News for hackers. Stuff that matters.

A comment on Matrix.org hacked. Parent comment

Re:Matrix.org hacked by F30 on Friday April 12, 2019 @04:39AM (#19643116)
I am highly skeptical when people taking about "rebuilding [the whole] infrastructure" in a few hours. Even more so when restoring all data from breached systems and before a thorough incident analysis. Show me the org which can just pull that off.
[ Parent | on HN ]
Re:Matrix.org hacked by erikbye on Friday April 12, 2019 @07:17AM (#19643772)
This is doable with proper IaC implementation, and if your org does not have RPO/RTO on lock they're doing it wrong.

Events like Matrix experienced now do not lead to panicked frenzy when this is in place.

[ Parent | on HN ]
Re:Matrix.org hacked by F30 on Friday April 12, 2019 @11:41AM (#19645801)
It is certainly doable, but I doubt that most people have IaC which is complete, reproducible and tested enough. And the data migration from the breached host still means some risk.
[ Parent | on HN ]
Re:Matrix.org hacked by pferde on Friday April 12, 2019 @04:47AM (#19643150)
It's quite common in enterprise to have a RTO of a few hours, and RPO of a few minutes, even for infrastructure with terrabytes of data. Of course, many moneys are paid for being able to do that.
[ Parent | on HN ]