Live data from Hacker News

Fire destroys S. Korean government's cloud storage system, no backups available

koreajoongangdaily.joins.com

701–710 of 987 posts

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#701
post #694

Earlier quoted context omitted.

[flagged]

Considering that companies will do everything to avoid doing sensible things that cost money - yes, of course the government has to step in and mandate things like this. It's no different from safety standards for car manufacturers. Do you think it's ridiculous that the government tells them how to build cars? And similarly here: If the company is big enough / important enough, then the cost to society if their IT is…

[flagged]

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#702

Earlier quoted context omitted.

[flagged]

> This is incredible. Government telling me how to backup my data. Incredible. No more incredible than the government telling you that you need liability insurance in order to drive a car. Do you think that is justifiable?

The difference is that you cannot choose who you're sharing a road with while you can usually choose your IT service providers. You could, for instance, choose a cheaper provider and make your own backups or simply accept that you could lose your data.

Where people have little or no choice (e.g government agencies, telecoms, internet access providers, credit agencies, etc) or where the blast radius is exceptionally wide, I do find it justifiable to mandate safety and security standards.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#703

Earlier quoted context omitted.

The issue here is not refusing to use a foreign third party. That makes sense. The issue is mandating the use of remote storage and not backing it up. That’s insane. It’s like the most basic amount of preparation you do. It’s recommended to even the smallest of companies specifically because a fire is a risk. That’s gross mismanagement.

Nothing increases the risk of servers catching fire like government investigators showing up to investigate allegations that North Korea hacked the servers.

>This file contains the complete set of papers, except for a number of secret documents, a few others which are part of still active files, some correspondence lost in the floods of 1967...

>Was 1967 a particularly bad winter?

>No, a marvellous winter. We lost no end of embarrassing files.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#704

Earlier quoted context omitted.

They charge little for storage and upload, but download, so getting your data back, is pricey.

Mate, this is better than an entire nation's data getting burned. Yes its pricey but possible. Now its literally impossible. I think that AWS Glacier at that scale should be the thing preferred as they had their own in house data too but they still should've wanted an external backup and they are literally by the govt. so they of all people shouldn't worry about prices. Have secure encrypted backups in aws and other…

I just responded to "How does this even make sense business wise for AWS?"

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#705
post #479

Earlier quoted context omitted.

Nothing increases the risk of servers catching fire like government investigators showing up to investigate allegations that North Korea hacked the servers.

It _almost_ sounds like you're suggesting the fire was deliberate!

It is very convenient timing

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#706
post #664

Earlier quoted context omitted.

(Without knowing the precise nature of these laws) I would expect that they don't forbid you to store backups elsewhere. It's just that they mandate that certain types of data be backed up in sufficiently secure and independent locations. If you want to have an additional backup (or backups of data not covered by the law) in a more convenient location, you still can.

> sufficiently secure and independent locations This kind of provision requires enforcement and verification. Thus, a tech spec for the backup procedure. Knowing Germany good enough, I'd say that these tech spec would be detrimental for the actual safety of the backup.

wild speculation and conjecture

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#707

Earlier quoted context omitted.

> sufficiently secure and independent locations This kind of provision requires enforcement and verification. Thus, a tech spec for the backup procedure. Knowing Germany good enough, I'd say that these tech spec would be detrimental for the actual safety of the backup.

wild speculation and conjecture

Agree. It is based on my experience with German bureaucracy.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#708

Earlier quoted context omitted.

Nope: The other way around. If you are of a certain size, you are required to ensure certain criteria. NIS-2 is the EU directive and it more or less maps to ISO27001 which includes risk management against physical catastrophes. https://www.openkritis.de/eu/eu-nis-2-germany.html Of course you can do backups if you are smaller, or comply with such a standard if you so wish.

[flagged]

I'm usually first in line when talking shit about the German government, but here I am absolutely for this. I was really positively surprised when I had my apprenticeship at a publishing company and we had a routine to bring physical backups to the cellar of a post office every morning. The company wasn't that up-to-date with most things, but here they were forced to a proper procedure which totally makes sense. They even had proper desaster recovery strategies that included being back online within less than 2 hours hours even after a 100% loss of all hardware. They had internal jokes that you could have nuked their building and as long as one IT guy survived because he was in the home office, he could at least bring up the software within a day.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#709

Earlier quoted context omitted.

this was a plot in a Mr. Robot episode, heh. Life imitating art?

was there a battery hacking episode? I can't remember the show anymore, might be due in for a rewatch it seems.

They hacked the firmware of the UPSs inside e-corp to destroy all paper records. The steel mountain hack was messing with the climate controls using a raspi to destroy tape archives

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#710

Earlier quoted context omitted.

[flagged]

I'm usually first in line when talking shit about the German government, but here I am absolutely for this. I was really positively surprised when I had my apprenticeship at a publishing company and we had a routine to bring physical backups to the cellar of a post office every morning. The company wasn't that up-to-date with most things, but here they were forced to a proper procedure which totally makes sense. They…

It's incredible knowing the bureaucracy of Germany.
Post reply on HN