Live data from Hacker News

Fire destroys S. Korean government's cloud storage system, no backups available

koreajoongangdaily.joins.com

951–960 of 987 posts

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#952

Earlier quoted context omitted.

One-time pad is provable secure. But it is not useful for backups, of course.

OTP can be useful especially for backups. Use a fast random number generator (real, not pseudo), write output to fill tape A. XOR the contents of tape A to your backup datastream and write result to Tape B. Store tape A and B in different locations.

But you have one copy of the key stream. It is not safe. You need at least two places to store at least two copies of the key stream. You cannot store it in non-friendly cloud (and this thread started from backing up government sensitive data into cloud owned by other country, possibly adversary one.

If you have two physically separate places which you could trust key stream, you could use them to backup non-encrypted (or "traditionally" encrypted) data itself, without any OTP.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#953

Earlier quoted context omitted.

Every castle wall can be broken with money.

How much money is required to decrypt a file encrypted with a 256-bit AES key?

How much person(s) who know the key will take to change country and don't work anymore?

Or how much it is cost to kidnap significant one of key bearer(s)?

I think, it is very reasonable sums for governments of almost any country.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#955

Earlier quoted context omitted.

a) Incarceration time for IT execs and responsible engineers. b) Let companies go out of business once they fail to protect their own crucial data. None of that is possible.

so you are not proposing anything real then? I can pull "magic indestructible backup solution" out of my arse, too :(

No propositions at this point. I have no idea how to fix the problem.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#956
post #948

Earlier quoted context omitted.

It could have. But replacing a UPS is usually done to right time pressures. the problem is, you can rarely de-energise UPS batteries before replacing them, you just need to be really careful when you do it. Depending on the UPS, Bus bars can be a mother fucker to get on, and of they touch energised they tend to weld together. With lead acid, its pretty bad (think molten metal and lots of acidic, toxic and explosive g…

Don't you have to put UPS's in bypass mode precisely for this reason while doing maintenance on them ?

Yeah, but the problem is that the batteries are still full of juice.

Obviously for rack based UPSs you'd "just" take out the UPS, or battery drawer, and replace somewhere more safe, or better yet, swap out the entire thing.

For more centralised UPSs that gets more difficult. The shitty old large UPSs were a bunch of cells bolted to a bus bar, and then onto the switchgear/concentraitor.

for Lithium, I would hope its proper electrical connectors, but you can never really tell.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#957

Earlier quoted context omitted.

Several other countries have similar requirements with regards to storing and serving maps locally. If you take a moment to think about it, what's weird is that so many countries have simply resorted to relying on Google Maps for everyday mapping and navigation needs. This has become such a necessity nowadays that relying on a foreign private corporation for it sounds like a liability.

Local mapping efforts and allowing Google Maps to operate aren't mutually exclusive though. I don't see how it's weird that people can choose which map app they use.

Agreed, I would expect a government to provide their own mapping system, independent of any private entity. It’s so critical for a governments operation and general security needs.

What’s odd (to me) is trying to regulate other groups from generating maps of your nation when you have no jurisdiction over them. That’s akin to the US telling all South Korean governments they can’t create maps of the US unless they operate under heavy supervision or something of that nature.

It’s impractical, largely unenforceable, and any nation probably has independent mapping of foreign nations, especially their adversaries, should they need them for conflicts, regardless of what some nation wants to oppose over them in terms of restrictions. I guarantee the US government has highly detailed maps of Korea.

So who exactly are these regulations protecting? In this case they’re just protecting private mapping groups that reside in their country against competition.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#958

Earlier quoted context omitted.

Having just visited South Korea last year, one thing that sort of caught me off guard was the lack of Google Maps or other major direction system. I wasn’t aware but turns out anything considered “detailed mapping” infrastructure has to be ran stored and on South Korean soil, probably lots of other requirements. So you’re stuck with some shotty local mapping systems that are just bad. There may be a point in time it…

Why didn't you use Kakao Maps or Naver Maps? They're not shotty and work just fine, even if you don't read Korean, you can quickly guess the UI based on the icons.

I tried both and the lack of an English UI made a lot of it non-unintuitive, especially when it came to search and finding local businesses walking around. There were some other annoyances, like when I travel for leisure I enjoy researching an area ahead of time bookmarking places to overlay on a map, and being able to organically explore the area as I move around. I found that very difficult on Naver (I don’t recall the details but I know being able to search for types of businesses in English was part of the issue).

I believe performance wise it was also pretty sluggish from what I remember. I’m by no means saying it was unusable, it got me through somewhat functionally but with a lot of extra effort on my behalf. I also had an international data plan and wasn’t able to see if I could precache the map set vs streaming it as needed over wireless.

I often like to look at restaurants, menus, prices, reviews as well to scope out a place quickly before going there. That process was also tedious (to be fair it could be that I’m not familiar with the UI).

The question is why did I have to use Naver or Kakao in the first place. I’d rather just use the system I already enjoy and am quite proficient with using it, not be forced to play with some new app that I need useful information from for some unclear reason.

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#959

Earlier quoted context omitted.

not use email in this day and age?

Okay, how would you approach companies for responsible discolusure.

threat email as push notification. "here's a link"

Re: Fire destroys S. Korean government's cloud storage system, no backups available

#960

Earlier quoted context omitted.

Yes, and US bad at everything else.

The US economy is one of the world's most diverse in terms of exports: https://oec.world/en/visualize/tree_map/hs92/export/usa/all/... Side note: Why is there so much fact-free anti-US sentiment on HN?

> Why is there so much fact-free anti-US sentiment on HN?

Firstly, it's the US government themselves saying there are imbalances and therefore they have to add tariffs on imports from almost every country. It's the US government who spreads hate towards most other countries, not the other way around.

Secondly, could it be because people living in the US seem to not notice (or don't want to believe) the US is turning into a dictatorship and the rest of the world does. People don't like the new values of the USA, they liked the old values. If it continues like this, it's game over for the USA.

Post reply on HN