, more innovation is needed to get digital currencies right.

Re: Irish health service hit by cyber attack

#28
post #6

Earlier quoted context omitted.

Ransomware: Another great "feature" of non-backdoored encryption. See how silly you sound?

that's malware, not new. the ransom part, at the scale possible with cryptocurrency, is new. those who sound "silly" are the ones elaborately pretending that this formerly obscure class of electronic extortion didn't suddenly explode into an epidemic with the concomitant rise of cryptocurrency.

true, though arguably it's a good thing. In the sense that it moves more of the costs of malware to the organisations that are meant to be securing the data. Previously, these costs were more borne by customers/clients/etc, and thus not taken as seriously - abstract costs and externalities.

Putting a clear number of the cost of poor cybersecurity should push more organisations to actually do something about it.

Re: Irish health service hit by cyber attack

#29
post #7

Earlier quoted context omitted.

It’s just business. Don’t hate the player, hate the game.

and this is one of the most backwarded response one can give in my opinion. "Don't hate the player, hate the game" doesn't justify the player's actions. This is not a video game. I really hate the fact that people will do anything under the name of business. It's more like we're moving towards uncivilized in that regard.

I don't think 'the game' refers to video games here.

Re: Irish health service hit by cyber attack

#30
post #25

Earlier quoted context omitted.

Said the medieval King: Ransom: Another great "feature" of difficult-to-trace personal gold coinage What you're actually saying is: Bad thing: Another great "feature" of any kind of positive development in personal sovereignty Or Bad thing: Another great "feature" of any kind of progress --- Progress comes with pitfalls. Sharp knives prepare food and also kill people. You argument effectively reduces to: never innova…

Your argument reduces to: "progress" is always good, even if it's bad. I think we're perfectly allowed to discuss whether we think a particular kind of change is a good or bad thing.

I'm not making an argument "for progress" at all. I actually 100% agree that we are allowed to, and should, discuss the ramifications of any kind of change.

My point is only that the original comment didn't attempt make any argument, other than the reduced one I outlined.

Post reply on HN