Live data from Hacker News

Fire destroys S. Korean government's cloud storage system, no backups available

koreajoongangdaily.joins.com

381–390 of 987 posts

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#381
post #350

Earlier quoted context omitted.

Witness A said, “It appears that the fire started when a spark flew during the process of replacing the uninterruptible power supply,” and added, “Firefighters are currently out there putting out the fire. I hope that this does not lead to any disruption to the national intelligence network, including the government’s 24 channel.”[1] [1] https://mbiz.heraldcorp.com/article/10584693

How large is this UPS that a fire can bring down all 96 servers? This story is really unbelievable.

depends on how many batteries were in the facility, if one goes up chances are the rest go too. Can halon systems not put out lithium fires?

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#382
post #122
post #80

https://phrack.org/issues/72/7_md#article

Woah, read the timeline at the top of this. The fire happened the very day the government ordered onsite inspection was supposed to start due to Chinese/NK hacking.

Such coincidences do happen. 20 years ago the plane which was carrying all the top brass of the Russian Black Sea Fleet as well as the Fleet’s accounting documentation for inspection to Moscow burst in flames and fell to the ground while trying to get airborne. Being loaded with fuel it immediately became one large infernal fireball. By some miracle no top brass suffered even minor burn/injury while all the accounting documentation burned completely.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#384
post #131

Earlier quoted context omitted.

Good thing Korea has cloud providers, apparently Kakao has even gone...beyond the cloud! https://kakaocloud.com/ https://www.nhncloud.com/ https://cloud.kt.com/ To name a few.

They are overwhelmingly whitelabeled providers. For example, Samsung SDI Cloud (the largest "Korean" cloud) is an AWS white label. Korea is great at a lot of engineering disciplines. Sadly, software is not one of them, though it's slowly changing. There was a similar issue a couple years ago where the government's internal intranet was down a couple days because someone deployed a switch in front of outbound connecti…

    > Korea is great at a lot of engineering disciplines. Sadly, software is not one of them
I disagree. People say the same about Japan and Taiwan (and Germany). IMHO, they are overlooking the incredible talents in embedded programming. Think of all of the electronics (including automobiles) produced in those countries.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#385
post #324
post #224

Earlier quoted context omitted.

Silver lining: it's likely that technically there is a backup (section 1.3). It's just in NK or china. Yikes.

I don't backup my phone. The NSA does it for me!

In the same respect /dev/null can backup mine. Good luck getting data back.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#386
post #119

Earlier quoted context omitted.

How does this even make sense business wise for AWS? Is their cost per unit so low?

They charge little for storage and upload, but download, so getting your data back, is pricey.

Mate, this is better than an entire nation's data getting burned.

Yes its pricey but possible.

Now its literally impossible.

I think that AWS Glacier at that scale should be the thing preferred as they had their own in house data too but they still should've wanted an external backup and they are literally by the govt. so they of all people shouldn't worry about prices.

Have secure encrypted backups in aws and other possibilities too and try to create a system depending on how important the treat model is in the sense that absolutely filter out THE MOST important stuff out of those databases but that would require them to label it which I suppose would make them gather even more attention to somehow exfiltrate / send them to things like north korea/china so its definitely a mixed bag.

my question as I said multiple times, why didn't they build a backup in south korea only and used some other datacentre in south korea only as the backup to not have to worry about encryption thing but I don't really know and imo it would make more sense for them to actually have a backup in aws and not worry about encryption personally since I find the tangents of breaking encryption a bit unreasonable since if that's the case, then all bets are off and the servers would get hacked too and that was the point of phrack with the advanced persistent threat and so much more...

are we all forgetting that intel has a proprietory os minix running in the most privileged state which can even take java bytecode through net and execute it and its all proprietory. That is a bigger security threat model personally to me if they indeed are using that which I suppose they might be using.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#387

Earlier quoted context omitted.

They are overwhelmingly whitelabeled providers. For example, Samsung SDI Cloud (the largest "Korean" cloud) is an AWS white label. Korea is great at a lot of engineering disciplines. Sadly, software is not one of them, though it's slowly changing. There was a similar issue a couple years ago where the government's internal intranet was down a couple days because someone deployed a switch in front of outbound connecti…

I spent a week of my life at a major insurance company in Seoul once, and the military style security, the obsession with corporate espionage, when all they were working on was an internal corporate portal for an insurance company… The developers had to use machines with no Internet access, I wasn’t allowed to bring my laptop with me lest I use it to steal their precious code. A South Korean colleague told me it was…

    > South Korean corporate management is stuffed full of ex-military officers
For those unaware, all "able-bodied" South Korean men are required to do about two years of military service. This sentence doesn't do much for me. Also, please remember that Germany also had required military service until quite recently. That means anyone "old" (over 40) and doing corp mgmt was probably also a military officer.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#388

S. Korea has the most backward infosec requirements. It's wild

Having just visited South Korea last year, one thing that sort of caught me off guard was the lack of Google Maps or other major direction system. I wasn’t aware but turns out anything considered “detailed mapping” infrastructure has to be ran stored and on South Korean soil, probably lots of other requirements. So you’re stuck with some shotty local mapping systems that are just bad. There may be a point in time it…

Why didn't you use Kakao Maps or Naver Maps? They're not shotty and work just fine, even if you don't read Korean, you can quickly guess the UI based on the icons.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#389
post #68

> The Interior Ministry explained that while most systems at the Daejeon data center are backed up daily to separate equipment within the same center and to a physically remote backup facility, the G-Drive’s structure did not allow for external backups. This is why I don't really want to run my own cloud :) Actually testing the backups is boring. That said, ones the flames are out, they might actually be able to reco…

Testing backups is boring. If you want exciting, test restores!

Hm, care to elaborate. I kinda liked this idea even though I know that it shouldn't make much sense but still lol, would this have any benefits over testing backups other than the excitement lol
Post reply on HN