infernal machines posted:

did you see the part where the article says

***
The cyberattack has been characterized in the media as a "ransomware" event.

However, ransomware attacks typically involve locking an organization out of its electronic files rather than stealing data.

In this instance, Lifelabs said a payment was made to the cybercriminals to retrieve data.
***

James Baud posted:

Potato, potato.

James Baud posted:

Non-technical CEO asked technical question and doesn't know answer is just miles up there.

Even if the data was encrypted, any non-automated breach is typically going to also include scoring the means to decrypt it.

You know enough about this stuff to know better.

quote:

I want to emphasize that at this time, our cyber security firms have advised that the risk to our customers in connection with this cyber-attack is low and that they have not seen any public disclosure of customer data as part of their investigations, including monitoring of the dark web and other online locations.

quote:

Lack of accountability across the entire organization, no alignment or collaboration, silo'd in every way possible, resources used incorrectly (i.e. people and roles), zero transparency and almost zero processes, lack of engagement and responsiveness from staff,

Grace Baiting posted:

yes our data was encrypted securely at probably all times, even a bit too securely for a minute there, ha ha ha! no further questions

graph posted:

speaking of, plexpass is on sale for the next two days for 90 bucks

Partycat posted:

what do you do with this if you’re not connecting it to an internet crime depot

Partycat posted:

internet crime depot

Hollow Talk posted:

During the attack, all of our data was encrypted.

Hollow Talk posted:

During the attack, all of our data was encrypted.

infernal machines posted:

piracy dads

could be a ganagtag

CRIP EATIN BREAD posted:

pseudorandom name posted:

open source backup program Duplicity supports round-robining your data across the following backends:

Amazon S3
Backblaze B2
DropBox
ftp
GIO
Google Docs
Google Drive
HSI
Hubic
IMAP
local filesystem
Mega.co
Microsoft Azure
Microsoft Onedrive
par2
Rackspace Cloudfiles
rsync
Skylabel
ssh/scp
SwiftStack
Tahoe-LAFS
WebDAV

Hollow Talk posted:

During the attack, all of our data was encrypted.

James Baud posted:

Even if the data was encrypted, any non-automated breach is typically going to also include scoring the means to decrypt it.

Hollow Talk posted:

During the attack, all of our data was encrypted.

Partycat posted:

internet crime depot

Hollow Talk posted:

During the attack, all of our data was encrypted.

Lain Iwakura posted:

I want to emphasize that at this time, our cyber security firms have advised that the risk to our customers in connection with this cyber-attack is low and that they have not seen any public disclosure of customer data as part of their investigations, including monitoring of the dark web and other online locations.

Shame Boy posted:

man imagine if that holds up in court somehow

"oh it was encrypted at rest in the specific window of time this court case is dealing with"

graph posted:

speaking of, plexpass is on sale for the next two days for 90 bucks

Shame Boy posted:

man imagine if that holds up in court somehow

"oh it was encrypted at rest in the specific window of time this court case is dealing with"

Jenny Agutter posted:

Does this require a coupon or something? I'm not seeing it

ewiley posted:

hopefully someone can explain how keys work to the court, but I'm not super confident about that

Pile Of Garbage posted:

one of our customers got pen-tested recently and failed hard, the testers got domain admin within a couple hours. as usual the culprit was a fuckin "scheduled task service account" which is a theme i've seen all over. it was a member of domain admins and the password was something like "scheduledtask" but with some symbols/numbers/upper-case substitutions.

a shameful display

Volmarias posted:

I don't think that's too hard to make into plain English.

"When spies talk to each other, they send each other secret messages. The receiver needs to know the special code to make the message readable. For example, say in our special code A is 1, B is 2, C is 3 and so forth. Now imagine if I took this document, turned it into numbers, but added 1 to each number. A is 2, B is 3, and so forth. There's no letter after Z so when 26 becomes 27 we then turn it back into a 1.

Adding by 1 here is called the encryption key, because it's the key we use to make the message encrypted, or scrambled, even if you know how to turn the numbers back to letters. If you know to subtract 1 then turn the numbers back to letters, that's called the decryption key, and the person who you want to read the message needs that to decrypt it, or make readable, the message and understand it. If you just tried to turn the numbers back to letters without this key, the word 'Hello' would come out as 'Icmmp' and so forth.

Computers use a special kind of math to encrypt their messages, called public key cryptography. This is so called because the encryption key, which you use to scramble the message, can be sent to anyone you want to send you a message. Unlike the simple example before, the way messages can be scrambled for public key cryptography make it nearly impossible for someone to decrypt, or unscramble, the message without the decryption key. That decryption key is called the private key, because you want to keep it private. Anyone who wants to make sense of the message needs that key, or they can't understand the message. This is how computers talk to each other on the internet when you go to a secure website; they send each other the public keys, which is safe to do, and then use their private key to read the messages sent to them so that no one else can understand them.

In this case, instead of encrypting messages, the hackers encrypted the files. It's the same process with the same result. The hacker uses their public key to scramble all of the files, and then holds the private key for ransom. If there are no backups, or extra copies, of the files somewhere else, there is no way to unscramble the files."

Etc etc

Volmarias posted:

"When spies talk to each other

Volmarias posted:

I don't think that's too hard to make into plain English.

"When spies talk to each other

Chris Knight posted:

https://twitter.com/a_greenberg/status/1207340911463669760

infernal machines posted:

a question from ignorance, in the case of PIPEDA and related data governance requirements, do they qualify the nature of the encryption used for data at rest? everything i've seen seems to suggest something like bitlocker/fde technically meets the requirement even though it's absolutely useless in the case of a breach of a live system.

quote:

Protect personal information in a way that is appropriate to how sensitive it is.

Protect all personal information (regardless of how it is stored) against loss, theft, or any unauthorized access, disclosure, copying, use or modification.

[...]

• Develop and implement a security policy to protect personal information.
  
• Use appropriate security safeguards to provide necessary protection. These can include:
  
  • physical measures (e.g., locked filing cabinets, restricting access to offices, and alarm systems);
    
  • up-to-date technological tools (e.g., passwords, encryption, firewalls and security patches);
    
  • organizational controls (e.g., security clearances, limiting access, staff training and agreements).
    
• Consider the following factors when selecting the right safeguard:
  
  • the sensitivity of the information and the risk of harm to the individual. For instance, health and financial information would be considered highly sensitive;
    
  • the amount of information;
    
  • the extent of distribution;
    
  • the format of the information (e.g., electronic or paper);
    
  • the type of storage; and
    
  • the types and levels of potential risk your organization faces.
    
• Review security safeguards regularly to ensure they are up to date, and that you have addressed any known vulnerabilities through regular security audits and/or testing.
  
• Make your employees aware of the importance of maintaining the security and confidentiality of personal information, and hold regular staff training on security safeguards.
  

D. Ebdrup posted:

Has ARM pulled an Intel about a speculative execution bug after ERET? Because from a recent fix in FreeBSD, I found that it was (EDIT: quietly) fixed in Linux almost a year ago and this POC seems recently new.

Midjack posted:

stoll owns and you owe it to yourself to get one of his klein bottle mugs, mine is 20 years old and still great. the paperwork he includes in the box is hilarious.