271–280 of 435 posts
Earlier quoted context omitted.
Probably via their smart phones
Is it common to have a list of every employee's mobile phone? I would guess a lot of firms just have informal lists of phone numbers held by managers and colleagues. Plus if there was a list, wouldn't it be on a computer that's currently off?
Did these ships are also oil tanker ?
The little boat tipped over
FYI to Sysadmins: Paying the ransom at this point will be a waste of money, as the contact e-mail address has been blocked. https://posteo.de/blog/info-zur-ransomware-petrwrappetya-bet... (German) https://posteo.de/en/blog/info-on-the-petrwrappetya-ransomwa... (English)
Earlier quoted context omitted.
> The only ones I know who are still using cash are drug dealers I was about to say "that's not true, the pot stores are cash only too", before realizing that from the perspective of the Feds that's the same thing. So I guess my real answer is non-business transactions, like buying things on craigslist, or paying my cat sitter.
> like buying things on craigslist, or paying my cat sitter In my country you send money to other people with an app using their telephone number. It's developed as a joint venture between all banks.
Earlier quoted context omitted.
"0-day" does not mean without human intervention. That just means "previously undisclosed".
I understand that. Which is why I said "usually". Typically when we see news using the term 0-day it's because there was no human element needed in the infection of machines. Thinking back in recent memory (17~ years) I can't remember a time when 0-day was used when it didn't mean autonomous infection. Although. I fully understand that the term means that it's a previously unknown issue. Which is why I chose my words…
The reason human intervention is generally required now is because Windows has been hardened enough that some idiot user has to click a button to bypass the built-in basic protection. There's still a possibility of a "0-day" exploit remote-owning a machine, though these sorts of exploits are a lot harder to craft due to that attack surface being exposed to more security scrutiny.
FYI to Sysadmins: Paying the ransom at this point will be a waste of money, as the contact e-mail address has been blocked. https://posteo.de/blog/info-zur-ransomware-petrwrappetya-bet... (German) https://posteo.de/en/blog/info-on-the-petrwrappetya-ransomwa... (English)
It's not easy (I presume) to create such software. So why do they rely on some random e-mail provider? They could have done it so that computers unlock automatically after the address receives the payment. It's not that hard, the software could use multiple ways to get the private key (DNS, IRC, twitter, DHT) and it would be really hard to shut down.
Earlier quoted context omitted.
> like buying things on craigslist, or paying my cat sitter In my country you send money to other people with an app using their telephone number. It's developed as a joint venture between all banks.
ISTM that's a group that already have more than enough power to screw us over... Has this app been audited?
Maersk is down. Their main site says: Maersk IT systems are down We can confirm that Maersk IT systems are down across multiple sites and business units due to a cyber attack. We continue to assess the situation. The safety of our employees, our operations and customer's business is our top priority. We will update when we have more information.[1] Maersk is the largest shipping company in the world. 600 ships, with…
Great. Maybe we can finally put a price on lack of security protocol.