Battlestar Galactica Lessons from Ransomware to the Pandemic
theinsight.org
theinsight.org
The market is actually doing what it's supposed to in this case even if it is reactionary. All hope is not lost.
Even in these “secure” environments the bar is still remarkably low.
To your point, one if the things they talked about was that it was also in the insurance company’s interest to give tips to help lower risk of major litigation. I tend to be similarly cynical in terms of fault and blame but I wonder if policies related to cyber security will have similar incentives to help secure things as judgements get bigger in this soace too.
Environments engineered with multiple failsafes, defense in depth, avoidance of SPOFs (including hardware models, manufacturers, chipsets, OSes, web servers, etc.) will be very difficult to fully penetrate and should be able to survive attacks.
Of course none of the above is cheap or fast to do, so it usually doesn't get done.
https://www.theinsight.org/p/battlestar-galactica-lessons-fr...
The average person has a pretty small abilility to store gas, even in NC.
https://en.wikipedia.org/wiki/Colonial_Pipeline_cyberattack
About 45% of all fuel consumed on the East Coast arrives via the pipeline system.
> Fifteen associated tank farms... provide a 45-day supply for local communities.
Such buffer capacity makes sense considering how long deliveries actually take:
> It generally takes from 14 to 24 days for a batch to get from Houston, Texas to the New York harbor, with 18.5 days the average time.
See https://en.wikipedia.org/wiki/Colonial_Pipeline
Also consider where the shortages are occurring: in sprawling, rural and exurban areas where the last-mile infrastructure is likely exceptionally thin; that is, much less able to handle surges. It's not just computer and car manufacturers that optimize for "on-demand inventory"--i.e. cut carry costs to the bone, sacrificing volatility resilience.
When old ZIP and FAT will break, embedded systems^H^H IoT will also.
It was a WordPress website, and I got an email that the website was down. I visited the website and saw the ransom, something something pay us in bitcoin.
I had been using their backup services for a long time, so it took me three minutes to create a new server and import the data and the site was down for no longer than 10 minutes.
I changed the users passwords and had virtually forgotten about it for a few weeks. When I was reminded about it a few weeks later, when a user asked why the password was changed.
Does it cost too much to do backups?
As far as I know they have backups and are working on restoring from them.
Keeping spare parts (backups) is good. But there's a difference between pulling your bicycle in the garage and replacing the inner tube and trying to rebuild your car from scratch while you're doing 60mph down the freeway.