Earlier quoted context omitted.
[flagged]
Considering that companies will do everything to avoid doing sensible things that cost money - yes, of course the government has to step in and mandate things like this. It's no different from safety standards for car manufacturers. Do you think it's ridiculous that the government tells them how to build cars? And similarly here: If the company is big enough / important enough, then the cost to society if their IT is…
Fire destroys S. Korean government's cloud storage system, no backups available
701–710 of 987 posts
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#702Earlier quoted context omitted.
[flagged]
> This is incredible. Government telling me how to backup my data. Incredible. No more incredible than the government telling you that you need liability insurance in order to drive a car. Do you think that is justifiable?
Where people have little or no choice (e.g government agencies, telecoms, internet access providers, credit agencies, etc) or where the blast radius is exceptionally wide, I do find it justifiable to mandate safety and security standards.
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#703Earlier quoted context omitted.
The issue here is not refusing to use a foreign third party. That makes sense. The issue is mandating the use of remote storage and not backing it up. That’s insane. It’s like the most basic amount of preparation you do. It’s recommended to even the smallest of companies specifically because a fire is a risk. That’s gross mismanagement.
Nothing increases the risk of servers catching fire like government investigators showing up to investigate allegations that North Korea hacked the servers.
>Was 1967 a particularly bad winter?
>No, a marvellous winter. We lost no end of embarrassing files.
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#704Earlier quoted context omitted.
They charge little for storage and upload, but download, so getting your data back, is pricey.
Mate, this is better than an entire nation's data getting burned. Yes its pricey but possible. Now its literally impossible. I think that AWS Glacier at that scale should be the thing preferred as they had their own in house data too but they still should've wanted an external backup and they are literally by the govt. so they of all people shouldn't worry about prices. Have secure encrypted backups in aws and other…
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#705Earlier quoted context omitted.
Nothing increases the risk of servers catching fire like government investigators showing up to investigate allegations that North Korea hacked the servers.
It _almost_ sounds like you're suggesting the fire was deliberate!
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#706Earlier quoted context omitted.
(Without knowing the precise nature of these laws) I would expect that they don't forbid you to store backups elsewhere. It's just that they mandate that certain types of data be backed up in sufficiently secure and independent locations. If you want to have an additional backup (or backups of data not covered by the law) in a more convenient location, you still can.
> sufficiently secure and independent locations This kind of provision requires enforcement and verification. Thus, a tech spec for the backup procedure. Knowing Germany good enough, I'd say that these tech spec would be detrimental for the actual safety of the backup.
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#707Earlier quoted context omitted.
> sufficiently secure and independent locations This kind of provision requires enforcement and verification. Thus, a tech spec for the backup procedure. Knowing Germany good enough, I'd say that these tech spec would be detrimental for the actual safety of the backup.
wild speculation and conjecture
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#708Earlier quoted context omitted.
Nope: The other way around. If you are of a certain size, you are required to ensure certain criteria. NIS-2 is the EU directive and it more or less maps to ISO27001 which includes risk management against physical catastrophes. https://www.openkritis.de/eu/eu-nis-2-germany.html Of course you can do backups if you are smaller, or comply with such a standard if you so wish.
[flagged]
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#709Earlier quoted context omitted.
this was a plot in a Mr. Robot episode, heh. Life imitating art?
was there a battery hacking episode? I can't remember the show anymore, might be due in for a rewatch it seems.
Re: Fire destroys S. Korean government's cloud storage system, no backups available
#710Earlier quoted context omitted.
[flagged]
I'm usually first in line when talking shit about the German government, but here I am absolutely for this. I was really positively surprised when I had my apprenticeship at a publishing company and we had a routine to bring physical backups to the cellar of a post office every morning. The company wasn't that up-to-date with most things, but here they were forced to a proper procedure which totally makes sense. They…