Another cyber intrusion...

[Beetlegeuse]

In this day and age there is no excuse for not keeping verified backups of all mission-essential data. None. Which means you take the data offline and test it for malware before archiving it OFF LINE (and preferably OFF SITE). Storage memory is just too damn cheap not to be taking advantage of it.

Administrators forget that their first obligation is to the ones and zeroes (1s and 0s) stored on those damn drives. I practice better information security in my home than most of these yahoos do in the workplace.

Whether it's more expensive than paying the ransom isn't the point. The point is that if you remove the profit motive, they move on to some other way to extort money from people. Rewarding them for doing wrong to you is a non-starter. We should be tracking them down and zipping them up in body bags.


But then I have a rather liberal viewpoint of what should constitute a "capital" offense. This is a matter of national security. They should round these fuckers up and ship them to Gitmo and let them hang by their heels for the next 20 years.

[almostgone]

In this day and age there is no excuse for not keeping verified backups of all mission-essential data. None. Which means you take the data offline and test it for malware before archiving it OFF LINE (and preferably OFF SITE). Storage memory is just too damn cheap not to be taking advantage of it.

Administrators forget that their first obligation is to the ones and zeroes (1s and 0s) stored on those damn drives. I practice better information security in my home than most of these yahoos do in the workplace.

Whether it's more expensive than paying the ransom isn't the point. The point is that if you remove the profit motive, they move on to some other way to extort money from people. Rewarding them for doing wrong to you is a non-starter. We should be tracking them down and zipping them up in body bags.


But then I have a rather liberal viewpoint of what should constitute a "capital" offense. This is a matter of national security. They should round these fuckers up and ship them to Gitmo and let them hang by their heels for the next 20 years.

I can't believe that any inserted or modified coding isn't automatically pushed to a virtual "sandbox" for containment and ransomware forensics before assimilation.

And, agreed, never pay the random. It creates a self-sustaining scam.

[almostgone]

I guess they now fall into the cyber-terrorist classification. Perhaps they'll treat them as such if there's a successful snatch and grab.