Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Danish cloud host says customers ‘lost all data’ after ransomware attack

techcrunch.com

Post reply on HN
Print view View original

51–60 of 81 posts

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#51

Post by _joel »

benterix wrote: post #29
akasakahakada wrote: post #13

Still cloud is better after all. 32GB is enough for all digital device and shooting 8k videos for 1000 centuries. No one should make backups. Storage expansion especially SD card must not be allowed on phone, tablet and laptop. Local storage is not secure and adding sd card to phone will introduce water leak. Meanwhile SIM card slot do not introduce water leak because obviously there is magic. Also SD slot is waste o…

I don't know why you are being downvoted, maybe people don't like the form, but the fact that device manufacturers are removing useful features such as the ability to expand the storage of your device is infuriating.

HN doesn't do sarcasm.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#52

Post by konschubert »

andrewstuart wrote: post #46
konschubert wrote: post #34

Earlier quoted context omitted.

At this standard, many small online businesses would not be possible. I think that would be a loss.

It’s the minimum standard for any company big enough to employ a CTO.

And smaller companies?

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#53

Post by _joel »

tryauuum wrote: post #47
PrimeMcFly wrote: post #21

The solution to ransomware? Backups. It's not more complicated than that. It's honestly puzzling that ransomware is the issue it is, crippling entire organizations. It just means they have inept IT teams. Sucks this Danish cloud host provider didn't back stuff up properly.

shaming is easy maybe they were backing up their stuff properly, but backups were wiped as well. even if you have some fancy append-only storage someone still has access to it and that access can be misued.

> but backups were wiped as well

Then they're not offline backups, are they? I know what you mean but backing up to a network drive with R/W is not a backup, it's a copy.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#54

Post by crimsontech »

tyingq wrote: post #15

" there was no evidence that customer data was copied out or exfiltrated from its systems" ...after a thorough analysis of the now encrypted logs?

This statement get me every time I see it. Could just mean they weren’t logging anything so they have no evidence.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#55

Post by andrewstuart »

konschubert wrote: post #52
andrewstuart wrote: post #46

Earlier quoted context omitted.

It’s the minimum standard for any company big enough to employ a CTO.

And smaller companies?

Well I don’t know who is going to tell them without a CTO, but the first and most important priority of IT is disaster recovery.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#56

Post by nurettin »

dusted wrote: post #6

Yesterday, All those backups seemed a waste of pay. Now my database has gone away. Oh I believe in yesterday. Suddenly, There's not half the files there used to be, And there's a milestone hanging over me The system crashed so suddenly. I pushed something wrong What it was I could not say. Now all my data's gone and I long for yesterday-ay-ay-ay. Yesterday, The need for back-ups seemed so far away. I knew my data was…

> A true backup must be physically and logically separate.

That doesn't stop it from being targeted by hackers. No amount of hindsight will save your backups unless they are in an offline cold storage somewhere protected by men-at-arms.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#57

Post by rypskar »

utybo wrote: post #45
smarx007 wrote: post #39

Shoddy journalism strikes again. How do we know that all data was lost and the notice on the homepage was not uploaded by hackers? "CloudNordic could not be reached for comment." It's a journalist's job to reach either the company or affected customers to verify the facts.

Because CloudNordic says so on their temporary webpage. https://www.cloudnordic.com/ (in Danish, I used Google Translate to check and the result seems fine) I don't think we need fearmongering about "shoddy journalism" for something so easy to check. Edit: in Danish not Norwegian, my apologies

>>in Norwegian

The text is in Danish, since it is a Danish company. Norwegian and Danish is close, but some words have totally different meanings

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#58

Post by tommiegannert »

dusted wrote: post #6

Yesterday, All those backups seemed a waste of pay. Now my database has gone away. Oh I believe in yesterday. Suddenly, There's not half the files there used to be, And there's a milestone hanging over me The system crashed so suddenly. I pushed something wrong What it was I could not say. Now all my data's gone and I long for yesterday-ay-ay-ay. Yesterday, The need for back-ups seemed so far away. I knew my data was…

Online mirrors are fine if they have boundaries that make them very certainly append-only.

Opening up scp/rsync and saying "our client only writes new files" is bad. Using a dedicated stream-writing interface over TLS is probably fine.

As for the other attack vector: segregating the admin credentials so that the stream-writing interface cannot be bypassed, yeah, fun. 2FA only gets you so far.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#59

Post by fuzztester »

_joel wrote: post #51
benterix wrote: post #29

Earlier quoted context omitted.

I don't know why you are being downvoted, maybe people don't like the form, but the fact that device manufacturers are removing useful features such as the ability to expand the storage of your device is infuriating.

HN doesn't do sarcasm.

They do, quite a bit.

Just check the number of comments with /s at the end.

People sometimes even say "you forgot to put a /s" or the like, in reply to an obviously sarcastic comment.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#60

Post by tommiegannert »

smarx007 wrote: post #49
utybo wrote: post #45

Earlier quoted context omitted.

Because CloudNordic says so on their temporary webpage. https://www.cloudnordic.com/ (in Danish, I used Google Translate to check and the result seems fine) I don't think we need fearmongering about "shoddy journalism" for something so easy to check. Edit: in Danish not Norwegian, my apologies

How can you trust the webpage of a system that was recently attacked?

If not attacked and the page says not attacked: trustworthy.

If not attacked and the page says attacked: not trustworthy.

If attacked and the page says not attacked: not trustworthy.

If attacked and the page says attacked: trustworthy.

As long as the page says "attacked", it seems likely they were attacked? Why would they state it themselves if it wasn't true, losing trust for no reason?

Post reply on HN