371–380 of 440 posts
Earlier quoted context omitted.
Same thing is rampant in other Eastern European countries as well. Tips on how to address this for those of us that are publicly minded?
Use EU funds to build it then tip the EPPO when they defraud the funds?
> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…
Earlier quoted context omitted.
As a Romanian I can tell you that most of the corruption happens through "dedicated contracts", or outright syphoning. In this case I expect an underpaid employee, and at most an incompetent nephew of someone. They had no reason to have an .authorized_keys file in the webroot of the website, and yet they did. If you want to know what "dedicated contracts" look like in practice they are overly specific requirements th…
If it is any consolation, this kind of corruption exists in many countries. I don’t know how to fix this, but corruption always finds creative ways. Here is one I learned recently - govt started issuing birth certificates online. Hopefully Less corruption, right? Officials made deliberate spelling mistakes in names etc, because you have to go in person for corrections. In person means bribe, which means back to same…
> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…
Romania is not very digitalized, and it still has a lot of paper bureaucracy. Even if the digital records were completely lost, they still have the paper ones. > being unable to prove land ownership People know who owns what, there are also paper contracts of ownership which are more authoritative than the digital records.
Earlier quoted context omitted.
Any guidelines on how to back up such that the attacker cannot reach (when the hacker otherwise had some valid credentials)?
This is how we implemented this at our company: - We have 2 sources of data that we must backup to continue existing as a business; our postgres and binary files in S3. Everything else is derivable (elasticsearch, so on). - For postgres, we use barman. With the help of opus/fable, you can get a streaming replication backup working in no time. We have one into another server in the same datacenter (we use baremetal) a…
The worst case is the company itself denying you access. More likely to happen with Google.
Earlier quoted context omitted.
I suppose the idea could be that you have several different institutions holding the same data, which they know is valid because of the Blockchain.
No. Blockchain is made for managing transactions between untrusted parties. In case with a land, there is an authority managing the registry, so a standard relational DB (with optional digital signatures) is the bets option. Why someone wants to use a tool, not good for a specific purpose, for that exact purpose?
Earlier quoted context omitted.
I'd say form an IT firm and bid on government contracts and do honest work, but we all know how that goes in reality. Honest workers don't get the contracts. You can still try, though.
I'm sure it's obvious to anyone living in a corrupt/oppressive regime, but in case it's not obvious to everyone. Corruption and oppression are signaling and coordination problems. The illegitimate sovereign is exploiting informational assymmetry: they know your neighbors are just as angry as you, they know it because all the walls have ears. They need to prevent you and your neighbors all knowing it at the same time.…
Earlier quoted context omitted.
Any guidelines on how to back up such that the attacker cannot reach (when the hacker otherwise had some valid credentials)?
This is how we implemented this at our company: - We have 2 sources of data that we must backup to continue existing as a business; our postgres and binary files in S3. Everything else is derivable (elasticsearch, so on). - For postgres, we use barman. With the help of opus/fable, you can get a streaming replication backup working in no time. We have one into another server in the same datacenter (we use baremetal) a…
Security firm KELA... has doxxed the hacker as Zakaria Mahdjoub, an individual from Oran, Algeria. If I was an evil hacker, I would only hack countries my country hated or did not have extradition agreements with. Like the Russian hackers do. Algeria has a extradition treaty with Romania: https://periodicos.processus.com.br/index.php/egjf/article/v...
Or just have Opsec.
Earlier quoted context omitted.
Pretty sure fire is a risk to servers as well.
Servers make it easier to keep & maintain duplicate data in separate locations, which’ll be unlikely to be affected by the same fire.